Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e2037343138.roa
File:                     3230302e39302e3136302e302f32302d3234203d3e2037343138.roa (raw, json)
Hash identifier:          dKAbjLzARaTZqeneeslldPxnbwW+41UbKt8VxQgyMPw=
Subject key identifier:   D8:D6:E8:25:01:C4:B8:5D:50:AE:F6:BE:6D:30:F8:F2:68:A3:52:65
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       5363CB43A1B2CA887BE4E75CFCF3AA89045E0F28
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 20:00:53 +0000
ROA not before:           Tue 04 Feb 2025 19:55:53 +0000
ROA not after:            Tue 03 Feb 2026 20:00:53 +0000
asID:                     7418
IP address blocks:        200.90.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:63:cb:43:a1:b2:ca:88:7b:e4:e7:5c:fc:f3:aa:89:04:5e:0f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:55:53 2025 GMT
            Not After : Feb  3 20:00:53 2026 GMT
        Subject: CN=D8D6E82501C4B85D50AEF6BE6D30F8F268A35265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:37:c4:c4:71:ae:49:e0:7d:43:60:d7:fd:d4:
                    50:22:0c:d3:04:93:02:dd:08:98:0d:6f:e3:c1:5e:
                    4c:6c:5a:8c:c1:41:be:86:e6:dd:9a:45:b7:83:8d:
                    db:6d:39:e1:68:a1:18:68:79:fa:9d:43:32:9c:3d:
                    9e:a6:9d:aa:00:b5:88:9b:94:d7:b6:6b:af:cd:99:
                    b4:fa:ec:ae:f3:5f:dd:bd:6f:d1:4f:52:75:42:b2:
                    f1:27:de:ac:9a:97:df:08:69:f2:8a:83:81:1a:bf:
                    1f:6c:a9:71:29:1a:ef:2a:15:1e:af:be:cc:ca:e1:
                    80:c6:9a:7d:21:18:cf:ff:3f:cd:19:d7:e1:a0:8c:
                    7d:d5:0c:94:cd:2a:06:3c:44:fc:dd:03:a4:11:41:
                    47:e6:51:31:61:73:96:d4:c2:7c:46:9a:ea:d2:14:
                    dd:8e:83:88:e7:0c:45:e7:ac:1b:a5:fd:f5:32:bb:
                    dc:24:83:47:6b:dd:00:ad:2f:69:78:56:2b:32:63:
                    ea:78:cd:ca:98:a3:aa:bc:88:41:6a:8e:e6:2c:2a:
                    60:63:77:8d:8e:b0:19:b4:32:50:35:27:9e:e8:c7:
                    4b:de:84:27:a5:26:f2:b9:48:17:3d:71:e1:46:6c:
                    09:6e:0b:f0:20:a4:78:0a:dc:41:8a:a5:04:8e:84:
                    45:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D6:E8:25:01:C4:B8:5D:50:AE:F6:BE:6D:30:F8:F2:68:A3:52:65
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3230302e39302e3136302e302f32302d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:3e:db:0e:fe:1a:c3:9c:d5:05:dd:06:9e:10:93:36:bf:
         10:e6:25:b0:ff:9b:f7:75:fc:02:52:16:e8:db:65:a3:16:d8:
         e1:57:b4:b4:a5:83:28:ea:89:2b:21:54:d4:67:08:b3:59:0d:
         78:3f:74:4e:b7:dc:c6:28:ee:89:69:93:10:02:5d:2c:29:c1:
         fd:26:61:cb:b1:71:21:a2:38:55:c2:6d:be:6b:de:07:14:77:
         d2:46:b6:75:dc:96:a2:e0:d9:cc:76:86:62:3e:ec:cd:5c:40:
         2a:bd:85:0b:06:c3:96:7f:b1:a5:d6:6c:b4:58:6b:4a:56:42:
         eb:cf:d0:3d:71:f8:78:4f:72:5e:62:37:8d:20:e1:16:31:19:
         68:68:f5:b1:c5:e1:44:95:67:1d:4a:75:8c:ac:f4:75:c1:c8:
         b6:92:fe:7c:3c:db:98:59:9f:9a:e1:9f:48:bd:dc:9b:27:e4:
         4f:09:78:bd:75:38:b4:4e:25:1a:9c:93:e5:55:e2:55:23:e8:
         4d:ff:4a:ea:ee:f3:22:f2:b5:dd:20:ca:c2:62:88:9e:c5:ff:
         29:c5:b9:a8:ce:00:3b:de:57:b7:04:c6:17:5a:06:08:68:39:
         f4:06:b2:a5:70:ae:48:cd:c7:ff:72:29:cf:23:7d:36:e3:1b:
         53:a1:2a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:56:51 2025 by rpki-client