Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa
File:                     3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier:          wsJFEQdgZ1wvQeYl5g5mS9DhGTlCygrQHGvqTGpttNU=
Subject key identifier:   F3:04:73:7F:F4:DD:51:EB:76:F9:BA:3C:C9:B3:96:BD:52:7D:81:F0
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       104EEBE535A0802C739B12475E6BD172B0C359A2
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa
Signing time:             Tue 04 Feb 2025 18:49:58 +0000
ROA not before:           Tue 04 Feb 2025 18:44:58 +0000
ROA not after:            Tue 03 Feb 2026 18:49:58 +0000
asID:                     263174
IP address blocks:        200.29.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:4e:eb:e5:35:a0:80:2c:73:9b:12:47:5e:6b:d1:72:b0:c3:59:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Feb  4 18:44:58 2025 GMT
            Not After : Feb  3 18:49:58 2026 GMT
        Subject: CN=F304737FF4DD51EB76F9BA3CC9B396BD527D81F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c3:0f:e6:e9:92:60:2b:e5:17:1f:13:35:e9:
                    23:f1:52:cf:39:70:ac:2e:26:ed:19:2c:0d:12:ed:
                    d8:31:18:43:64:af:a5:91:a4:9a:5d:a6:0a:e5:ab:
                    6f:9a:db:e0:7c:8b:62:5b:bc:f5:1b:33:81:ef:2e:
                    a8:32:bd:f3:a8:8d:a3:25:97:64:5b:62:29:77:50:
                    4b:f7:18:0d:42:f6:20:3b:c8:a4:0a:19:f1:e0:48:
                    bc:97:b2:a3:0a:f4:23:ff:29:e6:9a:a7:10:21:8f:
                    01:a0:95:d5:49:17:20:f4:c7:ce:20:09:37:51:6a:
                    76:b7:23:c5:19:05:44:66:31:2f:2b:1c:ad:c2:28:
                    19:a8:c3:d4:cd:63:06:71:7a:57:74:32:b6:56:3c:
                    0a:6a:8f:9d:19:fa:c2:fc:92:46:47:30:dd:1c:e6:
                    73:95:97:29:7e:a5:33:97:0b:f7:75:37:9d:4e:e3:
                    b2:0b:17:40:de:13:76:d3:1b:50:ad:76:50:60:35:
                    36:21:fe:95:c0:5d:9e:ed:37:07:0c:b3:8f:86:e7:
                    0c:b6:2c:c7:9b:cf:88:d2:37:6d:b8:5e:54:8f:6d:
                    77:54:32:13:7b:d1:45:a4:63:e4:75:b5:11:84:59:
                    07:a4:aa:99:c6:37:f0:26:89:82:97:3d:dd:d4:a3:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:04:73:7F:F4:DD:51:EB:76:F9:BA:3C:C9:B3:96:BD:52:7D:81:F0
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234332e302f32342d3234203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:56:77:5b:82:4d:15:a6:c4:fd:a7:b1:7b:69:31:4f:64:f4:
         8a:0d:bf:e0:a0:c1:95:ac:82:e1:1b:22:ab:d1:d0:ea:0e:f6:
         f2:c9:3c:ff:3c:4e:ac:4d:01:9f:6b:23:c2:c6:e6:16:11:b9:
         03:01:03:d7:5f:bd:01:c8:a9:23:00:c2:85:c7:43:51:f0:c4:
         5c:7f:ed:94:ac:85:af:04:d4:f8:eb:8a:3d:e5:08:9c:fd:f6:
         f4:fe:88:79:bf:c8:8e:bb:dc:eb:d9:01:04:c6:ad:d2:4c:1b:
         1f:c8:c1:88:66:b0:f2:e1:b1:56:17:fa:58:a3:a4:61:c1:53:
         d3:05:88:2f:a4:94:50:3d:67:70:69:4c:dd:f9:74:61:78:a5:
         dd:a4:9f:6a:fe:0a:81:1d:95:84:7a:d3:eb:bc:84:2f:92:fd:
         67:e1:82:6c:72:bb:f4:26:a9:c8:ec:e3:52:58:6d:ad:ab:f8:
         4a:29:d7:31:fb:36:a8:1d:a0:c5:d1:1b:5c:02:3a:90:e8:f7:
         10:54:83:88:a3:50:ee:d3:cc:53:7f:93:9b:d3:16:11:67:f0:
         91:fa:92:e4:fb:07:ba:ac:32:b1:f8:66:bf:87:45:7b:03:60:
         5b:81:8d:b6:9a:77:eb:56:8c:b9:6b:4d:fa:0f:8e:af:4e:c7:
         be:88:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:38 2025 by rpki-client