Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39392e302f32342d3234203d3e20323639393139.roa
File:                     3230302e3131352e39392e302f32342d3234203d3e20323639393139.roa (raw, json)
Hash identifier:          qwagE4BCHaa3rn+nqxvMGg9cMr6M6RamLXCWoXM/fDM=
Subject key identifier:   E7:AB:DA:13:DD:04:C3:8F:7E:7D:14:39:96:24:04:66:5B:6B:68:53
Certificate issuer:       /CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
Certificate serial:       792A9C8F4A1BAD3F108FA664C2D412C21E7B83BE
Authority key identifier: 4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39392e302f32342d3234203d3e20323639393139.roa
Signing time:             Tue 04 Feb 2025 18:34:43 +0000
ROA not before:           Tue 04 Feb 2025 18:29:43 +0000
ROA not after:            Tue 03 Feb 2026 18:34:43 +0000
asID:                     269919
IP address blocks:        200.115.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:2a:9c:8f:4a:1b:ad:3f:10:8f:a6:64:c2:d4:12:c2:1e:7b:83:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E15D89822F77B1877B8E32D843F4596B81C19AB
        Validity
            Not Before: Feb  4 18:29:43 2025 GMT
            Not After : Feb  3 18:34:43 2026 GMT
        Subject: CN=E7ABDA13DD04C38F7E7D1439962404665B6B6853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5d:42:be:55:db:c4:b3:12:f5:df:4d:f7:34:
                    2b:d2:29:b9:2d:1a:c4:6c:84:5f:94:5f:2b:bb:c1:
                    71:2f:c9:43:bb:5f:6f:03:da:3c:54:50:28:29:8d:
                    64:af:b4:f7:2f:d9:36:22:a2:fc:47:1d:e1:a1:66:
                    7d:b1:5f:19:f9:94:7b:9e:97:91:64:9c:d3:13:19:
                    e4:63:04:b1:83:48:34:49:2e:d7:ac:7e:4b:03:4c:
                    b8:dd:cb:b8:6f:a8:3b:35:96:b6:bb:c3:a8:6e:54:
                    e1:3e:6a:98:a0:24:92:34:35:78:84:1e:8d:9f:06:
                    fe:25:ee:f2:5d:aa:1f:25:16:1e:55:7d:0a:c4:ea:
                    ee:57:85:b2:67:59:5b:86:3c:9d:1f:31:52:81:65:
                    c5:d4:8b:53:43:d6:64:8e:79:31:c0:f9:9f:c9:f1:
                    1a:62:f7:9b:77:ef:26:f3:d8:ad:ac:b5:57:be:a9:
                    97:81:3f:e1:85:a5:e4:be:69:c9:27:3e:2b:3c:e5:
                    e7:b7:40:90:bd:ca:97:fb:48:da:cd:17:62:ec:6a:
                    35:a4:4e:6e:e6:05:1d:ee:e6:a3:82:fc:91:2d:05:
                    cd:b7:24:a5:c8:5e:ea:05:ec:91:06:8e:6a:10:03:
                    18:20:cf:b7:56:3f:6a:85:5e:4a:4f:dd:9d:11:d7:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AB:DA:13:DD:04:C3:8F:7E:7D:14:39:96:24:04:66:5B:6B:68:53
            X509v3 Authority Key Identifier:
                keyid:4E:15:D8:98:22:F7:7B:18:77:B8:E3:2D:84:3F:45:96:B8:1C:19:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E15D89822F77B1877B8E32D843F4596B81C19AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F8FB0735B36BFD4CDF5D599FD3D706CF87DFEED311F7D6F84402A819C3D22C/0/3230302e3131352e39392e302f32342d3234203d3e20323639393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:7f:aa:43:be:d4:50:8a:72:30:b2:3b:ca:a7:0c:a4:d6:8b:
