Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203139313639.roa
File:                     3230302e39332e3232342e302f32302d3234203d3e203139313639.roa (raw, json)
Hash identifier:          klnBXvXlHjyCRCPrLLBYMmBiIgj8DZ81fCx2pCRJjEM=
Subject key identifier:   EC:28:6E:44:65:0A:81:75:92:DF:2C:4D:AA:A7:83:E5:6D:52:54:96
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       13582C44CE12D5776D733D3A88C5B72324A2A360
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203139313639.roa
Signing time:             Tue 04 Feb 2025 18:11:11 +0000
ROA not before:           Tue 04 Feb 2025 18:06:11 +0000
ROA not after:            Tue 03 Feb 2026 18:11:11 +0000
asID:                     19169
IP address blocks:        200.93.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:58:2c:44:ce:12:d5:77:6d:73:3d:3a:88:c5:b7:23:24:a2:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:11 2025 GMT
            Not After : Feb  3 18:11:11 2026 GMT
        Subject: CN=EC286E44650A817592DF2C4DAAA783E56D525496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:b7:6b:65:73:9f:d9:bb:28:89:1a:8c:d9:
                    dc:93:40:35:6b:5d:32:f4:2c:cd:a7:06:11:f4:e7:
                    d3:74:57:cc:99:a4:13:64:86:fa:0c:4d:fa:3c:8e:
                    5f:4c:5a:cf:15:ea:7e:05:ab:70:1c:cc:fa:61:d5:
                    c1:d2:8c:f4:79:0f:4f:f1:64:a2:cd:0b:dd:df:04:
                    98:c6:94:95:60:09:a5:a2:01:74:84:15:10:03:d4:
                    77:89:91:a1:4b:37:9f:4e:dd:df:0b:e1:b6:66:53:
                    dd:2e:77:1b:11:0a:55:80:55:60:7a:1b:7a:ac:1b:
                    18:e2:52:f8:d9:00:a7:63:58:c9:c3:b6:69:f0:91:
                    74:45:fd:67:dd:c3:81:56:b9:ff:b8:d3:f9:5f:9e:
                    1a:8c:e0:59:e2:2e:2a:5d:02:35:74:bb:29:83:3d:
                    7b:52:9c:95:44:83:42:a0:fb:99:ef:4a:ec:39:d9:
                    ad:ad:6d:d2:4c:9d:2b:60:e7:0f:36:11:e2:09:da:
                    f1:79:80:55:87:34:ce:34:1e:7a:a3:59:33:a4:9d:
                    cf:f2:ba:7b:c8:c7:a1:6b:55:15:ee:2b:3a:f2:d7:
                    bf:fb:d2:7e:26:ed:0b:b6:43:65:bf:3e:b7:db:dd:
                    b6:95:cc:00:cf:6e:37:20:df:a7:7c:be:30:20:22:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:28:6E:44:65:0A:81:75:92:DF:2C:4D:AA:A7:83:E5:6D:52:54:96
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3230302e39332e3232342e302f32302d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:4e:a1:9f:92:54:87:9b:17:7e:74:f0:15:fe:86:8a:82:
         00:6d:b9:08:8b:b2:8e:27:93:d0:1f:89:cd:03:79:79:81:8e:
         ae:a3:87:af:e0:da:4a:79:33:ca:a9:03:60:fe:2f:6a:d3:2a:
         f1:ae:ae:22:6b:0e:88:75:08:ee:ac:f7:57:a4:6a:c0:31:a7:
         55:f5:9c:1f:8b:44:ef:69:90:1c:db:55:a0:6e:e8:fa:f7:64:
         b2:ef:5c:c2:4e:b0:7b:58:ce:db:6f:cd:e3:52:8f:7d:ca:0d:
         cc:63:1a:5a:6c:6d:07:8c:89:a4:83:30:7b:e9:bf:27:0f:a5:
         8f:18:49:e0:2f:f5:26:28:60:ad:e1:54:47:19:e7:f6:d0:03:
         d6:39:04:03:91:d8:33:17:22:0f:49:9f:ab:f0:46:2b:b2:e1:
         84:af:20:c6:ec:e5:8c:d4:0e:9c:9b:75:47:31:55:a9:47:b0:
         27:6c:a6:35:ae:52:5b:33:10:67:fe:86:0d:88:cc:9b:9a:c5:
         01:92:21:c0:84:50:ff:8e:9c:b5:da:0e:19:99:a0:a2:70:0b:
         79:99:2b:61:4a:7c:de:38:7f:71:61:d2:e6:21:32:b6:14:67:
         df:75:ab:56:bc:d9:06:ff:87:99:e8:6c:28:49:0a:c2:75:86:
         cb:0e:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:28 2025 by rpki-client