Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e203136363239.roa (raw, json)
Hash identifier:          bprK5wKM1Qcrm6gw1ao675CU7Qdg+hHyMLYCtxIB4B8=
Subject key identifier:   F5:37:4E:1D:AA:08:50:91:10:9B:EF:1D:63:D5:BC:A1:8C:0A:53:51
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       662A012DD9E68CF4FC6D633AD7F1CCCEBB225DD2
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 20:00:57 +0000
ROA not before:           Tue 04 Feb 2025 19:55:57 +0000
ROA not after:            Tue 03 Feb 2026 20:00:57 +0000
asID:                     16629
IP address blocks:        200.90.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:2a:01:2d:d9:e6:8c:f4:fc:6d:63:3a:d7:f1:cc:ce:bb:22:5d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:57 2025 GMT
            Not After : Feb  3 20:00:57 2026 GMT
        Subject: CN=F5374E1DAA085091109BEF1D63D5BCA18C0A5351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:20:ff:f0:b6:4f:44:3d:1f:a9:52:1b:02:
                    ab:34:8e:be:14:37:a5:3f:42:c5:01:21:06:2e:06:
                    f3:0c:07:4e:bd:83:ec:90:2a:f6:ce:0b:bf:20:ae:
                    cd:67:ff:28:f1:f0:de:fc:56:82:c3:b4:79:52:88:
                    c4:60:58:4a:0b:1f:b7:e6:1f:3f:78:09:81:b5:9b:
                    a7:07:16:0e:a9:38:11:47:73:aa:10:cc:d7:73:ec:
                    b1:7a:33:1c:b6:8e:3d:f7:9d:66:92:4f:2c:dd:c1:
                    ef:ad:58:2d:6b:20:f9:46:a7:52:7c:e3:80:e8:09:
                    e8:7e:74:72:e3:e2:d7:4c:06:81:d9:d7:fa:17:43:
                    8b:8d:42:2c:1d:62:be:35:24:39:82:fc:1d:9b:25:
                    0f:81:eb:48:66:ee:15:4c:dd:87:b5:a9:e8:20:e8:
                    ea:ac:f6:50:70:8d:02:25:f8:f0:50:48:3e:d8:36:
                    09:06:51:d2:54:9e:83:32:4b:c3:e1:81:e4:49:b8:
                    71:86:9c:67:7a:0d:bf:10:c8:62:cd:36:26:59:b4:
                    0e:49:3d:36:ec:49:9c:f1:b2:09:da:3f:39:ed:f9:
                    c5:80:4c:48:e5:d3:60:cf:1b:da:24:11:35:ff:f1:
                    78:b9:d4:1d:76:21:5f:11:1f:35:b0:4c:a7:47:33:
                    36:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:37:4E:1D:AA:08:50:91:10:9B:EF:1D:63:D5:BC:A1:8C:0A:53:51
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:f0:62:95:36:3a:80:8a:c5:b0:7c:3c:50:20:8c:a3:ca:
         c7:27:6b:26:7e:d5:55:15:46:e2:c7:b9:83:d7:76:ef:77:1c:
         42:8f:da:87:f1:15:ba:fb:bb:fa:9f:b6:10:ea:23:d6:fa:4a:
         68:ed:3e:80:ce:de:aa:98:d9:c1:69:3c:7c:0c:31:a3:f5:e2:
         20:12:3c:ba:82:05:c5:7d:4a:87:40:9e:9e:6a:b5:ac:36:dd:
         72:1f:a7:16:c2:97:19:06:7e:d4:3b:10:25:58:52:1c:35:4d:
         1c:57:77:4e:02:fa:86:8f:93:0b:48:52:71:d1:c4:c5:5c:a8:
         2a:1c:f8:22:1d:b3:9c:07:64:1f:f8:50:2e:c5:60:2d:8e:d7:
         07:46:34:44:23:25:15:73:06:36:f7:03:d0:ec:92:d4:b0:d0:
         61:34:4a:e0:c7:b3:0a:90:8d:0b:eb:e6:bf:56:17:e6:92:b9:
         45:db:13:f2:b7:aa:c5:d7:1f:68:97:4c:ee:1f:d8:4a:8f:95:
         4d:35:f4:62:c1:fe:5d:e9:95:cc:7c:c0:16:a7:ee:a3:5b:de:
         f0:b1:0a:0b:98:93:16:99:75:c6:3e:f8:74:ca:b3:a3:59:34:
         c2:12:13:b8:e9:c0:7a:52:48:64:31:65:70:4b:22:4b:53:1e:
         55:ae:a8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:09 2025 by rpki-client