Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa
File:                     3230302e33352e302e302f31392d3235203d3e203232373236.roa (raw, json)
Hash identifier:          wkQu/XN4VZdmbRxayDAeyelAmRZOSp/uipr4ROu9t3A=
Subject key identifier:   7A:46:9B:2B:73:87:D4:53:1E:B0:34:8E:A4:7C:9B:FB:68:A8:04:BF
Certificate issuer:       /CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
Certificate serial:       74FAD00E7533CE33D56C3A7A3D3BF47251FCDCAF
Authority key identifier: ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa
Signing time:             Tue 04 Feb 2025 18:17:40 +0000
ROA not before:           Tue 04 Feb 2025 18:12:40 +0000
ROA not after:            Tue 03 Feb 2026 18:17:40 +0000
asID:                     22726
IP address blocks:        200.35.0.0/19 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:fa:d0:0e:75:33:ce:33:d5:6c:3a:7a:3d:3b:f4:72:51:fc:dc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDF8234B3EFE3A62754B8F7A55758C85D3746EAF
        Validity
            Not Before: Feb  4 18:12:40 2025 GMT
            Not After : Feb  3 18:17:40 2026 GMT
        Subject: CN=7A469B2B7387D4531EB0348EA47C9BFB68A804BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:52:83:c2:4b:db:91:d6:33:3b:31:03:e4:
                    e2:b3:70:ce:af:98:01:f4:4a:4c:74:5f:96:19:d4:
                    01:b9:60:d5:39:2c:f7:ce:66:eb:41:d3:0b:b9:11:
                    a1:a5:f1:b1:ba:0f:7a:40:42:55:11:6c:db:f4:40:
                    74:93:c9:23:bf:d4:c3:43:01:84:a4:22:b0:7d:e6:
                    de:c3:89:93:33:22:a3:86:b2:e4:21:31:29:ee:f3:
                    08:89:b7:d4:a7:28:25:bd:20:76:46:a1:f7:86:84:
                    84:e0:28:5c:e8:83:19:04:90:40:d3:14:40:bc:ed:
                    79:f6:85:98:aa:3f:2c:d3:78:45:65:6d:3f:1a:01:
                    f2:ea:9a:53:a9:0c:56:50:09:b3:2e:c9:d3:9c:61:
                    58:e3:47:77:b5:c1:55:b5:4c:90:5d:48:1d:aa:9e:
                    3b:49:fa:8b:f9:9a:52:51:f6:f6:d4:2a:79:f1:bb:
                    32:d4:db:a4:e9:14:51:1b:69:6b:15:c3:0a:07:e8:
                    94:d8:97:4d:68:57:32:bd:c1:fb:6c:f6:a6:7c:fc:
                    3c:f9:7a:05:e6:21:98:1d:67:f5:54:38:60:a8:98:
                    cb:80:98:e7:6e:45:6d:68:d5:09:5b:17:69:23:7d:
                    9b:bb:ce:9b:10:3a:a6:0f:ff:87:c2:a9:97:c1:53:
                    ec:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:9B:2B:73:87:D4:53:1E:B0:34:8E:A4:7C:9B:FB:68:A8:04:BF
            X509v3 Authority Key Identifier:
