Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa
File:                     3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa (raw, json)
Hash identifier:          ljvbs6QGSXZQZiK7XWZmj3yNACCPDy/njS8W8J0qU9A=
Subject key identifier:   B2:F6:EA:50:89:71:33:32:A0:00:83:21:19:7A:67:93:4C:FA:4C:8D
Certificate issuer:       /CN=F7D87FB819806FE80F6C92775F08B1C90C271956
Certificate serial:       3B2E3264AE6CFCFEA29CD4F594C9A40C4E78C00E
Authority key identifier: F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa
Signing time:             Tue 04 Feb 2025 18:08:29 +0000
ROA not before:           Tue 04 Feb 2025 18:03:29 +0000
ROA not after:            Tue 03 Feb 2026 18:08:29 +0000
asID:                     264859
IP address blocks:        200.95.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2e:32:64:ae:6c:fc:fe:a2:9c:d4:f5:94:c9:a4:0c:4e:78:c0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D87FB819806FE80F6C92775F08B1C90C271956
        Validity
            Not Before: Feb  4 18:03:29 2025 GMT
            Not After : Feb  3 18:08:29 2026 GMT
        Subject: CN=B2F6EA5089713332A0008321197A67934CFA4C8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:6e:56:03:b3:e0:77:26:44:e1:8b:d9:b9:
                    41:1f:46:1d:dc:30:58:7e:84:a4:ed:11:d0:f9:78:
                    7b:38:db:19:02:04:12:32:00:ac:5c:61:88:6a:01:
                    7c:d3:52:6f:aa:2c:7e:d0:60:1c:a5:81:71:be:85:
                    62:87:f1:60:1a:af:0c:4b:75:fd:b2:ec:57:eb:00:
                    85:99:b4:d8:1c:73:a4:f1:fc:d5:4f:d3:1b:35:d3:
                    79:73:84:2b:cd:d9:08:d6:fd:d2:d4:b4:3e:ae:e4:
                    fb:34:f0:67:e6:dd:de:be:ff:8f:20:45:56:83:c3:
                    cc:57:85:31:27:3a:47:1f:42:23:7b:3d:6a:20:80:
                    ae:10:e2:1c:62:3f:75:1c:3a:26:59:ce:4d:7e:db:
                    50:56:f5:96:1e:b0:0d:d3:86:c5:85:4e:43:51:93:
                    60:65:eb:60:cd:c8:ef:78:49:b4:42:a6:66:8a:b1:
                    b0:cd:ed:01:79:16:b9:c8:3f:ae:82:f6:63:58:e7:
                    4d:b9:02:b7:19:e6:b3:98:13:21:ec:f4:9b:68:01:
                    58:40:2e:69:43:9a:53:36:ec:d5:14:88:ed:48:5b:
                    a7:33:92:77:00:10:32:76:e2:f7:63:7c:90:d7:dd:
                    ba:55:18:37:0b:24:02:ef:50:71:df:45:2c:b9:88:
                    8d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F6:EA:50:89:71:33:32:A0:00:83:21:19:7A:67:93:4C:FA:4C:8D
            X509v3 Authority Key Identifier:
                keyid:F7:D8:7F:B8:19:80:6F:E8:0F:6C:92:77:5F:08:B1:C9:0C:27:19:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/F7D87FB819806FE80F6C92775F08B1C90C271956.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7D87FB819806FE80F6C92775F08B1C90C271956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E806AC2F6A1B4A90BB7302D5CB93DACD56CBBB934A40C359AF6C22C28B82A164/0/3230302e39352e3138342e302f32322d3234203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.95.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:2a:a8:81:ea:18:a1:e7:50:26:5e:ce:34:d8:35:9e:3b:
         80:fa:0c:12:ed:fc:98:3c:48:d9:8c:9b:cf:28:28:6b:dd:f3:
         48:d8:0c:bc:4f:69:27:e0:87:e7:78:db:18:8f:c2:22:25:76:
         b5:16:93:6e:c7:d5:c6:be:c3:03:8e:1f:a8:04:10:ab:d0:77:
         21:64:8c:a8:34:ef:49:6a:24:f0:65:02:f7:33:1e:11:aa:0c:
         6b:dc:8c:f7:e8:a9:88:f2:cc:0b:bb:03:a4:0b:e0:e5:d9:a3:
         f7:fe:cf:44:b0:65:f0:75:59:aa:c7:21:2f:6d:0e:f4:9e:db:
         bd:27:c0:86:76:fd:1e:6e:d0:37:19:36:20:8e:db:56:4b:06:
         54:ab:98:e7:52:8b:db:e1:b6:76:18:1b:22:98:aa:12:68:af:
         03:84:99:75:0c:13:15:f9:e3:8e:6c:98:db:cb:0a:67:cd:38:
         f9:e9:26:92:5d:5f:a2:d4:27:f5:fb:19:00:e1:27:b5:05:03:
         ad:f0:a9:33:e5:a1:14:59:0a:6c:17:07:7b:f1:e2:99:20:c1:
         f1:b3:36:a2:b0:b9:12:ee:5b:35:51:c7:b5:44:be:6c:ea:3f:
         f0:8d:28:1a:6d:3d:79:2b:15:db:b8:95:73:ee:41:15:b6:1e:
         22:1a:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:55:30 2025 by rpki-client