Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234352e302f32342d3234203d3e203232373234.roa
File:                     3230302e32392e3234352e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          eaPKdWS1eMqRlfUuQw4QQGEVi5m85qXD9YqfPnp71lY=
Subject key identifier:   E0:69:29:CC:68:B8:DA:0A:5A:2A:D4:AE:CF:57:D2:81:2F:A5:B5:8B
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       028CA320A7F7BC1B4C878D0C10BE5E49DB4D5B4D
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234352e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 18:49:59 +0000
ROA not before:           Tue 04 Feb 2025 18:44:59 +0000
ROA not after:            Tue 03 Feb 2026 18:49:59 +0000
asID:                     22724
IP address blocks:        200.29.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8c:a3:20:a7:f7:bc:1b:4c:87:8d:0c:10:be:5e:49:db:4d:5b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Feb  4 18:44:59 2025 GMT
            Not After : Feb  3 18:49:59 2026 GMT
        Subject: CN=E06929CC68B8DA0A5A2AD4AECF57D2812FA5B58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:97:cc:ad:2c:e1:4d:3b:1d:12:1b:26:1e:
                    77:2e:34:ac:88:0d:a1:9c:e9:29:c7:7b:b3:b6:42:
                    e5:78:fb:01:a2:f7:67:43:78:75:5a:04:1d:bd:ab:
                    16:7d:38:75:62:7d:50:6c:dd:a9:e4:ec:c3:01:ff:
                    b1:d8:00:91:a3:84:af:bb:23:5b:f8:ae:48:4c:6c:
                    0c:34:69:ee:1e:c3:fd:d0:83:21:1b:03:4b:a4:2c:
                    30:65:f4:ed:df:dc:04:09:ba:ba:74:9a:66:e4:f1:
                    59:5a:02:b9:ef:84:e8:90:06:2b:7f:87:ff:ec:93:
                    8f:bc:e7:07:eb:a5:e3:12:ff:60:67:44:cc:3a:30:
                    fb:c1:43:42:a5:4f:db:e0:27:5d:bf:37:e9:4f:d8:
                    aa:8d:f7:dc:d9:a9:50:59:52:60:6a:d1:44:c7:f9:
                    d6:13:24:27:5b:0b:df:86:63:b7:07:22:09:bf:cd:
                    47:2a:52:c0:5c:3a:38:89:1b:b3:f3:73:0d:0a:66:
                    30:38:75:fc:a0:e6:43:79:45:97:71:e0:99:6b:87:
                    fc:04:91:c6:28:6e:aa:46:6d:da:eb:41:2c:67:16:
                    5c:f6:4c:79:2d:ed:7d:87:a4:d4:83:79:c4:4a:7b:
                    56:03:da:69:f0:d5:7b:a5:74:c0:76:5e:4c:9d:ce:
                    90:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:69:29:CC:68:B8:DA:0A:5A:2A:D4:AE:CF:57:D2:81:2F:A5:B5:8B
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234352e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:84:b0:2c:7e:27:54:b0:00:52:af:57:ce:b1:d4:16:94:5c:
         94:7a:db:94:97:02:3a:0f:0b:15:ad:f4:f5:94:7d:e5:32:a6:
         76:5e:76:55:0f:0c:f0:af:47:53:56:d9:b1:74:bb:cf:fc:1e:
         69:fc:03:e2:2b:9e:29:e7:90:e6:3c:00:25:46:bb:fb:ea:44:
         fa:bc:fe:f8:5a:0d:44:28:9a:69:c6:76:05:65:f2:5d:c8:ba:
         29:46:20:a9:12:fa:e3:dc:2b:82:4d:3f:1a:dd:6b:60:d3:20:
         bf:76:85:1c:2b:c5:50:95:75:63:5f:95:28:42:53:81:03:37:
         11:a5:74:9d:3d:49:8c:df:46:7d:71:d3:d7:47:8e:82:43:ce:
         7a:1b:14:3f:c7:4f:29:86:7c:5d:e0:e9:54:20:1d:ce:11:2b:
         3f:6a:ea:f8:83:22:f8:4f:7d:21:2d:cb:35:fb:27:c4:75:14:
         d3:37:8d:9b:7f:ee:da:42:34:05:31:30:7d:84:45:41:03:bc:
         17:c6:a7:6d:ce:e0:20:ef:c6:d1:f2:2d:17:1a:20:a4:e5:b7:
         d6:a7:8a:8e:a6:44:2a:55:08:18:ce:1e:14:ec:f5:f3:8c:ac:
         8b:91:bd:31:9b:68:78:c1:32:d9:bb:a5:27:4c:59:a9:df:bd:
         39:f7:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:59:48 2025 by rpki-client