Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3132382e302f32312d3231203d3e203237373235.roa
File:                     3230302e35352e3132382e302f32312d3231203d3e203237373235.roa (raw, json)
Hash identifier:          h+D2fRGMgkVashDyqFF1QLilvT0hV6p67LpCiWaK18Y=
Subject key identifier:   B0:10:89:FD:C9:85:46:21:36:4A:E2:E1:30:6F:B3:E9:FD:ED:CD:0C
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       3F91A8162DFFA93ACE1FA17E0942DF782EB6E1AC
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3132382e302f32312d3231203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:45:56 +0000
ROA not before:           Tue 04 Feb 2025 18:40:56 +0000
ROA not after:            Tue 03 Feb 2026 18:45:56 +0000
asID:                     27725
IP address blocks:        200.55.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:91:a8:16:2d:ff:a9:3a:ce:1f:a1:7e:09:42:df:78:2e:b6:e1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Feb  4 18:40:56 2025 GMT
            Not After : Feb  3 18:45:56 2026 GMT
        Subject: CN=B01089FDC9854621364AE2E1306FB3E9FDEDCD0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f7:86:5d:ca:95:ac:49:99:3d:e8:f1:fa:ed:
                    ce:25:4a:94:41:a1:74:2b:ce:a4:7a:74:c2:83:16:
                    14:c6:e3:85:30:1f:0c:ea:eb:9a:92:56:53:79:70:
                    cd:3c:a1:f4:05:ea:66:e1:38:62:32:5e:18:aa:2c:
                    f6:49:21:7c:e0:2c:84:b5:57:77:4f:e7:0b:1a:c4:
                    91:b7:ae:b7:3f:4d:7b:26:35:33:95:42:1b:57:15:
                    fe:3e:e5:e5:ec:90:7e:63:81:4f:9d:bb:f1:7a:08:
                    89:b3:04:a4:fc:cb:49:a7:70:79:8d:98:af:c2:46:
                    5a:85:2d:b9:2b:3c:d6:d8:61:ff:f1:6a:40:a8:63:
                    ff:11:0f:be:7b:bc:65:89:f6:81:1e:01:c9:dc:fd:
                    d9:f9:ec:9c:f7:a7:a1:62:7e:46:83:2c:2e:90:b6:
                    0a:17:23:6b:de:f5:6d:be:3c:fc:f7:5f:72:86:00:
                    9e:29:9c:f6:13:fe:cb:76:b8:c6:72:da:14:d3:a6:
                    1b:55:c1:dd:c9:3f:d9:f7:d0:0f:ec:dd:74:68:63:
                    c2:f7:1a:d0:08:2a:0b:ae:9e:a7:2f:76:5d:51:21:
                    29:1c:a5:d2:55:d1:b6:34:93:07:f3:26:fc:66:8c:
                    39:a3:93:8f:69:48:51:6a:9b:c7:23:0c:d2:27:d1:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:89:FD:C9:85:46:21:36:4A:E2:E1:30:6F:B3:E9:FD:ED:CD:0C
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3132382e302f32312d3231203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2d:d2:b2:5e:8f:65:8f:7c:0c:64:d0:93:55:a8:87:b2:a0:e5:
         e5:10:1a:39:4d:cc:fb:61:f8:a5:5a:53:be:e4:48:dc:8b:72:
         f6:82:af:23:5e:f6:1a:5f:f8:4b:7a:4e:ab:f8:fa:a8:91:b0:
         7e:2d:69:e4:1c:43:be:10:69:34:49:8c:7f:ac:7d:4c:48:c4:
         6d:4a:2c:fc:87:25:dc:53:cc:b8:0b:14:74:e0:d7:14:02:71:
         b6:90:7e:e9:e5:92:ff:cb:05:b7:73:34:80:45:c6:42:9f:d7:
         d0:db:a0:e4:9d:9b:98:29:bc:cc:e2:bd:76:20:b8:b2:a6:ae:
         d8:7e:9f:da:87:90:24:4d:5d:55:68:8a:ea:ee:8e:cf:b5:ff:
         22:dd:e3:78:7c:c7:6e:5f:5e:e9:4b:6a:30:17:ab:04:05:03:
         be:a4:fb:e1:25:a7:41:31:bb:ae:6a:38:93:a6:ef:b1:24:4c:
         5d:51:89:47:86:85:fd:d8:81:76:61:72:88:a2:82:41:45:24:
         8a:9f:15:c5:0e:7a:4c:f8:8a:77:e1:49:24:e3:cd:b8:ca:00:
         5e:5b:ec:b9:bd:67:8a:67:52:18:3d:c7:54:70:00:9a:19:55:
         67:ba:58:cf:25:e8:a1:b4:07:02:fa:ef:2a:a8:5a:06:a1:2b:
         55:d6:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:01 2025 by rpki-client