Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3234203d3e203237393739.roa
File:                     3230302e37332e3230382e302f32312d3234203d3e203237393739.roa (raw, json)
Hash identifier:          tSEZjs3vQrcCLXT1u3OCGA1rsYkFWYVxpSt30GygQHg=
Subject key identifier:   7D:FD:AE:C0:EB:12:EF:FC:23:6E:D8:6B:D9:0A:D2:28:AF:DB:11:A9
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       430B747379A161FA68C1210F9D8AD67476AD3CE1
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3234203d3e203237393739.roa
Signing time:             Wed 26 Mar 2025 02:55:00 +0000
ROA not before:           Wed 26 Mar 2025 02:50:00 +0000
ROA not after:            Wed 25 Mar 2026 02:55:00 +0000
asID:                     27979
IP address blocks:        200.73.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:0b:74:73:79:a1:61:fa:68:c1:21:0f:9d:8a:d6:74:76:ad:3c:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Mar 26 02:50:00 2025 GMT
            Not After : Mar 25 02:55:00 2026 GMT
        Subject: CN=7DFDAEC0EB12EFFC236ED86BD90AD228AFDB11A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:70:8c:eb:b4:9d:f2:19:88:2d:02:75:eb:
                    fb:3c:a9:40:75:36:c5:16:a3:ec:a1:bd:a9:46:3c:
                    81:2d:c6:6c:1a:6f:3d:68:40:ff:6e:f5:f7:c5:98:
                    8a:1f:48:4b:ad:c8:45:a8:0e:ab:a5:cd:4d:ca:70:
                    2c:b7:9e:7a:ef:03:5e:60:f4:0b:a6:5e:87:70:4c:
                    ca:83:6c:3c:0f:2c:73:ef:c9:f7:12:dc:3f:e0:3e:
                    51:29:6a:66:de:f6:04:ec:89:a2:4d:c2:37:f4:9f:
                    ab:48:a3:8d:e2:c0:dd:71:7a:4f:81:f3:4f:54:e6:
                    53:f3:8f:0f:c1:53:f6:13:c3:c3:5d:a0:b0:ef:18:
                    9a:54:d4:d6:e7:c6:ff:2f:7d:c6:f2:e9:07:64:06:
                    92:63:50:7c:4e:9c:a8:fd:d3:6e:58:c4:2e:30:1c:
                    c7:ee:0b:52:a9:f9:6a:f0:ee:d3:2b:ba:45:2d:8a:
                    b6:b0:96:fe:8c:9a:e1:bf:eb:7e:7f:9c:e7:6b:f8:
                    af:8c:d2:10:c2:75:0a:5c:bd:63:c0:d1:fe:f0:72:
                    62:ff:c4:08:6f:88:b2:ac:ff:8f:76:93:41:10:33:
                    7f:45:7e:3d:a8:e3:79:a8:fa:78:88:31:01:cb:f4:
                    36:d3:a7:33:d5:f1:79:0c:7c:f8:d3:6c:ab:a3:87:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:AE:C0:EB:12:EF:FC:23:6E:D8:6B:D9:0A:D2:28:AF:DB:11:A9
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3230302e37332e3230382e302f32312d3234203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:3e:01:9d:a1:ac:72:f4:a4:34:4c:be:df:b1:61:29:46:17:
         33:83:d8:a7:36:96:1b:8e:ec:30:20:5a:64:43:9b:8f:13:c3:
         5c:83:d2:9d:a0:7e:e4:10:e8:ad:a3:96:61:cf:02:42:c0:9b:
         54:3f:76:bf:59:98:1b:ae:4f:fb:f9:aa:f4:07:69:c2:a1:4c:
         75:a6:a4:b9:d7:5b:6d:06:ae:af:7e:86:54:2d:8c:e5:e2:8f:
         db:6e:b1:20:42:4e:c7:92:1f:90:ae:f4:e6:44:21:3d:20:c0:
         4d:6d:cd:94:9c:22:6a:92:97:d9:58:fa:97:e5:ec:27:c4:1b:
         67:46:18:23:17:82:55:b7:dd:4a:c2:43:01:a2:a1:03:e0:68:
         99:18:75:a4:76:20:23:8c:49:99:5c:ed:d9:77:29:23:3f:31:
         8e:07:97:a8:d7:e4:de:97:ce:db:aa:9b:94:cc:eb:93:f5:f5:
         a6:87:fd:c4:27:36:15:c8:55:84:74:95:a3:e4:ef:1c:2f:20:
         13:9a:f8:6a:97:9c:70:2b:be:ce:d2:2c:c1:fd:db:5a:48:b3:
         a5:57:07:4b:b4:d4:5b:3c:5c:7e:81:88:97:fb:7d:65:ea:68:
         d2:57:25:36:b3:4f:90:61:42:07:76:58:83:4b:b4:81:e3:7f:
         a8:e1:8b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:25:36 2025 by rpki-client