Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa
File:                     3230302e3131332e302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          zg6DN8g/H3CiN7xuNGZsEmdEpYWnhB1HRBcG9gVfqYM=
Subject key identifier:   B1:2B:4E:7A:07:09:C9:ED:58:9D:7E:69:92:7B:E6:9A:C5:5C:9E:06
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       3054E7ACED423A06F82ADBFA7260DB068F479639
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:00:56 +0000
ROA not before:           Tue 04 Feb 2025 19:55:56 +0000
ROA not after:            Tue 03 Feb 2026 20:00:56 +0000
asID:                     15311
IP address blocks:        200.113.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:54:e7:ac:ed:42:3a:06:f8:2a:db:fa:72:60:db:06:8f:47:96:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:56 2025 GMT
            Not After : Feb  3 20:00:56 2026 GMT
        Subject: CN=B12B4E7A0709C9ED589D7E69927BE69AC55C9E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ea:c4:1c:5c:1f:7b:d0:c1:81:13:b6:6f:c7:
                    d5:c2:e6:93:16:9e:92:65:01:e7:e2:42:c0:3d:88:
                    65:45:d4:1f:16:24:d8:d2:40:6f:39:80:7a:15:db:
                    7c:f8:14:6d:26:d7:75:8f:9e:dd:3b:eb:a1:80:91:
                    f5:f0:27:7f:e4:77:3b:34:e0:a4:7c:11:68:87:a1:
                    67:6b:5f:cf:14:4b:a2:92:b5:e4:b5:a0:81:16:df:
                    61:27:9a:9d:a2:64:35:58:91:3a:89:55:72:aa:b7:
                    cc:3d:6a:87:ab:6d:d4:72:ee:8c:f3:8f:2b:f8:1c:
                    83:77:e6:d6:02:40:8c:97:9a:3d:c1:d6:b7:01:93:
                    f5:df:65:d8:bb:ff:d7:0f:29:d1:37:c5:01:55:f7:
                    47:a5:b1:88:a0:8f:76:04:74:4f:e7:6c:84:4d:07:
                    6c:a5:00:e7:eb:cf:a9:15:89:c7:2e:7e:29:2d:75:
                    b8:31:fc:a8:10:43:cc:55:41:f6:a2:63:2a:75:c7:
                    b0:0b:44:f6:8a:b1:2c:79:95:bb:ba:07:c5:7f:11:
                    75:e2:9a:7c:71:7d:70:e4:97:2e:c4:a2:3e:93:c8:
                    4a:32:6f:6f:d8:ee:07:55:b4:9a:27:37:96:3f:9c:
                    94:d2:08:d9:36:95:7c:03:22:8a:2c:a7:e6:e1:ee:
                    27:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:4E:7A:07:09:C9:ED:58:9D:7E:69:92:7B:E6:9A:C5:5C:9E:06
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:27:f7:86:06:1a:7b:32:5e:19:d0:4a:eb:62:47:b5:3b:b9:
         98:8c:8e:fa:46:b6:25:e9:17:33:64:a4:2d:19:52:f2:30:5f:
         ef:d4:8c:6a:31:aa:60:c0:31:bc:40:0b:3a:23:6a:d2:d3:70:
         98:86:11:fc:8e:9e:51:d9:a6:33:ea:93:53:18:06:dc:16:57:
         a2:81:c6:e3:cb:78:16:3d:ce:55:fc:87:8a:0e:6f:81:72:b7:
         32:b3:a3:bb:d0:ac:45:6c:8c:1b:70:1a:1f:b4:05:99:80:1f:
         59:39:2b:e4:ef:ea:86:fc:f2:66:9b:4d:22:de:3b:80:f8:73:
         8b:66:d9:84:65:44:bd:d7:ab:83:85:4b:72:44:e6:76:a2:a0:
         56:1c:6d:63:c2:a4:6d:aa:3c:d1:37:b9:04:cf:e9:a2:02:a7:
         68:e7:31:85:0a:96:68:67:bd:4e:6d:7a:ba:33:05:49:e3:6b:
         72:75:0a:ed:91:26:48:40:82:ea:d0:79:89:17:a7:72:03:9f:
         43:7a:a8:b3:1d:68:3c:47:4d:fe:5f:04:05:a8:73:de:12:f5:
         0b:8b:80:e1:86:83:ca:d1:b5:6a:4e:e1:af:07:bd:d6:80:ab:
         53:c1:ad:33:65:8e:5c:85:83:b6:4c:f4:d9:50:ec:96:b3:9d:
         93:26:38:dd
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMFTnrO1COgb4Ktv6cmDbBo9HljkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNTAyMDQxOTU1NTZaFw0yNjAyMDMyMDAwNTZaMDMxMTAvBgNV
BAMTKEIxMkI0RTdBMDcwOUM5RUQ1ODlEN0U2OTkyN0JFNjlBQzU1QzlFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW6sQcXB970MGBE7Zvx9XC5pMW
npJlAefiQsA9iGVF1B8WJNjSQG85gHoV23z4FG0m13WPnt0766GAkfXwJ3/kdzs0
4KR8EWiHoWdrX88US6KSteS1oIEW32Enmp2iZDVYkTqJVXKqt8w9aoerbdRy7ozz
jyv4HIN35tYCQIyXmj3B1rcBk/XfZdi7/9cPKdE3xQFV90elsYigj3YEdE/nbIRN
B2ylAOfrz6kViccufiktdbgx/KgQQ8xVQfaiYyp1x7ALRPaKsSx5lbu6B8V/EXXi
mnxxfXDkly7Eoj6TyEoyb2/Y7gdVtJonN5Y/nJTSCNk2lXwDIoosp+bh7ifdAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUsStOegcJye1YnX5pknvmmsVcngYwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzUzMzMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIcQAwDQYJ
KoZIhvcNAQELBQADggEBAHcn94YGGnsyXhnQSutiR7U7uZiMjvpGtiXpFzNkpC0Z
UvIwX+/UjGoxqmDAMbxACzojatLTcJiGEfyOnlHZpjPqk1MYBtwWV6KBxuPLeBY9
zlX8h4oOb4FytzKzo7vQrEVsjBtwGh+0BZmAH1k5K+Tv6ob88mabTSLeO4D4c4tm
2YRlRL3Xq4OFS3JE5naioFYcbWPCpG2qPNE3uQTP6aICp2jnMYUKlmhnvU5teroz
BUnja3J1Cu2RJkhAgurQeYkXp3IDn0N6qLMdaDxHTf5fBAWoc94S9QuLgOGGg8rR
tWpO4a8HvdaAq1PBrTNljlyFg7ZM9NlQ7JaznZMmON0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:24:05 2025 by rpki-client