Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e203131313732.roa
File:                     3230302e35362e3131322e302f32302d3234203d3e203131313732.roa (raw, json)
Hash identifier:          XXgoK4H6tfWTou/wKm1Mn5VXxHcA5o65LeoJHm6sPD4=
Subject key identifier:   ED:D7:C7:72:8A:6D:E9:72:80:E7:C6:78:57:5C:DB:C3:1E:B3:E6:10
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       1D0D32DD8225D4ED5A8C2BFE115B061A39DCEF87
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e203131313732.roa
Signing time:             Tue 04 Feb 2025 18:52:46 +0000
ROA not before:           Tue 04 Feb 2025 18:47:46 +0000
ROA not after:            Tue 03 Feb 2026 18:52:46 +0000
asID:                     11172
IP address blocks:        200.56.112.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:0d:32:dd:82:25:d4:ed:5a:8c:2b:fe:11:5b:06:1a:39:dc:ef:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:46 2025 GMT
            Not After : Feb  3 18:52:46 2026 GMT
        Subject: CN=EDD7C7728A6DE97280E7C678575CDBC31EB3E610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:87:83:e1:56:12:68:66:f3:02:2a:a1:1d:
                    4b:e2:4b:bf:00:95:48:52:0c:05:fd:88:26:54:61:
                    60:05:38:13:cf:41:3b:d6:2f:4a:9e:28:73:c5:20:
                    e9:22:1c:93:a1:f9:c1:d9:5c:de:5c:0f:7a:bc:8d:
                    6a:62:fd:b9:3d:0d:68:2f:45:43:b1:3a:db:82:f5:
                    95:b0:7b:7f:8c:6d:6f:78:0e:8a:65:4a:44:93:75:
                    77:cf:7d:26:1a:b9:04:be:98:8d:58:e0:30:b0:ea:
                    ef:97:fd:67:bd:46:32:ed:a4:21:e3:03:a0:7a:c4:
                    38:1c:a2:a7:d6:fa:88:a4:f1:be:0f:83:0e:29:47:
                    56:52:d1:c4:33:73:d7:f8:ca:03:8d:7c:08:dd:d4:
                    19:35:ef:10:06:e0:54:2a:50:cf:37:59:f7:6b:6e:
                    c6:21:4e:56:0b:37:92:7d:8a:ba:1a:b7:1b:66:7a:
                    a1:25:82:64:cd:a5:7a:0b:0f:16:50:dc:e1:49:44:
                    6a:69:fb:db:2c:bd:32:69:b5:bd:66:bc:fe:b7:e3:
                    9b:f1:92:b5:ff:cc:77:70:a0:47:eb:00:4e:8c:b3:
                    35:45:65:44:2b:2b:03:fe:f5:49:40:02:9c:61:9b:
                    5a:a8:4a:c5:43:af:40:41:c9:82:5f:93:3e:cf:da:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D7:C7:72:8A:6D:E9:72:80:E7:C6:78:57:5C:DB:C3:1E:B3:E6:10
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3230302e35362e3131322e302f32302d3234203d3e203131313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.56.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:af:a8:69:72:f0:fb:e3:c4:6f:10:52:85:25:05:d5:8a:60:
         8b:47:75:39:96:f6:3e:d8:cf:e3:41:b1:75:9a:0e:60:da:96:
         4b:66:57:d3:65:63:7c:41:fd:97:76:f0:19:1a:2f:c3:1a:ec:
         06:14:69:b4:af:51:f5:2e:4c:e1:78:ea:85:3e:8d:42:3a:72:
         18:16:65:40:ea:67:36:05:78:e0:b4:59:cb:d0:85:9a:55:11:
         e6:48:bc:ea:a2:36:b4:f5:20:e2:cb:18:8f:4c:dd:10:ab:c8:
         89:45:ec:7e:a6:f2:94:71:06:87:2b:af:9e:9c:05:c2:57:de:
         ea:42:b8:3b:e2:e5:e8:6f:a3:0b:a1:e5:99:62:a9:2f:43:c1:
         c9:11:da:7d:e6:f2:89:06:a7:54:16:3f:f0:10:95:5a:de:6b:
         cc:f8:09:d1:b9:b6:fd:7c:72:52:52:c9:02:94:a0:57:ee:da:
         92:74:ab:f5:21:e8:5b:a4:3c:e9:c1:03:c2:e4:3a:60:5e:b5:
         8f:f8:2b:16:b3:15:2a:06:50:e5:0f:ef:c1:59:6c:61:4e:f6:
         ec:db:8a:0e:37:73:94:b5:10:27:64:da:0a:83:45:9f:bd:90:
         cb:cd:98:e8:49:6e:13:8b:08:8e:bf:48:d9:f7:dc:fa:92:8f:
         c3:9d:5b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:35 2025 by rpki-client