Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa
File:                     3230302e3131302e36342e302f31392d3234203d3e203139313639.roa (raw, json)
Hash identifier:          mBxm5uFVjlnXlP36OphkBDKoGTxCGAfFCN0IBBJGxek=
Subject key identifier:   70:CD:5F:71:05:B8:06:D3:10:E8:04:18:10:B7:35:2F:3D:2F:45:CC
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       17A814EB09B3504CE5F67E436FEBE8F07262CFD9
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:13 +0000
ROA not before:           Tue 04 Feb 2025 18:06:13 +0000
ROA not after:            Tue 03 Feb 2026 18:11:13 +0000
asID:                     19169
IP address blocks:        200.110.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a8:14:eb:09:b3:50:4c:e5:f6:7e:43:6f:eb:e8:f0:72:62:cf:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:13 2025 GMT
            Not After : Feb  3 18:11:13 2026 GMT
        Subject: CN=70CD5F7105B806D310E8041810B7352F3D2F45CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a2:28:48:31:c6:aa:ec:b0:39:27:20:cd:87:
                    3d:e7:0e:23:4d:15:b7:07:59:ca:a1:f8:fe:93:98:
                    00:a4:05:e8:b2:57:5b:e2:80:55:12:7b:df:72:8a:
                    c9:13:f8:4f:52:cc:1c:eb:fb:05:b3:91:a8:86:6e:
                    5e:4e:8a:58:26:33:02:8e:71:53:53:0a:50:43:d8:
                    b9:86:f4:f4:d0:42:66:ba:a8:49:70:1f:2c:69:0c:
                    cc:50:b8:ce:ff:51:10:8e:4a:ff:4e:41:b7:9c:eb:
                    e0:4d:fa:10:ba:db:5d:05:bb:9e:12:03:92:7b:45:
                    56:7a:c2:2d:8c:bf:4e:7f:e3:6a:c3:ce:64:c0:d9:
                    69:80:cd:c9:f3:ca:97:7e:60:21:82:2d:fe:43:7d:
                    43:36:2d:14:31:86:54:db:15:7a:18:a9:8e:4b:f6:
                    12:6e:cc:62:56:ee:c3:33:0d:7f:e1:19:06:4a:b6:
                    10:cb:ea:e5:2d:8a:8c:39:06:80:5d:73:ce:a2:9d:
                    bd:78:59:09:a7:5e:52:4a:05:ee:f4:a1:ad:94:20:
                    fb:74:b4:d4:28:24:09:98:4e:9e:d2:d6:67:fe:0d:
                    9e:e9:3f:07:02:09:30:8b:81:5b:37:88:00:68:63:
                    82:d7:35:62:fc:47:2c:f7:01:2a:86:91:21:eb:6e:
                    01:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CD:5F:71:05:B8:06:D3:10:E8:04:18:10:B7:35:2F:3D:2F:45:CC
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e3131302e36342e302f31392d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:d8:9e:68:be:29:ae:a9:36:a7:17:3a:fa:4b:da:ec:20:7a:
         80:7e:59:02:68:1a:7e:4d:3d:78:d0:56:c9:fc:03:78:03:ac:
         a8:62:2c:ee:c7:63:b9:98:34:2c:59:52:5b:c1:ce:f1:0d:dc:
         6f:b6:d3:78:51:ac:66:65:5e:3d:cc:f0:df:db:8c:6b:4e:b8:
         34:1a:cc:cd:bb:a9:b6:68:a3:39:1a:74:37:39:0b:1f:42:13:
         03:bd:0e:46:0e:c1:0a:2f:eb:1f:fc:17:02:a8:ca:c0:f6:f8:
         b6:9d:1f:ad:07:2f:05:c7:dd:38:46:8a:6a:54:5f:fe:b1:d0:
         8c:38:39:bb:bd:e3:dd:98:6d:76:a0:ee:3e:09:98:ce:dd:e7:
         da:16:ef:18:43:26:2a:70:15:f4:9e:2a:6d:5f:c2:75:a1:72:
         ae:b5:d8:7f:7e:a3:96:58:4f:83:20:d7:b5:80:ae:54:bd:7a:
         08:55:ef:dd:a8:14:ac:75:0c:56:68:8f:1e:d4:bf:bd:44:e2:
         fb:a0:84:1e:df:66:2b:dd:6b:ab:e9:61:cd:cf:9e:34:ca:2c:
         dd:02:cf:87:a7:eb:6e:db:d0:79:f7:34:08:25:34:3c:87:5d:
         d6:78:cc:ff:da:5c:34:2d:c0:5a:f1:31:06:87:9b:63:f4:27:
         92:6d:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:14 2025 by rpki-client