Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa
File:                     3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa (raw, json)
Hash identifier:          0SMt0ah3vOtnrLNir0EL/Ab7wtUJuoh04zRGGNbODkQ=
Subject key identifier:   BA:6A:F4:AD:92:FF:06:B4:3B:AA:E4:0E:28:41:99:94:65:AD:AC:F9
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       33C7903881D07C1BE718F2EED02E7186CE97C29E
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa
Signing time:             Tue 04 Feb 2025 18:28:02 +0000
ROA not before:           Tue 04 Feb 2025 18:23:02 +0000
ROA not after:            Tue 03 Feb 2026 18:28:02 +0000
asID:                     25620
IP address blocks:        200.119.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c7:90:38:81:d0:7c:1b:e7:18:f2:ee:d0:2e:71:86:ce:97:c2:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Feb  4 18:23:02 2025 GMT
            Not After : Feb  3 18:28:02 2026 GMT
        Subject: CN=BA6AF4AD92FF06B43BAAE40E2841999465ADACF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:a6:f7:31:76:df:3d:3b:11:ae:78:c9:5a:
                    54:6a:6d:5a:13:94:1e:ad:f4:ac:14:64:12:74:d4:
                    78:dc:c9:77:b3:4c:b2:16:6b:cf:33:01:a2:ba:a8:
                    80:eb:49:1c:e4:45:9c:46:79:cb:f8:96:1c:ce:fe:
                    26:b0:1b:59:8c:30:67:ca:13:3e:dc:15:a8:a2:e7:
                    91:88:69:6d:38:59:f4:6c:23:8a:dd:cc:8f:ac:03:
                    3e:a3:97:07:37:e6:25:21:e4:be:d9:fe:14:56:56:
                    28:62:4c:95:fd:de:a3:c0:1a:30:7c:46:55:86:3d:
                    9c:a1:6e:51:17:d5:15:ff:8b:6f:75:74:ff:59:dc:
                    2f:e4:42:fd:9d:74:23:e4:fe:fc:42:f2:d2:65:8d:
                    df:e3:51:ce:3d:d5:04:f2:d1:44:69:dc:e5:eb:b9:
                    06:dc:99:04:09:2c:e7:c9:f9:6b:a0:a7:17:9d:34:
                    38:4d:39:c2:60:88:58:53:c0:2c:51:44:76:80:07:
                    b9:18:ec:96:b6:29:1b:be:97:27:eb:ab:01:2d:00:
                    b4:57:2c:90:ba:ba:ef:d9:b1:80:ff:8f:0c:9b:b0:
                    35:77:90:ef:dc:dd:97:74:e2:9c:23:35:cd:3f:4b:
                    ff:87:0c:a1:de:c4:75:11:6f:e3:32:aa:69:d4:9b:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:F4:AD:92:FF:06:B4:3B:AA:E4:0E:28:41:99:94:65:AD:AC:F9
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230302e3131392e3139322e302f31392d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:9f:9a:a2:32:e8:d2:f7:9c:37:0b:6f:30:73:5c:37:03:
         cf:91:b3:76:e9:90:05:ae:b4:db:04:e6:d2:cf:91:e7:56:4c:
         6c:c3:86:9e:d7:74:02:73:f1:8f:32:59:74:a8:81:f3:c2:b2:
         77:12:d4:a8:1e:b5:55:14:39:66:af:c7:a7:ec:91:98:66:a3:
         bc:16:00:e1:f0:f3:c5:6a:1d:ba:a8:38:4d:78:e5:45:c8:1a:
         aa:41:9b:0f:bd:01:5c:fb:99:b2:0e:9a:e6:77:8d:fe:3d:fa:
         ea:01:cf:48:c8:c3:4a:d8:bc:8b:8f:90:13:24:64:12:07:e2:
         bf:68:dd:16:b6:f3:d4:df:8c:cb:2f:b9:5b:af:d6:61:92:ca:
         e3:1a:1e:57:0e:92:c4:95:f0:9f:1c:b3:41:8a:9b:1e:9c:bc:
         7e:ac:cf:1f:65:45:83:1a:8a:7d:f8:26:33:d3:5e:2e:70:a4:
         5b:59:f8:89:a2:4c:d5:80:74:63:0c:b7:82:2e:43:34:69:fd:
         84:3e:a1:63:d5:0b:6e:4d:59:ba:1a:54:5b:5a:7a:60:a8:a3:
         1e:cc:0e:4f:fd:16:ec:9d:4a:4b:07:c1:20:19:c9:81:11:8d:
         51:fc:3b:55:30:2c:5f:36:36:3d:32:ee:77:48:1e:80:11:1b:
         a3:50:4a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:56 2025 by rpki-client