Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa
File:                     3230302e35352e3133362e302f32312d3231203d3e203237373235.roa (raw, json)
Hash identifier:          8qlFQcJwUWEnTJSiZHs4wRKcYOGBFbRDZTeg1Cp8wBA=
Subject key identifier:   A8:7D:D9:FE:45:2E:90:2E:5E:74:2F:37:C6:5B:9E:D5:CC:E2:E3:20
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       1653123C398623769E7CF1652873EAB981432751
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:45:58 +0000
ROA not before:           Tue 04 Feb 2025 18:40:58 +0000
ROA not after:            Tue 03 Feb 2026 18:45:58 +0000
asID:                     27725
IP address blocks:        200.55.136.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:53:12:3c:39:86:23:76:9e:7c:f1:65:28:73:ea:b9:81:43:27:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Feb  4 18:40:58 2025 GMT
            Not After : Feb  3 18:45:58 2026 GMT
        Subject: CN=A87DD9FE452E902E5E742F37C65B9ED5CCE2E320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:c5:f7:cc:81:02:9c:49:85:71:02:ca:3c:
                    c3:d3:ec:4d:b6:c1:c5:d3:41:db:44:21:89:5f:5e:
                    96:f9:e1:6e:62:c0:e6:cd:f6:bc:a3:c0:d0:34:76:
                    63:4d:95:76:4a:4a:1c:3f:6b:dd:ab:30:69:60:83:
                    ba:1e:1b:c4:75:b5:ea:52:0f:53:49:a6:2d:93:2a:
                    86:40:30:50:ce:13:b9:61:f8:ee:d2:50:61:2c:f8:
                    86:7c:5d:fe:3b:4d:6e:fa:2d:c0:7d:77:0c:31:2c:
                    86:30:53:c9:ab:75:52:20:27:4f:a4:1c:60:cc:97:
                    0b:3f:31:c8:c1:15:89:6f:cc:cc:c7:83:77:3f:9e:
                    a0:bd:5e:91:1c:70:f0:ae:67:de:35:d9:b6:e1:77:
                    12:9c:16:ee:62:7f:89:08:63:22:ad:e8:ca:1f:d5:
                    17:a1:9f:af:f7:b0:fe:4d:ba:d8:4d:5a:74:7e:3e:
                    00:0b:b7:5b:f9:69:d5:f0:7b:26:c9:73:c2:05:f8:
                    e6:bc:6e:3a:3d:ed:20:d8:96:00:5d:cd:c8:be:bc:
                    01:83:8d:f6:a8:66:b3:bd:35:ed:ef:b0:ad:94:d3:
                    af:68:a9:8d:28:ff:f1:ae:f7:cc:0f:a9:ae:74:51:
                    f7:53:0f:5e:ef:e6:bc:84:24:34:95:4e:9c:80:30:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:D9:FE:45:2E:90:2E:5E:74:2F:37:C6:5B:9E:D5:CC:E2:E3:20
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3230302e35352e3133362e302f32312d3231203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.55.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2a:97:b9:bd:da:99:1b:f6:9e:3c:bf:27:d0:5b:87:76:74:b2:
         8e:5e:de:82:f9:f1:da:8a:24:54:d7:b8:a0:5a:71:50:51:4b:
         6a:42:a2:d3:dc:8a:fa:d9:c0:7d:66:f5:30:ce:99:00:e3:57:
         e6:89:ea:ce:14:9b:9c:52:61:a9:9d:59:84:d2:90:9c:72:0e:
         11:80:ba:18:f9:10:8c:5d:61:5e:0a:98:0e:2a:5e:92:bd:b4:
         5d:c7:c3:a2:bf:d0:86:9a:b2:49:99:d2:58:ba:d5:89:26:87:
         3b:b4:5d:68:a4:eb:29:b5:fb:6a:89:1d:4d:73:29:38:6f:be:
         e2:a0:60:b0:c1:63:48:e3:9a:da:08:8b:3e:91:6b:32:9f:e9:
         c7:09:cc:1d:83:5f:87:47:9a:fb:1b:bd:e3:fc:93:7c:44:2b:
         3c:2d:9d:80:21:49:33:96:70:d9:fc:9f:3c:47:f4:ac:77:ad:
         52:4d:55:47:7b:f3:fb:7e:03:54:c5:45:93:87:01:b6:a7:91:
         81:fc:3e:bf:5d:cb:0a:16:db:c3:aa:a8:c9:fc:eb:e3:e1:0a:
         19:b6:22:f9:7f:5c:b4:14:8d:0e:20:5e:fc:01:a7:1b:bf:d0:
         7d:74:2f:04:42:3f:ae:4a:21:65:35:19:27:df:ef:a5:e6:24:
         36:01:bf:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:18:48 2025 by rpki-client