Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e203135333131.roa (raw, json)
Hash identifier:          /b7fUQA8UipHke8sI95bXYoOieFUZVYOcmfFNIXiCMw=
Subject key identifier:   E6:F9:EB:A3:16:7D:F8:44:08:FB:25:F3:60:CB:0E:57:F3:32:59:E0
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       01435CE81064314DB5DAE52D068D28177AA15471
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:00:58 +0000
ROA not before:           Tue 04 Feb 2025 19:55:58 +0000
ROA not after:            Tue 03 Feb 2026 20:00:58 +0000
asID:                     15311
IP address blocks:        200.90.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:43:5c:e8:10:64:31:4d:b5:da:e5:2d:06:8d:28:17:7a:a1:54:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:58 2025 GMT
            Not After : Feb  3 20:00:58 2026 GMT
        Subject: CN=E6F9EBA3167DF84408FB25F360CB0E57F33259E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:75:9e:aa:c3:38:08:69:c5:39:4c:b6:88:
                    62:0d:18:2e:be:6f:22:9c:90:7f:6f:74:5b:5b:d8:
                    fb:77:ab:d7:7c:51:a1:33:c9:e5:a1:e0:d9:23:68:
                    92:9b:01:75:37:64:55:22:3e:3d:c9:89:39:b1:f0:
                    9e:4f:87:c2:09:23:1f:81:ea:77:3c:dd:88:d4:26:
                    41:b9:26:10:b0:c0:4c:91:19:80:c7:a3:0c:71:90:
                    2e:fa:40:65:0d:c8:e6:17:62:18:79:02:7f:73:ba:
                    28:8b:56:f5:96:1e:a9:47:af:52:ad:30:be:7b:a0:
                    30:7d:a1:6c:10:81:69:ab:cf:e3:3d:92:7c:8b:84:
                    d1:47:53:ac:32:4a:58:38:99:df:66:14:ba:6e:a5:
                    da:6d:51:a4:4f:2e:43:e3:24:9c:67:66:bd:3b:b2:
                    1e:9d:1c:62:dd:dd:02:28:7d:28:77:a6:12:a8:f0:
                    e5:c9:d2:eb:70:58:bb:1c:18:2d:03:6a:33:c1:6a:
                    20:ba:a9:76:82:d0:0c:4b:d0:cc:0b:fa:c8:8b:d2:
                    07:b1:95:5d:f7:81:3b:60:35:70:33:88:aa:57:82:
                    d7:58:cd:4d:50:8b:b8:e1:d1:d7:38:8a:71:bd:b5:
                    b9:d2:e5:aa:60:fe:c0:c2:20:1f:8b:24:96:a4:1f:
                    10:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F9:EB:A3:16:7D:F8:44:08:FB:25:F3:60:CB:0E:57:F3:32:59:E0
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:44:2a:22:1f:5f:db:c6:e5:47:22:90:27:a3:47:1c:32:5e:
         c2:5d:e3:92:03:f6:e7:d5:ea:be:d1:6b:c0:3e:22:59:c9:2f:
         31:bc:f9:ea:49:5c:ea:f5:5b:c2:f7:23:1a:62:f4:84:26:c7:
         96:da:22:e6:96:a2:70:54:9a:2a:7b:a0:33:ec:af:14:70:42:
         4c:a5:6b:57:8e:34:ee:77:77:49:1e:61:8f:84:f8:8f:24:d0:
         2c:dd:a6:fa:09:53:5d:5e:3c:dd:99:04:31:75:4f:5b:5e:62:
         67:b9:9e:38:f1:0a:30:28:c9:e5:3b:36:1b:a1:55:b6:e5:fc:
         05:7c:ab:39:2d:e8:5b:fc:e7:aa:d1:0a:78:fd:a4:63:6b:00:
         36:5f:f9:b9:e3:34:a7:d2:7f:95:94:25:16:aa:04:a5:18:c8:
         01:b6:ef:1e:b3:0b:5d:68:69:43:6c:61:16:1c:33:fa:4f:b2:
         95:54:ee:8d:9a:c9:1e:40:b6:9d:05:41:a7:f2:5f:c2:f9:69:
         56:bc:f9:74:3b:03:3a:86:79:60:1d:03:86:57:e2:e8:dc:82:
         d8:ed:30:92:94:c1:0e:07:48:1f:87:ec:2d:99:58:8e:00:87:
         10:ad:4e:16:60:23:53:5d:43:a9:49:84:6b:94:a2:6b:dc:ba:
         f8:eb:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:27:23 2025 by rpki-client