Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3231203d3e203237393739.roa
File:                     3230302e37332e3230382e302f32312d3231203d3e203237393739.roa (raw, json)
Hash identifier:          ZUpRKwBguUTdrA+Bds8HgSTi6BcYlwEmlyqtrty8XY4=
Subject key identifier:   55:53:87:11:80:A2:13:88:33:C9:5D:C4:3A:70:78:9B:E3:94:90:33
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       39B5A7F60CF5A13249B02EF8C3EECA36DD6C354D
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3231203d3e203237393739.roa
Signing time:             Tue 04 Feb 2025 18:44:09 +0000
ROA not before:           Tue 04 Feb 2025 18:39:09 +0000
ROA not after:            Tue 03 Feb 2026 18:44:09 +0000
asID:                     27979
IP address blocks:        200.73.208.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b5:a7:f6:0c:f5:a1:32:49:b0:2e:f8:c3:ee:ca:36:dd:6c:35:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Feb  4 18:39:09 2025 GMT
            Not After : Feb  3 18:44:09 2026 GMT
        Subject: CN=5553871180A2138833C95DC43A70789BE3949033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:99:e1:a9:a1:6a:2a:1a:4c:48:ff:96:55:b4:
                    21:19:ed:3d:db:ef:75:40:5a:a5:f6:c6:58:89:8a:
                    f0:03:8f:d8:dd:f3:b8:fb:61:cb:e3:cd:2d:6c:96:
                    1d:fa:be:3f:dc:4b:7a:73:2c:14:35:9e:29:0f:82:
                    a4:37:42:ca:1d:34:68:29:9e:d7:aa:5e:3b:58:9d:
                    2b:93:9b:07:3c:66:a4:8c:54:57:7b:ab:2b:4c:34:
                    c8:e3:8f:8b:c6:9e:81:dc:9d:d9:16:72:17:b0:08:
                    92:ac:e0:a4:55:d1:01:77:b5:82:ca:5e:4c:a7:3d:
                    8b:97:de:e7:45:1c:bf:53:30:62:2e:f4:ff:37:c2:
                    17:c2:76:1b:be:5d:c7:d3:4d:80:c4:e2:ef:4f:e4:
                    8c:31:67:19:1e:14:e6:41:50:7e:97:93:88:14:01:
                    c7:76:ba:8e:0e:c9:e1:06:31:73:56:a8:94:11:b0:
                    14:8f:a8:21:56:34:75:88:36:e1:59:c0:dd:4d:11:
                    0e:c9:d1:39:40:4d:5d:7e:44:3c:ae:3d:df:a2:29:
                    bd:e7:61:55:56:e8:ef:27:95:9f:db:f6:70:3c:cd:
                    7b:4e:95:62:77:6c:55:2f:a6:f0:35:e3:b2:4e:95:
                    89:92:a2:16:00:56:a2:88:c6:69:c0:57:a8:f5:5f:
                    7f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:87:11:80:A2:13:88:33:C9:5D:C4:3A:70:78:9B:E3:94:90:33
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3231203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:90:ff:74:0d:17:ee:88:eb:85:75:c6:a4:29:b8:cb:ee:
         33:0a:e0:d6:0f:25:f4:26:4e:d8:6d:fe:0c:49:b7:16:86:c3:
         70:35:ff:62:0d:18:e9:ed:35:aa:f6:17:32:8b:44:a0:c3:36:
         f1:2b:2b:42:01:1a:69:ec:a7:15:80:97:44:01:ad:5c:d3:7f:
         52:24:aa:af:5d:23:44:fd:ba:96:0f:28:da:d2:b8:2d:a7:b4:
         72:a6:ac:a2:ce:cd:6d:ac:95:de:b7:74:16:06:83:b7:8c:96:
         56:71:d2:e3:a3:f0:c5:9e:85:c9:1d:c7:50:3a:ed:f3:d7:c7:
         4b:cf:56:7d:ef:a1:a1:f0:e5:34:c8:c2:a1:e9:c9:4e:c9:cf:
         e7:2a:7b:c1:88:9d:71:c4:13:2e:d4:4d:4a:a4:75:60:37:f8:
         47:29:80:c4:4c:82:8b:05:d2:11:55:6c:68:28:5f:2d:3d:86:
         af:f6:85:bf:25:c9:db:c1:62:e5:e2:fb:ef:66:f3:10:a3:55:
         63:a5:f8:26:21:99:d3:25:3b:56:1b:a2:8d:b4:87:37:46:0d:
         b1:0f:18:b8:3f:64:1c:b1:a6:63:37:ba:2c:08:40:fc:3c:b6:
         30:52:70:a5:b5:b3:67:cf:9e:f7:6b:55:22:d6:ea:0c:24:12:
         c3:63:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:36 2025 by rpki-client