Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa
File:                     3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa (raw, json)
Hash identifier:          6L0kN/X+iONWYp2Uoh3YSZXTDEQqsdzRjCElRBAJI/g=
Subject key identifier:   01:64:1E:3B:B9:34:A5:35:BF:68:34:66:0B:B3:20:98:64:3C:27:3A
Certificate issuer:       /CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
Certificate serial:       1AFFBD2BE7AD879E75A74D7CBC320BB21C7E54DE
Authority key identifier: D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa
Signing time:             Tue 04 Feb 2025 20:07:48 +0000
ROA not before:           Tue 04 Feb 2025 20:02:48 +0000
ROA not after:            Tue 03 Feb 2026 20:07:48 +0000
asID:                     264690
IP address blocks:        200.10.156.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ff:bd:2b:e7:ad:87:9e:75:a7:4d:7c:bc:32:0b:b2:1c:7e:54:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9
        Validity
            Not Before: Feb  4 20:02:48 2025 GMT
            Not After : Feb  3 20:07:48 2026 GMT
        Subject: CN=01641E3BB934A535BF6834660BB32098643C273A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:45:c7:65:e2:f1:94:68:61:1d:dd:1f:ec:
                    cb:96:5c:17:f0:35:50:96:2f:4f:43:84:79:d4:fa:
                    49:7f:b8:7b:b9:12:b4:2d:cb:95:8c:6c:0a:9d:ad:
                    d4:86:b7:2d:bc:1f:6b:9c:75:da:45:9c:7c:0e:36:
                    ec:94:00:e4:c6:11:61:44:10:0c:01:06:e1:01:d4:
                    77:04:14:1f:fb:e5:1a:fe:45:39:5b:2d:78:fe:97:
                    94:4e:71:a9:78:94:d4:09:25:6c:de:8b:fd:d9:0b:
                    83:85:e3:de:f0:44:4f:d3:d7:b5:31:d1:32:3f:f1:
                    58:ac:8a:57:c9:18:de:87:c8:99:1d:1f:3f:ab:47:
                    d3:d1:c5:6e:27:28:d5:af:dc:a9:63:79:10:d0:c1:
                    b8:bf:5c:69:92:aa:38:fc:dd:97:6a:44:df:46:d8:
                    55:fe:8e:e4:c1:f0:2f:30:fd:ff:a2:d1:57:e8:86:
                    d7:44:24:c9:41:8e:af:72:d8:27:e2:01:4c:8d:8d:
                    49:64:d9:e9:73:fc:4f:e6:8d:03:ac:4a:50:4b:cd:
                    2b:29:02:2a:9d:20:06:f1:8a:45:79:76:eb:a4:15:
                    62:70:02:cd:d5:21:0d:92:22:80:6d:9a:73:d1:1a:
                    14:bd:ab:c3:df:f4:6e:f0:a5:53:db:42:ee:57:e0:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:64:1E:3B:B9:34:A5:35:BF:68:34:66:0B:B3:20:98:64:3C:27:3A
            X509v3 Authority Key Identifier:
                keyid:D8:B4:C3:62:6E:6F:69:28:DC:36:55:F1:ED:05:EB:78:27:A4:FB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8B4C3626E6F6928DC3655F1ED05EB7827A4FBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F207CCF97F44CDD65B7B130389FDBC9E32213F8E9E8671D59BAD81080264A6D1/0/3230302e31302e3135362e302f32332d3233203d3e20323634363930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:02:9d:8d:38:b1:08:6c:10:e9:29:1e:38:8f:2f:19:ea:87:
         a1:17:75:29:26:b4:e6:04:da:ff:2e:1d:93:63:76:1b:ea:dd:
         85:88:70:48:a9:fd:7e:5b:74:66:d3:86:2c:3f:66:d4:fe:3e:
         c9:0f:f5:90:bc:96:87:36:95:80:ff:d8:40:ce:68:d9:2b:f7:
         82:d1:25:4c:f9:1d:d1:db:82:1e:b8:9e:fd:9b:93:ff:ab:78:
         39:4b:c4:cf:da:e4:58:e0:cb:29:23:da:07:b0:8c:dc:f7:28:
         ff:22:ad:2d:25:f7:d9:db:bb:b0:fa:8a:42:9c:02:44:24:e1:
         8c:0d:45:3c:68:fb:21:97:68:be:4f:d8:8c:43:19:17:23:79:
         9b:61:a8:91:d1:86:6a:18:51:c8:32:c6:21:8b:94:e8:e9:1b:
         d2:03:9d:e9:4c:9b:91:b6:94:3a:02:70:0d:17:0a:07:65:60:
         84:98:c1:97:c8:f8:95:93:bc:f8:2d:17:94:c4:a9:61:de:c7:
         f9:a5:f0:35:b0:d4:d2:0f:01:b1:46:8c:48:65:dc:25:a3:6b:
         98:3d:39:79:9b:d5:9c:87:70:ee:36:3b:00:91:94:41:4b:26:
         aa:19:52:21:1c:4f:65:30:cd:44:4e:fb:df:59:f9:5e:3e:42:
         99:84:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:02 2025 by rpki-client