Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa
File:                     3230302e31322e3139362e302f32342d3234203d3e203532323734.roa (raw, json)
Hash identifier:          xpMUQk23oaHOjco5y+/saGro2ZCE9jK4dahlFgU83XA=
Subject key identifier:   95:A3:1E:F9:71:25:4E:F0:EB:E3:D8:9E:3F:C9:03:D3:2F:A7:35:0A
Certificate issuer:       /CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
Certificate serial:       683A988D95276F823725123BCF728611D2096117
Authority key identifier: 3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa
Signing time:             Tue 04 Feb 2025 18:05:35 +0000
ROA not before:           Tue 04 Feb 2025 18:00:35 +0000
ROA not after:            Tue 03 Feb 2026 18:05:35 +0000
asID:                     52274
IP address blocks:        200.12.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:3a:98:8d:95:27:6f:82:37:25:12:3b:cf:72:86:11:d2:09:61:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F60989A0240421B9E62F93B598BE390FD6CDCC6
        Validity
            Not Before: Feb  4 18:00:35 2025 GMT
            Not After : Feb  3 18:05:35 2026 GMT
        Subject: CN=95A31EF971254EF0EBE3D89E3FC903D32FA7350A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:29:7c:ad:a3:5e:45:0c:ce:f9:2f:1f:5b:
                    80:d7:e7:47:75:00:47:81:29:17:3b:c4:26:96:a0:
                    42:4d:e6:85:89:d8:76:04:5e:d9:3d:5d:0c:82:b8:
                    1e:de:3e:11:5d:56:e8:e9:01:e0:49:a8:8d:cd:05:
                    b4:d2:e9:77:c7:3c:3c:bf:f9:14:3e:80:89:22:65:
                    32:c4:b7:96:5c:bb:03:98:8d:ca:b7:57:88:10:78:
                    88:d7:c7:e3:af:1c:18:62:ca:e5:cd:46:8a:36:f0:
                    ef:1d:a4:c9:b4:7d:2e:37:95:c8:6e:a0:35:b9:3c:
                    b1:fd:55:00:0d:82:ef:c8:d2:3a:53:7a:4f:a1:52:
                    8c:7a:32:8b:59:ae:7d:be:11:d7:67:70:33:90:2a:
                    6f:88:5f:57:57:54:73:6e:cf:54:b1:5b:1e:21:73:
                    dc:ce:94:e1:32:db:69:89:72:96:74:5a:42:45:53:
                    67:ef:06:45:9b:2a:3f:dd:e8:38:76:04:90:36:8c:
                    26:3c:dc:a1:e7:d4:c6:9f:94:49:0c:7d:aa:1c:b6:
                    fd:a7:cc:81:7b:a5:7f:2b:84:db:e5:4c:59:40:ad:
                    5b:2d:e3:b5:d9:86:32:4e:8c:ad:ca:07:14:24:fc:
                    16:97:7d:f7:6f:61:7f:cf:f5:54:af:c8:ae:8c:22:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A3:1E:F9:71:25:4E:F0:EB:E3:D8:9E:3F:C9:03:D3:2F:A7:35:0A
            X509v3 Authority Key Identifier:
                keyid:3F:60:98:9A:02:40:42:1B:9E:62:F9:3B:59:8B:E3:90:FD:6C:DC:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F60989A0240421B9E62F93B598BE390FD6CDCC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E1FCF006DE231C1E8F9AF43306DDA5F7FA1D2D8D4E6F8DB2F0B08C63D2FFBDFD/0/3230302e31322e3139362e302f32342d3234203d3e203532323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:15:da:55:bf:f1:77:5e:d5:e2:25:2d:37:74:8c:e1:01:a7:
         4b:3d:2d:8c:b6:11:ac:74:af:2f:9e:17:1b:b4:dd:59:78:d6:
         71:16:7d:de:2c:78:92:ef:31:df:5b:48:d7:a9:0c:16:aa:8b:
         18:73:b1:52:02:fe:6c:77:9a:2f:c9:1a:00:50:2a:b5:c3:21:
         7d:66:e2:d6:cf:fd:12:d5:1a:b8:6b:74:e8:00:79:1e:6a:19:
         04:9d:ac:ee:85:a0:f9:00:ce:e8:11:83:56:91:3e:e2:26:05:
         17:1c:14:2a:c0:32:f6:ae:51:6d:7f:2b:16:e1:3c:f9:9e:6a:
         fb:2f:b5:4f:d0:0f:de:72:83:a3:8a:8f:69:70:8b:26:28:04:
         41:fe:6b:10:fb:61:b6:85:78:ec:99:8c:8d:14:55:78:3a:50:
         4d:3d:1b:9b:eb:7d:88:0e:90:c7:67:8d:22:fe:23:3c:fb:c9:
         32:4d:15:bc:5d:29:7f:b8:24:1f:00:c6:46:52:b8:ff:8a:41:
         fa:ee:02:a7:dd:ca:8a:73:93:b4:68:c7:ba:63:31:2b:5c:10:
         dd:be:52:9f:eb:b3:02:e5:64:a6:4c:e2:5f:74:09:09:a4:f5:
         10:f1:cb:ed:6e:28:de:f3:dd:0e:df:fd:58:06:17:7a:c3:21:
         63:e2:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:18 2025 by rpki-client