Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234372e302f32342d3234203d3e20323633313734.roa
File:                     3230302e32392e3234372e302f32342d3234203d3e20323633313734.roa (raw, json)
Hash identifier:          +2Le9UTMoCZSA9JNd31Uf8I3UV4pwAfGORuK7JL3Qaw=
Subject key identifier:   B6:C6:80:4C:51:30:AC:EC:1A:0A:5C:94:76:2A:E6:BA:FF:7E:F7:43
Certificate issuer:       /CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
Certificate serial:       1DE8DF5F952BDB5F70057D9A56E7FE95A2AB5FC9
Authority key identifier: 93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234372e302f32342d3234203d3e20323633313734.roa
Signing time:             Tue 04 Feb 2025 18:49:58 +0000
ROA not before:           Tue 04 Feb 2025 18:44:58 +0000
ROA not after:            Tue 03 Feb 2026 18:49:58 +0000
asID:                     263174
IP address blocks:        200.29.247.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e8:df:5f:95:2b:db:5f:70:05:7d:9a:56:e7:fe:95:a2:ab:5f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B
        Validity
            Not Before: Feb  4 18:44:58 2025 GMT
            Not After : Feb  3 18:49:58 2026 GMT
        Subject: CN=B6C6804C5130ACEC1A0A5C94762AE6BAFF7EF743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:33:c3:c3:11:30:15:e2:86:3b:a6:3c:a6:
                    dd:7b:e8:cf:bc:67:98:b8:6e:d8:e1:56:93:61:e1:
                    8f:43:7a:da:7f:d0:91:74:16:12:5e:58:96:20:a6:
                    fb:d3:1b:b8:7f:22:cb:2a:b1:0f:cc:b7:ba:1f:fd:
                    86:3c:55:09:86:32:e1:95:08:26:f1:1e:dc:1c:29:
                    17:fb:4c:88:e8:a6:9b:d8:10:5d:03:b1:e8:81:39:
                    39:54:a9:6c:ad:6e:d2:e1:e2:3f:ea:a5:d4:15:49:
                    86:b8:e8:dc:bf:4f:70:b8:25:c4:54:56:a1:fa:fb:
                    e9:af:04:a2:0a:3a:a1:45:eb:d3:b2:db:5f:ef:65:
                    66:54:24:b5:12:a1:29:c1:21:6a:3b:a1:7f:39:f5:
                    52:68:19:60:8e:85:66:b7:48:eb:b7:24:5c:52:ec:
                    aa:ee:96:2b:fb:b5:b3:9f:f7:ca:85:15:e7:2b:00:
                    92:e3:8f:a0:ae:b8:fe:00:01:47:df:08:a4:ba:7b:
                    45:94:20:23:a5:bd:5b:14:bc:bc:16:5e:9c:9d:62:
                    f8:cd:07:0c:69:77:c1:a5:13:37:f7:de:9c:fa:c3:
                    1a:47:99:e8:2a:90:1d:dc:5e:0b:d7:05:53:c9:22:
                    e9:95:10:79:38:99:07:52:22:cd:e0:e4:3b:f4:70:
                    0b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C6:80:4C:51:30:AC:EC:1A:0A:5C:94:76:2A:E6:BA:FF:7E:F7:43
            X509v3 Authority Key Identifier:
                keyid:93:D7:93:A7:CD:D1:DE:38:D2:F4:5E:5E:40:86:22:B9:5A:BF:FF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93D793A7CDD1DE38D2F45E5E408622B95ABFFF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7D1071851A2EC52643626AC3F1ABC06856DAD250E042B168973C0DCA24E1F83/0/3230302e32392e3234372e302f32342d3234203d3e20323633313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:5f:f3:ca:21:0a:ea:dd:d9:ff:28:a5:a0:4d:bc:80:49:33:
         9f:05:d6:20:cc:1c:72:18:0f:bf:7f:09:2a:24:ca:e4:05:fb:
         0c:cf:d8:51:a0:cb:f3:7a:bf:ab:48:53:44:98:dc:5b:f2:3b:
         26:20:e0:68:12:81:e6:f4:87:5a:81:04:ae:c0:ec:5f:76:b7:
         4c:7b:f9:3f:9d:38:29:d8:b4:2d:8d:d7:b3:c6:e1:63:c0:9f:
         03:2f:d7:52:d2:24:e2:3e:b0:f8:00:65:9b:b5:6b:e2:7b:88:
         93:79:5d:24:5c:af:61:16:32:25:62:15:d5:05:03:2f:55:4a:
         53:b1:8c:59:ac:77:86:38:92:e8:4b:6d:c7:fa:94:57:55:25:
         7b:49:28:81:81:ab:42:f9:3f:65:d9:1b:17:da:ba:63:3c:ad:
         8e:42:a7:45:34:ac:6b:af:80:15:2a:30:d7:9b:1a:d9:26:a3:
         f8:37:e7:12:38:87:44:0f:55:35:31:97:f0:a9:c5:34:f1:9d:
         4b:dd:71:dc:d3:89:b5:6f:e9:63:a8:b8:a5:f8:7a:3b:de:a6:
         6e:68:6f:f1:b9:32:c7:51:ef:7a:1c:c2:9b:b7:f2:cb:e4:b4:
         ae:8e:8b:d9:86:73:a8:ca:f0:1e:3e:e4:91:29:b2:57:bf:8c:
         f3:bd:2f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:42 2025 by rpki-client