Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa
File:                     3230302e3131332e36342e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          hbZQRsXmHLBvLW72G133sztXhNQZhjfKK4mS8NSz4NA=
Subject key identifier:   61:B6:69:31:C5:12:03:78:34:09:C5:A1:2E:20:D0:B4:5A:56:5E:88
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       7F939B2B66672489DCE230ED5CE5B4A224EDFF00
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:01:01 +0000
ROA not before:           Tue 04 Feb 2025 19:56:01 +0000
ROA not after:            Tue 03 Feb 2026 20:01:01 +0000
asID:                     16629
IP address blocks:        200.113.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:93:9b:2b:66:67:24:89:dc:e2:30:ed:5c:e5:b4:a2:24:ed:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:01 2025 GMT
            Not After : Feb  3 20:01:01 2026 GMT
        Subject: CN=61B66931C51203783409C5A12E20D0B45A565E88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:4f:bf:82:8f:c1:e2:70:30:de:fd:be:55:
                    53:d2:52:9a:a5:8b:93:2c:3b:37:1d:16:15:fa:78:
                    02:48:6b:10:7e:0e:87:74:a9:73:69:93:c1:c9:a4:
                    87:66:57:d2:95:95:bc:b7:12:ae:81:10:f6:6f:8d:
                    26:1f:29:6f:e5:58:fa:04:09:d0:3b:65:09:4c:84:
                    8f:41:55:48:da:19:6d:82:89:1e:5b:41:d9:23:9f:
                    32:0e:2b:da:b6:40:9c:b8:b2:50:af:10:86:03:4a:
                    62:6d:21:47:b5:53:09:53:ee:11:04:cd:54:c3:48:
                    ae:9d:1d:90:c3:7d:cf:d3:21:6f:e2:a3:96:10:8f:
                    3a:bc:f8:ca:43:f1:8f:38:52:5f:1b:5c:fd:88:f6:
                    52:d0:63:2e:44:22:c3:2b:9d:1e:4c:27:bc:30:4d:
                    a2:f9:70:6e:77:2b:93:1f:bc:32:7b:56:b4:03:95:
                    c6:62:17:95:ad:0c:11:23:19:b4:fe:8b:b0:24:b1:
                    68:25:8a:79:97:e2:d9:f2:e4:e7:66:7d:e9:58:bd:
                    22:8a:4c:3c:3d:27:51:0e:10:9f:e6:40:4e:48:70:
                    06:33:6b:23:8c:53:e2:1a:6b:ea:05:56:1e:f0:0f:
                    19:4e:16:ad:cf:d8:44:d7:d8:87:c5:e6:04:a7:2a:
                    24:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:69:31:C5:12:03:78:34:09:C5:A1:2E:20:D0:B4:5A:56:5E:88
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e3131332e36342e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:2f:b5:cc:23:a0:68:90:4e:17:31:c2:f0:ac:46:e0:a6:bd:
         9f:f7:80:6e:09:60:6a:5b:20:fb:8a:38:cf:f8:da:d0:c0:06:
         41:a2:6d:9b:66:6d:4e:78:af:8b:cf:d0:71:70:ca:50:1a:57:
         8e:27:75:62:2e:f5:92:ad:f6:d1:1b:ce:a0:af:5e:f6:e4:ab:
         d6:4d:81:04:98:ac:f9:6d:d9:e8:6a:99:7f:df:07:30:cf:08:
         12:de:01:ac:43:e6:22:b7:e5:db:f1:2a:18:f9:31:54:5b:45:
         29:e6:c0:48:b6:c7:58:aa:1a:d9:f3:5c:6f:ff:9e:fc:ea:44:
         1d:79:32:21:99:5a:00:f0:e5:03:4b:9f:cb:4e:29:81:b1:c0:
         2f:d5:65:9a:fa:8b:4b:77:b1:08:1f:9c:97:aa:43:c7:68:fa:
         e3:59:25:42:a7:19:d0:27:17:ad:10:d3:8a:8a:58:e6:51:0b:
         bb:8b:00:a3:5e:0d:c6:c8:ae:c9:c0:66:99:c5:58:67:86:80:
         fe:9c:89:47:2f:bc:bc:93:f6:c6:c0:28:c0:a4:3e:9a:69:7a:
         67:c5:93:4c:6d:5c:0c:c8:00:1a:9b:37:b0:5d:35:41:3c:d6:
         48:73:d0:58:04:fc:7c:49:ea:8c:bb:a5:02:3a:0b:17:f1:60:
         7c:5d:59:9a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUf5ObK2ZnJInc4jDtXOW0oiTt/wAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNTAyMDQxOTU2MDFaFw0yNjAyMDMyMDAxMDFaMDMxMTAvBgNV
BAMTKDYxQjY2OTMxQzUxMjAzNzgzNDA5QzVBMTJFMjBEMEI0NUE1NjVFODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HU+/go/B4nAw3v2+VVPSUpql
i5MsOzcdFhX6eAJIaxB+Dod0qXNpk8HJpIdmV9KVlby3Eq6BEPZvjSYfKW/lWPoE
CdA7ZQlMhI9BVUjaGW2CiR5bQdkjnzIOK9q2QJy4slCvEIYDSmJtIUe1UwlT7hEE
zVTDSK6dHZDDfc/TIW/io5YQjzq8+MpD8Y84Ul8bXP2I9lLQYy5EIsMrnR5MJ7ww
TaL5cG53K5MfvDJ7VrQDlcZiF5WtDBEjGbT+i7AksWglinmX4tny5OdmfelYvSKK
TDw9J1EOEJ/mQE5IcAYzayOMU+Iaa+oFVh7wDxlOFq3P2ETX2IfF5gSnKiTDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUYbZpMcUSA3g0CcWhLiDQtFpWXogwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzEzMTMzMmUzNjM0MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhxQDAN
BgkqhkiG9w0BAQsFAAOCAQEAdS+1zCOgaJBOFzHC8KxG4Ka9n/eAbglgalsg+4o4
z/ja0MAGQaJtm2ZtTnivi8/QcXDKUBpXjid1Yi71kq320RvOoK9e9uSr1k2BBJis
+W3Z6GqZf98HMM8IEt4BrEPmIrfl2/EqGPkxVFtFKebASLbHWKoa2fNcb/+e/OpE
HXkyIZlaAPDlA0ufy04pgbHAL9VlmvqLS3exCB+cl6pDx2j641klQqcZ0CcXrRDT
iopY5lELu4sAo14NxsiuycBmmcVYZ4aA/pyJRy+8vJP2xsAowKQ+mml6Z8WTTG1c
DMgAGps3sF01QTzWSHPQWAT8fEnqjLulAjoLF/FgfF1Zmg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:54 2025 by rpki-client