         b7:49:e7:a9:ea:99:f7:46:50:ee:88:2f:07:65:17:75:07:25:
         50:18:3e:55:91:bf:f8:e0:a1:50:ed:a9:3f:c9:22:16:ff:6e:
         15:0b:df:2d:e9:2e:d2:b9:dc:2f:64:75:43:ac:a8:68:4d:8b:
         3c:1f:13:15:a6:36:7a:71:84:dd:22:3a:56:29:1e:ee:50:f2:
         79:87:f7:be:b3:6e:8b:c4:8d:85:bf:41:7c:37:52:15:9d:f9:
         c2:c1:5b:10:d7:52:48:49:8e:6f:0e:5f:69:8b:f5:0c:b3:a1:
         c9:dd:6b:c7:b0:6f:97:7a:f3:d9:ba:5e:c5:0b:8f:1d:d5:6b:
         84:e4:3d:de:f4:c4:96:6a:8d:04:a1:22:0a:b8:1c:58:0b:70:
         0b:bf:f2:61:ca:08:ba:9c:de:9e:c6:55:c3:bd:7c:4c:31:16:
         20:71:56:3d:13:51:8f:e8:e2:9c:07:5c:55:2c:54:9c:b2:5e:
         a7:60:7f:0a:8a:fa:fa:b7:2c:36:c5:65:68:6d:f6:a3:7b:7d:
         0f:be:7b:8b:af:db:69:26:f7:0e:3c:8c:2f:83:c6:84:9e:61:
         5c:a7:b2:6d:46:9b:bd:04:ef:ed:60:14:5f:af:82:0f:c1:36:
         79:64:5d:c8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUeSqcj0obrT8Qj6ZkwtQSwh57g74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUxNUQ4OTgyMkY3N0IxODc3QjhFMzJEODQzRjQ1OTZC
ODFDMTlBQjAeFw0yNTAyMDQxODI5NDNaFw0yNjAyMDMxODM0NDNaMDMxMTAvBgNV
BAMTKEU3QUJEQTEzREQwNEMzOEY3RTdEMTQzOTk2MjQwNDY2NUI2QjY4NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+XUK+VdvEsxL13033NCvSKbkt
GsRshF+UXyu7wXEvyUO7X28D2jxUUCgpjWSvtPcv2TYiovxHHeGhZn2xXxn5lHue
l5FknNMTGeRjBLGDSDRJLtesfksDTLjdy7hvqDs1lra7w6huVOE+apigJJI0NXiE
Ho2fBv4l7vJdqh8lFh5VfQrE6u5XhbJnWVuGPJ0fMVKBZcXUi1ND1mSOeTHA+Z/J
8Rpi95t37ybz2K2stVe+qZeBP+GFpeS+acknPis85ee3QJC9ypf7SNrNF2LsajWk
Tm7mBR3u5qOC/JEtBc23JKXIXuoF7JEGjmoQAxggz7dWP2qFXkpP3Z0R105jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU56vaE90Ew49+fRQ5liQEZltraFMwHwYDVR0j
BBgwFoAUThXYmCL3exh3uOMthD9FlrgcGaswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEY4RkIwNzM1QjM2QkZENENERjVENTk5RkQzRDcwNkNG
ODdERkVFRDMxMUY3RDZGODQ0MDJBODE5QzNEMjJDLzAvNEUxNUQ4OTgyMkY3N0Ix
ODc3QjhFMzJEODQzRjQ1OTZCODFDMTlBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80RTE1RDg5ODIyRjc3QjE4NzdC
OEUzMkQ4NDNGNDU5NkI4MUMxOUFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGOEZCMDczNUIzNkJGRDRDREY1RDU5OUZEM0Q3MDZDRjg3REZFRUQz
MTFGN0Q2Rjg0NDAyQTgxOUMzRDIyQy8wLzMyMzAzMDJlMzEzMTM1MmUzOTM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHNj
MA0GCSqGSIb3DQEBCwUAA4IBAQB0f6pDvtRQinIwsjvKpwyk1ou3Seep6pn3RlDu
iC8HZRd1ByVQGD5Vkb/44KFQ7ak/ySIW/24VC98t6S7SudwvZHVDrKhoTYs8HxMV
pjZ6cYTdIjpWKR7uUPJ5h/e+s26LxI2Fv0F8N1IVnfnCwVsQ11JISY5vDl9pi/UM
s6HJ3WvHsG+XevPZul7FC48d1WuE5D3e9MSWao0EoSIKuBxYC3ALv/Jhygi6nN6e
xlXDvXxMMRYgcVY9E1GP6OKcB1xVLFScsl6nYH8Kivr6tyw2xWVobfaje30PvnuL
r9tpJvcOPIwvg8aEnmFcp7JtRpu9BO/tYBRfr4IPwTZ5ZF3I
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:05 2025 by rpki-client