Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135342e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          d1rz9mHo7+1OQTPwurrr0TBrWb5y/pNPv8vEmxzkZH4=
Subject key identifier:   26:CC:A7:63:D7:1B:47:C1:E2:05:4C:24:87:1C:30:D1:7D:B9:DF:3C
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       04E0D50D0880F8D57AB798126E4DE11B43A06509
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 04 Feb 2025 18:33:13 +0000
ROA not before:           Tue 04 Feb 2025 18:28:13 +0000
ROA not after:            Tue 03 Feb 2026 18:33:13 +0000
asID:                     20454
IP address blocks:        200.35.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e0:d5:0d:08:80:f8:d5:7a:b7:98:12:6e:4d:e1:1b:43:a0:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:13 2025 GMT
            Not After : Feb  3 18:33:13 2026 GMT
        Subject: CN=26CCA763D71B47C1E2054C24871C30D17DB9DF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:0f:78:75:3e:58:90:75:9f:20:e2:e5:75:
                    c5:cc:58:2e:33:89:92:82:1e:bc:b2:b5:01:ca:d4:
                    4b:2c:94:8c:ba:19:e1:3a:db:1e:a6:3c:89:3c:9e:
                    06:b3:18:65:14:0c:d1:bc:81:5a:53:21:33:85:c8:
                    a8:8b:4f:27:6a:ce:f6:29:3a:76:b6:24:ec:a3:87:
                    d0:1f:52:5d:31:0d:44:8d:a8:0d:12:c8:1c:e4:29:
                    ec:38:f0:7b:ab:a5:61:19:9d:dc:9e:d3:ff:0e:20:
                    5a:20:9e:7e:a0:03:2f:9b:f9:1b:7b:87:e5:29:e7:
                    30:83:d6:e5:fb:26:d0:73:c8:56:1c:1e:2b:79:55:
                    3f:d2:01:e6:b4:fa:88:cf:91:56:39:b2:25:50:6f:
                    fb:23:00:fe:45:b9:40:2b:67:b6:bc:86:3a:db:28:
                    e6:92:fe:4d:78:58:3c:2b:32:0a:18:43:92:a2:7d:
                    34:ff:ff:3c:28:39:2a:65:7e:31:26:46:4d:71:27:
                    35:5c:48:43:3e:23:a0:cb:85:13:40:a4:96:5a:59:
                    ab:e1:b4:2d:0e:9b:db:3c:d8:e4:a8:c7:45:54:21:
                    43:82:c0:0a:05:68:25:79:83:33:18:0d:90:0a:2a:
                    e2:a3:35:1c:f6:76:da:b0:01:30:b0:ce:dd:32:fc:
                    a7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:A7:63:D7:1B:47:C1:E2:05:4C:24:87:1C:30:D1:7D:B9:DF:3C
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135342e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ed:b8:9f:6b:96:32:13:41:6b:ec:9c:82:eb:b7:b9:bc:20:
         3f:12:89:da:27:a3:14:78:0d:21:f4:c8:a3:87:6c:4c:db:d2:
         c1:9a:bc:f4:4e:fa:aa:4e:8f:d1:7b:3d:ca:a4:4f:78:37:ff:
         0f:7d:0c:47:cc:99:15:7a:e0:a3:57:e9:79:6b:28:7a:65:6f:
         b6:6e:19:84:90:e1:cd:84:da:70:6c:57:29:3a:bb:0a:31:66:
         58:e2:7d:76:4e:dc:07:ef:26:62:e2:bc:f3:73:e3:a0:d2:15:
         34:50:78:cf:b7:82:dd:87:01:5a:95:8e:67:07:01:ed:da:81:
         ef:20:44:d8:39:de:c8:8a:29:6f:a0:fc:f7:54:87:f7:2a:3d:
         1a:4b:4c:2c:b7:14:9c:67:c0:a4:9a:9f:3d:6e:6c:7a:40:79:
         55:b8:8c:ae:4a:c3:a1:b5:30:b5:e7:c2:63:e3:3c:bf:54:77:
         a9:93:c1:5d:b9:3b:42:07:e1:bd:df:b5:8a:63:a3:23:78:18:
         26:7f:d3:60:89:6d:9d:4c:bd:d9:43:dd:63:9d:c8:dc:88:fd:
         d0:83:80:0d:9a:37:f3:71:99:7f:ae:be:9d:01:d6:de:6a:aa:
         74:f2:2b:66:b7:e6:9b:08:79:c9:19:3a:62:ae:53:1d:f2:96:
         88:5d:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:58 2025 by rpki-client