Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e2037343138.roa
File:                     3230312e3234362e302e302f31382d3234203d3e2037343138.roa (raw, json)
Hash identifier:          vAUUL00gFIf7XTjpIUnt+WOLBR1YqO4hN9+rsMvd3fk=
Subject key identifier:   28:AC:E3:5C:66:71:6A:26:B9:97:96:FD:29:6A:BE:B5:14:0C:BC:66
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       7F4449ADFCC248D3F33BC1DDDD8E1D053A78067F
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:54 +0000
ROA not before:           Tue 04 Feb 2025 18:24:54 +0000
ROA not after:            Tue 03 Feb 2026 18:29:54 +0000
asID:                     7418
IP address blocks:        201.246.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:44:49:ad:fc:c2:48:d3:f3:3b:c1:dd:dd:8e:1d:05:3a:78:06:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:54 2025 GMT
            Not After : Feb  3 18:29:54 2026 GMT
        Subject: CN=28ACE35C66716A26B99796FD296ABEB5140CBC66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:38:fe:b3:1c:6e:57:ba:74:4e:2e:c8:6e:45:
                    06:ee:50:59:03:72:75:0e:c0:12:c9:03:29:9b:1c:
                    c4:8a:c4:98:8e:41:45:9c:40:9a:b9:a0:1b:e1:61:
                    f0:68:0f:04:4d:49:de:16:7b:98:b4:13:3b:5d:bb:
                    6a:2a:6c:f3:31:c9:8e:82:85:eb:18:ee:8e:78:1a:
                    e6:3d:b2:33:ed:64:9f:f2:1c:61:8c:7b:a6:f9:7b:
                    af:80:0d:aa:e1:df:fb:84:0c:24:d1:ba:91:54:b2:
                    57:70:89:ed:16:a4:f9:e3:72:9f:00:03:0b:ee:00:
                    ce:c2:d1:1c:f6:6e:f4:a8:ba:09:01:cf:4a:14:83:
                    cf:17:3b:2c:ae:01:2f:55:a6:23:fe:37:f3:43:cc:
                    3b:d6:bb:36:0b:a0:8f:7b:b0:6b:28:f2:88:3f:de:
                    11:ce:18:77:93:5b:15:58:38:ce:d6:7a:a6:d0:09:
                    ed:96:3a:4a:12:aa:54:e2:58:51:ab:4a:51:4e:f7:
                    74:2d:a7:2e:1a:2e:10:8a:a6:85:eb:b6:04:14:ad:
                    ef:9a:f7:d4:77:37:30:37:56:f9:bd:53:08:34:f2:
                    7c:34:60:79:5e:cc:3d:ba:d9:dd:e8:fa:d0:4a:3a:
                    ea:8a:af:1c:79:5d:9f:85:51:45:88:44:79:d5:75:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AC:E3:5C:66:71:6A:26:B9:97:96:FD:29:6A:BE:B5:14:0C:BC:66
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3234362e302e302f31382d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.246.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         43:e4:35:fb:55:6c:ea:a2:7e:dc:26:0a:4c:4e:01:4e:5e:26:
         1c:08:e7:b6:45:32:13:d7:cf:a6:4d:b0:d9:91:18:f0:ca:d4:
         24:ae:00:1d:f5:c1:56:da:95:b9:2e:1a:3a:63:ac:26:33:1d:
         db:23:18:e0:ec:36:52:7a:04:e6:cd:37:d9:ff:70:03:53:e2:
         1f:31:c9:16:c4:e4:09:b8:af:a6:ca:ea:05:a5:e7:54:26:31:
         bc:f0:a9:9b:30:ee:96:30:25:c6:37:f4:57:c5:00:e2:80:b9:
         32:a0:2c:e4:17:ff:bc:ae:fe:6f:31:77:65:b3:74:9c:dc:85:
         57:51:4c:96:9c:fc:06:b5:5d:20:0e:99:ae:1f:c3:63:61:17:
         b4:ae:95:62:6e:38:a7:d2:38:c9:63:cb:a4:74:b2:13:9c:29:
         9a:e8:54:cc:31:fb:62:5d:9e:27:ec:e0:f6:41:4f:b7:27:1f:
         53:3d:83:c5:c6:16:1f:34:37:35:d1:38:3f:01:c2:ad:2f:14:
         a8:51:01:5f:7d:3a:ae:6f:ab:75:30:70:8c:2e:c8:a7:37:95:
         70:c4:1a:b8:9d:3f:9c:7f:d4:fa:3e:2c:1b:13:09:31:59:79:
         e5:5f:86:23:4b:de:b6:47:a4:0e:99:b6:4e:cf:f7:22:77:7b:
         ee:68:a8:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:26 2025 by rpki-client