Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32322e302f32332d3234203d3e20323632313439.roa
File:                     3230302e35392e32322e302f32332d3234203d3e20323632313439.roa (raw, json)
Hash identifier:          lHVO5bMSOAeqnnhsFTSRqwW5IUpx6YSFirR4o7kJNZ4=
Subject key identifier:   49:47:1A:69:A1:F9:8B:7D:AF:14:51:B7:4F:77:CF:BA:32:6A:96:BE
Certificate issuer:       /CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
Certificate serial:       2CAF96A3769368A40A5C98FD2C85980A59A23CC0
Authority key identifier: CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32322e302f32332d3234203d3e20323632313439.roa
Signing time:             Tue 04 Feb 2025 18:35:39 +0000
ROA not before:           Tue 04 Feb 2025 18:30:39 +0000
ROA not after:            Tue 03 Feb 2026 18:35:39 +0000
asID:                     262149
IP address blocks:        200.59.22.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:af:96:a3:76:93:68:a4:0a:5c:98:fd:2c:85:98:0a:59:a2:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CAD42EC49F09199180FE63CB2419E2592F8E606F
        Validity
            Not Before: Feb  4 18:30:39 2025 GMT
            Not After : Feb  3 18:35:39 2026 GMT
        Subject: CN=49471A69A1F98B7DAF1451B74F77CFBA326A96BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:fa:b9:63:0d:f8:b2:53:91:c9:40:bc:a1:
                    d0:f4:1b:c2:3b:52:1e:f1:50:2b:76:3a:9b:27:83:
                    dc:ae:80:79:0c:15:46:2a:a3:5f:6e:54:ca:c9:19:
                    f8:76:9f:ee:59:42:f6:97:6f:01:4c:2b:02:3a:17:
                    4e:39:ab:ce:4c:8a:cb:1b:85:59:66:98:96:ef:00:
                    0f:9a:77:59:d4:b1:0e:7c:68:88:76:00:06:2d:3f:
                    9a:e6:a0:00:61:25:be:71:9b:13:c1:9e:14:35:ab:
                    fe:6b:2d:bc:e5:32:b2:1f:97:c4:11:26:64:ee:0c:
                    62:f6:97:12:b8:35:13:52:f2:b2:83:80:98:f6:4b:
                    12:f0:cb:5a:47:da:1d:dc:c2:e4:ab:63:3a:fe:df:
                    be:7c:cf:4e:28:58:58:65:37:8d:9b:04:60:fc:b9:
                    3a:4d:98:a3:c5:a4:d5:3d:64:d8:2f:7f:bc:5b:ed:
                    31:4b:2e:da:8c:75:34:20:87:29:a9:f4:c7:82:e8:
                    15:aa:51:19:3a:7e:9f:27:2f:42:c3:0a:d5:61:33:
                    bf:a5:fa:c4:5a:60:90:ba:d1:44:5f:b3:39:87:a0:
                    38:09:bb:8b:02:ee:75:cf:67:96:74:97:6b:af:07:
                    d0:70:ff:6b:b3:88:0e:3e:4a:a4:19:9e:c8:cd:a6:
                    a0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:47:1A:69:A1:F9:8B:7D:AF:14:51:B7:4F:77:CF:BA:32:6A:96:BE
            X509v3 Authority Key Identifier:
                keyid:CA:D4:2E:C4:9F:09:19:91:80:FE:63:CB:24:19:E2:59:2F:8E:60:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CAD42EC49F09199180FE63CB2419E2592F8E606F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/054C2197BCB4B91E6083BFB364323BAF11DE930F747439F1F624BCDF682C82AB/0/3230302e35392e32322e302f32332d3234203d3e20323632313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:73:37:f5:31:75:3e:63:fa:d5:94:32:dd:6f:69:c0:ea:5d:
         c9:ec:c6:9d:ab:f8:e4:2b:d6:7b:6d:12:1a:08:71:d8:95:db:
         73:58:3e:71:c5:c5:ca:c5:52:42:2f:2c:60:b5:cd:d0:27:ef:
         1c:68:39:8a:2e:0a:a7:72:16:97:3b:1d:37:92:bf:1b:ee:83:
         b5:80:7b:e0:0c:0f:27:7f:0a:7b:40:5c:4d:ee:a9:08:ce:7b:
         60:76:6a:00:66:6b:51:be:8c:30:b4:e9:fb:33:2a:fc:23:14:
         5a:cc:7e:7c:45:ee:5c:56:98:0e:77:e9:0f:4b:61:95:3e:1c:
         a2:1a:fb:fb:b1:00:1d:76:6b:ae:b0:d9:b3:ed:10:d2:fd:8b:
         69:b9:e9:b3:d1:df:c1:f4:ec:17:71:a1:bb:8e:38:49:18:db:
         e8:06:7a:5c:b6:d9:e9:f0:19:8a:2f:02:eb:9d:e1:f3:b8:13:
         a2:ff:c6:8d:d4:ed:0e:50:d6:51:91:9f:df:e7:91:30:60:f4:
         a3:92:a7:67:c6:d3:0b:5b:1c:98:a7:26:e0:a1:c1:39:5d:36:
         3e:3d:d4:86:87:7d:82:2c:50:33:f6:2f:88:a0:49:bd:5f:2b:
         2e:19:0b:3c:90:68:bc:6a:0d:b2:85:89:11:26:92:0d:43:f3:
         de:19:88:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:52 2025 by rpki-client