Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e203136363239.roa
File:                     3230302e34322e3138302e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          QfItvU9TIe8X/Ae3tkMRHjodkSuVMVVDb+TFNTRao54=
Subject key identifier:   55:30:E9:A0:64:36:C5:87:DC:06:60:77:CA:89:88:6B:5F:09:45:0C
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       2CD2869EAE615062C0FD5D8AC53521C05A8B2D22
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:56 +0000
ROA not before:           Tue 04 Feb 2025 19:55:56 +0000
ROA not after:            Tue 03 Feb 2026 20:00:56 +0000
asID:                     16629
IP address blocks:        200.42.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:d2:86:9e:ae:61:50:62:c0:fd:5d:8a:c5:35:21:c0:5a:8b:2d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:56 2025 GMT
            Not After : Feb  3 20:00:56 2026 GMT
        Subject: CN=5530E9A06436C587DC066077CA89886B5F09450C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f7:62:c3:f8:3b:b8:16:fa:22:e6:9b:cb:66:
                    25:07:a6:74:a9:e8:63:a0:17:1b:38:54:b8:bc:52:
                    b9:94:f4:6d:1b:34:7a:1a:f7:ed:d9:7f:d3:9a:d7:
                    0e:fa:5c:41:f0:06:6a:fc:a5:70:8c:26:45:98:27:
                    68:b6:9b:5e:b6:f3:dc:8b:97:fc:73:3b:23:cd:63:
                    c8:8b:b0:98:02:99:d6:bd:04:06:1a:fc:63:2b:d2:
                    6c:5a:ba:e8:a4:af:0d:3c:b9:aa:e8:c4:20:4d:e3:
                    b4:1e:ed:7e:6d:f9:d2:d8:35:85:fe:a6:b0:a0:d4:
                    26:70:b7:62:84:1d:e9:52:f0:8e:09:17:86:fb:d1:
                    fa:12:9c:57:0c:56:ac:76:c1:8c:4c:77:f9:4f:a3:
                    bd:9c:36:12:a7:e2:4d:72:f9:8e:fe:38:d6:16:56:
                    c6:8e:02:cd:83:3b:a0:02:e8:f2:6d:c2:0f:df:8a:
                    ef:46:0e:97:b3:e4:ea:fa:39:de:65:1c:98:0d:eb:
                    33:47:cb:50:5c:dc:ce:a8:0b:a5:f0:20:fd:21:4b:
                    68:19:f2:d8:fc:91:1c:cc:69:37:3b:cf:48:cf:f6:
                    09:a7:47:85:d8:a9:77:c2:de:df:64:70:26:d8:51:
                    1f:df:d9:af:c2:d0:6c:60:4a:7a:f3:45:91:81:d6:
                    49:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:30:E9:A0:64:36:C5:87:DC:06:60:77:CA:89:88:6B:5F:09:45:0C
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e34322e3138302e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:fc:b1:f9:6c:72:a4:12:4e:b3:4f:3d:53:7a:75:03:12:b0:
         6a:33:64:fa:44:a3:37:e5:6f:c7:e6:44:84:72:85:42:d8:40:
         39:8c:95:ce:28:4a:3f:77:eb:d9:74:2c:9a:84:26:a3:61:0d:
         4c:d5:e4:81:bb:9e:66:4e:6d:69:f8:5a:7c:94:35:5a:95:3f:
         08:b3:0d:a4:02:9b:e1:81:ac:3a:c5:8e:17:a1:8d:f6:48:78:
         99:07:16:55:46:62:ac:6b:1a:ea:af:c2:17:ba:d1:13:68:67:
         2a:19:c4:9b:65:0d:2a:ea:e1:9c:71:35:9a:7a:01:40:89:b7:
         b7:fe:f8:c9:52:ea:35:dd:71:8c:ee:ae:16:d0:c6:5e:f3:f7:
         ce:3c:46:e5:05:dc:34:57:90:fa:80:98:5d:9a:f7:0e:58:cf:
         e5:04:36:74:82:c9:ed:97:51:87:63:f5:9a:d9:e8:48:33:b6:
         fc:b9:65:87:f4:ff:7b:04:22:da:78:c7:a4:30:c9:5d:80:26:
         20:de:57:8f:44:e6:50:67:1d:dd:75:11:25:fb:97:71:37:7a:
         6f:aa:bb:1c:39:60:c5:88:63:d7:c6:f8:a1:ba:c7:c8:c1:65:
         8c:e7:94:11:83:9b:42:78:3c:df:9a:65:f7:b5:83:dd:7e:db:
         11:14:0c:8f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULNKGnq5hUGLA/V2KxTUhwFqLLSIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNTAyMDQxOTU1NTZaFw0yNjAyMDMyMDAwNTZaMDMxMTAvBgNV
BAMTKDU1MzBFOUEwNjQzNkM1ODdEQzA2NjA3N0NBODk4ODZCNUYwOTQ1MEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr92LD+Du4Fvoi5pvLZiUHpnSp
6GOgFxs4VLi8UrmU9G0bNHoa9+3Zf9Oa1w76XEHwBmr8pXCMJkWYJ2i2m16289yL
l/xzOyPNY8iLsJgCmda9BAYa/GMr0mxauuikrw08uaroxCBN47Qe7X5t+dLYNYX+
prCg1CZwt2KEHelS8I4JF4b70foSnFcMVqx2wYxMd/lPo72cNhKn4k1y+Y7+ONYW
VsaOAs2DO6AC6PJtwg/fiu9GDpez5Or6Od5lHJgN6zNHy1Bc3M6oC6XwIP0hS2gZ
8tj8kRzMaTc7z0jP9gmnR4XYqXfC3t9kcCbYUR/f2a/C0GxgSnrzRZGB1kn1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVTDpoGQ2xYfcBmB3yomIa18JRQwwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMyMzAzMDJlMzQzMjJlMzEzODMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgqtDAN
BgkqhkiG9w0BAQsFAAOCAQEAjvyx+WxypBJOs089U3p1AxKwajNk+kSjN+Vvx+ZE
hHKFQthAOYyVzihKP3fr2XQsmoQmo2ENTNXkgbueZk5tafhafJQ1WpU/CLMNpAKb
4YGsOsWOF6GN9kh4mQcWVUZirGsa6q/CF7rRE2hnKhnEm2UNKurhnHE1mnoBQIm3
t/74yVLqNd1xjO6uFtDGXvP3zjxG5QXcNFeQ+oCYXZr3DljP5QQ2dILJ7ZdRh2P1
mtnoSDO2/Lllh/T/ewQi2njHpDDJXYAmIN5Xj0TmUGcd3XURJfuXcTd6b6q7HDlg
xYhj18b4obrHyMFljOeUEYObQng835pl97WD3X7bERQMjw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:52 2025 by rpki-client