Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          Y0c409NUrkew65cG85s4sP0jfBcFx8IYhgOjT4tspl4=
Subject key identifier:   1C:8F:36:D2:14:E2:4C:6E:43:2E:B2:E4:E2:25:99:89:F5:CB:B5:EE
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       39E76E7194C088024A152960E33EB1E233E2B56C
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 04 Feb 2025 18:33:12 +0000
ROA not before:           Tue 04 Feb 2025 18:28:12 +0000
ROA not after:            Tue 03 Feb 2026 18:33:12 +0000
asID:                     20454
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e7:6e:71:94:c0:88:02:4a:15:29:60:e3:3e:b1:e2:33:e2:b5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:12 2025 GMT
            Not After : Feb  3 18:33:12 2026 GMT
        Subject: CN=1C8F36D214E24C6E432EB2E4E2259989F5CBB5EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:da:92:7b:5b:4e:69:87:cc:6f:0d:64:b9:
                    87:51:38:d2:24:1c:a0:af:0d:7c:56:a0:59:84:89:
                    5f:72:f8:e4:ea:87:50:fa:15:da:d0:a5:20:1c:b2:
                    57:48:d7:99:d3:ca:43:3f:7c:99:8d:18:09:f3:a1:
                    6c:b7:6f:e5:1e:7a:3e:4e:47:51:18:6c:c5:41:f1:
                    73:29:c8:92:a4:cc:ae:c3:3e:5f:3e:73:17:5b:a5:
                    a4:e4:6c:ca:55:4c:e4:96:76:3a:b6:64:fa:9a:54:
                    93:b6:07:de:ce:fe:b6:47:ce:e6:6a:bd:b9:ab:3f:
                    4b:4a:83:c6:cc:b8:7b:72:15:c8:ef:da:24:64:e3:
                    57:2f:dd:60:b4:4b:46:9d:55:2d:d8:03:da:a2:4c:
                    4c:4e:46:e1:d6:49:2a:5a:b9:1f:20:ef:ee:74:22:
                    b6:8e:d2:e5:9f:77:04:38:6f:46:df:11:89:6a:09:
                    12:1e:73:19:e7:e6:2d:fa:71:4e:cf:83:b1:70:f4:
                    f4:b0:b5:c5:a1:71:a0:19:78:13:06:48:ff:b4:27:
                    6a:22:5d:46:54:07:06:66:a6:ea:0c:b5:b4:a1:c1:
                    3f:d0:45:81:37:af:ca:c7:b6:05:4b:4e:05:a9:60:
                    d9:ff:d5:fa:18:e7:96:cd:c9:20:68:72:ab:c3:92:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8F:36:D2:14:E2:4C:6E:43:2E:B2:E4:E2:25:99:89:F5:CB:B5:EE
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:cc:cf:c0:87:5e:7a:a6:99:e9:b2:13:0f:c1:70:c2:a0:e0:
         2a:00:1a:69:c6:04:55:0b:45:34:5f:42:84:9b:8b:dc:2a:4a:
         6f:00:c2:c9:23:7f:03:50:f4:f2:e6:55:0e:07:23:95:df:d7:
         e2:82:d5:3b:cd:74:79:d4:36:72:62:7d:91:60:cf:f6:01:63:
         e9:fc:8d:43:22:23:b5:e9:3e:b2:fb:1c:0f:1b:02:c2:a0:9a:
         a7:bd:92:94:df:7d:26:b2:3f:4d:71:3a:76:0f:24:8a:a5:86:
         36:ef:d5:b0:b3:bb:9b:0c:24:c2:05:c6:93:7b:42:ca:5e:14:
         e1:47:f7:fd:a2:01:9f:60:5d:8e:56:b7:c9:b7:2a:82:09:ad:
         22:a3:2e:99:75:c5:08:ee:6c:0b:b4:8a:33:d9:cc:c7:4c:00:
         b6:5b:b3:0c:69:05:23:ad:0b:8f:b9:03:75:fb:20:86:76:fe:
         9f:72:c7:e1:77:87:88:aa:37:f5:f6:31:b5:9a:9e:37:7e:93:
         8a:40:60:38:4e:df:53:b4:dd:5e:2d:74:68:df:ed:b9:69:bf:
         87:f0:77:d9:99:4e:5e:99:e3:46:93:1e:4d:e4:7d:e8:7e:73:
         31:71:76:7f:70:64:9e:29:8f:ac:c4:f0:5c:06:c5:44:81:16:
         22:b6:57:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:56 2025 by rpki-client