Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa
File:                     3230302e31302e3230352e302f32342d3234203d3e203237393939.roa (raw, json)
Hash identifier:          5Sgx8AlAeyegeQIR+y1wxeRR9+P5epLMeJWtYEizi50=
Subject key identifier:   B9:9C:94:D5:14:07:B7:82:A0:11:97:9A:7E:FF:E8:6B:75:DE:06:64
Certificate issuer:       /CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
Certificate serial:       2DA6C623917BB41FDA913B7CBFA442D8043CA124
Authority key identifier: 80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa
Signing time:             Tue 04 Feb 2025 18:24:52 +0000
ROA not before:           Tue 04 Feb 2025 18:19:52 +0000
ROA not after:            Tue 03 Feb 2026 18:24:52 +0000
asID:                     27999
IP address blocks:        200.10.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a6:c6:23:91:7b:b4:1f:da:91:3b:7c:bf:a4:42:d8:04:3c:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808AC600DE5D9C23D41119CA28DB82C3DB3F6E49
        Validity
            Not Before: Feb  4 18:19:52 2025 GMT
            Not After : Feb  3 18:24:52 2026 GMT
        Subject: CN=B99C94D51407B782A011979A7EFFE86B75DE0664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:73:1f:bd:1b:44:77:e4:77:7f:c7:07:fd:
                    73:25:38:1f:70:93:d5:6b:62:00:2a:a6:95:62:0f:
                    1d:70:8c:39:70:51:35:f3:65:11:b2:be:7a:cb:d6:
                    92:2e:96:69:1f:84:c5:88:8d:89:e8:16:0b:76:f7:
                    24:e0:f5:ac:a1:d9:b9:94:45:6f:b4:50:64:67:cf:
                    93:0a:3c:a7:b3:9e:a3:18:72:92:ac:fa:8a:99:3b:
                    32:d6:65:cb:9a:76:99:91:90:a6:94:4b:a6:06:51:
                    25:fd:c3:fb:f7:8a:6e:ab:5d:bc:9e:b5:89:0f:89:
                    af:03:f8:df:66:31:3b:aa:b3:5a:7d:7c:bb:41:a1:
                    5b:1d:df:84:83:14:94:bf:8e:d1:01:69:2b:cb:59:
                    1c:da:1f:dc:81:af:cf:41:82:94:a2:fd:59:cf:a4:
                    4c:bc:31:25:fe:f2:61:55:0b:1d:d0:ef:c0:07:f3:
                    e3:ee:f1:ec:44:81:2f:bd:1a:c1:66:86:12:08:7b:
                    43:b6:eb:0c:db:84:5a:3a:b2:dc:61:3c:f3:67:1e:
                    c3:c1:1f:5c:c5:0c:13:67:8b:0f:59:1a:55:7a:4e:
                    9d:4c:d4:f3:d6:1f:aa:37:4a:20:a7:0d:38:b0:37:
                    97:82:4e:76:ca:75:f0:73:13:4a:d3:a9:8e:ff:bd:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9C:94:D5:14:07:B7:82:A0:11:97:9A:7E:FF:E8:6B:75:DE:06:64
            X509v3 Authority Key Identifier:
                keyid:80:8A:C6:00:DE:5D:9C:23:D4:11:19:CA:28:DB:82:C3:DB:3F:6E:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/808AC600DE5D9C23D41119CA28DB82C3DB3F6E49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28A595006F02B6870A8F3857DC9B4E8ACEAAA289104DDB6AA17CB71FFCB1EAE/0/3230302e31302e3230352e302f32342d3234203d3e203237393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:5d:c8:fa:16:0a:16:d7:b6:05:b0:02:71:37:74:59:22:41:
         a4:15:21:ec:8c:07:a4:b6:d0:bc:97:f1:d1:e2:14:46:8c:5f:
         4c:08:2e:bc:56:08:3f:fb:e6:60:c1:0c:68:20:3f:44:6d:09:
         0c:06:f7:52:fd:4c:b7:24:65:ea:0a:0f:a7:d0:82:f3:59:22:
         d6:c7:2d:66:e2:a1:a9:d1:87:4f:26:c0:bc:6c:c4:45:19:82:
         17:ca:62:ad:36:3e:f6:c4:7c:5d:e9:dc:bf:ca:74:86:be:f1:
         29:41:b6:6d:5d:c8:c9:46:44:53:e7:a4:6e:8b:37:db:94:ce:
         6b:7f:83:d9:24:1d:38:eb:60:72:a8:f9:4e:69:35:4a:b7:52:
         7b:a0:4d:3b:f5:a0:44:49:ee:24:09:b4:7c:ed:3a:4b:22:e7:
         0e:29:ed:c4:44:99:3e:01:3b:96:f9:a6:7d:e8:94:c3:27:9d:
         9a:d4:e0:32:0c:82:56:7a:4d:39:7f:99:54:73:e9:e2:0b:01:
         61:dc:ab:25:b7:89:fe:4e:ee:8e:24:e8:2a:0f:05:dc:80:ce:
         cc:9b:f4:5b:4b:1f:e1:35:29:58:9c:4f:51:e7:4d:2c:f7:2a:
         cd:75:1c:cc:4a:04:91:02:a3:ca:f0:31:73:ac:e6:d8:61:cc:
         76:f7:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:25 2025 by rpki-client