                keyid:ED:F8:23:4B:3E:FE:3A:62:75:4B:8F:7A:55:75:8C:85:D3:74:6E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDF8234B3EFE3A62754B8F7A55758C85D3746EAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17E37E11C5CCE1D25EDF1D8F041FEB3EA772B63708DF2439B022CF762E9C3363/0/3230302e33352e302e302f31392d3235203d3e203232373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:a4:aa:35:e8:41:04:64:88:78:14:dc:75:14:95:bf:67:86:
         f9:c2:6b:a0:13:17:aa:a9:54:2a:35:2c:7b:c4:c1:6e:08:1e:
         d5:ed:22:5a:49:87:8f:97:f0:2d:48:cf:9d:98:0d:b7:f0:a7:
         bf:5d:62:e2:a7:fa:b7:6e:70:ea:a5:99:a7:2c:6a:e2:ed:da:
         a3:73:74:76:57:d1:b8:99:6c:64:11:df:36:23:c0:31:de:9f:
         98:a1:95:22:72:96:c0:8d:a8:ba:27:fc:11:3d:60:ef:9f:4c:
         25:7b:34:4d:a1:c3:a0:3b:ff:87:67:c6:fc:b0:3a:2b:f0:86:
         51:1d:93:29:44:37:a6:5b:a7:75:45:10:54:3e:91:0d:24:b1:
         2b:b7:ee:7e:dc:26:78:cb:ed:37:db:ff:dd:5a:53:a6:f4:d1:
         6b:bf:41:7c:0e:78:75:ac:0d:c7:2e:1b:53:b1:c6:d7:e9:e7:
         d5:d3:30:cf:97:c1:0b:0f:26:23:b7:ec:d8:1f:4a:b7:b0:f2:
         1b:1f:7e:e5:c2:35:e5:ef:8a:ff:d9:56:eb:a4:41:16:b5:5f:
         e4:e7:98:86:96:f5:52:6f:e0:31:49:10:c5:ce:e3:98:41:60:
         51:ad:ef:23:a6:57:32:47:51:ea:9a:df:74:38:0f:d0:70:24:
         e0:8c:6f:55
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUdPrQDnUzzjPVbDp6PTv0clH83K8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURGODIzNEIzRUZFM0E2Mjc1NEI4RjdBNTU3NThDODVE
Mzc0NkVBRjAeFw0yNTAyMDQxODEyNDBaFw0yNjAyMDMxODE3NDBaMDMxMTAvBgNV
BAMTKDdBNDY5QjJCNzM4N0Q0NTMxRUIwMzQ4RUE0N0M5QkZCNjhBODA0QkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0uVKDwkvbkdYzOzED5OKzcM6v
mAH0Skx0X5YZ1AG5YNU5LPfOZutB0wu5EaGl8bG6D3pAQlURbNv0QHSTySO/1MND
AYSkIrB95t7DiZMzIqOGsuQhMSnu8wiJt9SnKCW9IHZGofeGhITgKFzogxkEkEDT
FEC87Xn2hZiqPyzTeEVlbT8aAfLqmlOpDFZQCbMuydOcYVjjR3e1wVW1TJBdSB2q
njtJ+ov5mlJR9vbUKnnxuzLU26TpFFEbaWsVwwoH6JTYl01oVzK9wfts9qZ8/Dz5
egXmIZgdZ/VUOGComMuAmOduRW1o1QlbF2kjfZu7zpsQOqYP/4fCqZfBU+wTAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUekabK3OH1FMesDSOpHyb+2ioBL8wHwYDVR0j
BBgwFoAU7fgjSz7+OmJ1S496VXWMhdN0bq8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xN0UzN0UxMUM1Q0NFMUQyNUVERjFEOEYwNDFGRUIzRUE3
NzJCNjM3MDhERjI0MzlCMDIyQ0Y3NjJFOUMzMzYzLzAvRURGODIzNEIzRUZFM0E2
Mjc1NEI4RjdBNTU3NThDODVEMzc0NkVBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FREY4MjM0QjNFRkUzQTYyNzU0
QjhGN0E1NTc1OEM4NUQzNzQ2RUFGLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTdFMzdFMTFDNUNDRTFEMjVFREYxRDhGMDQxRkVCM0VBNzcyQjYzNzA4
REYyNDM5QjAyMkNGNzYyRTlDMzM2My8wLzMyMzAzMDJlMzMzNTJlMzAyZTMwMmYz
MTM5MmQzMjM1MjAzZDNlMjAzMjMyMzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyCMAMA0GCSqG
SIb3DQEBCwUAA4IBAQAgpKo16EEEZIh4FNx1FJW/Z4b5wmugExeqqVQqNSx7xMFu
CB7V7SJaSYePl/AtSM+dmA238Ke/XWLip/q3bnDqpZmnLGri7dqjc3R2V9G4mWxk
Ed82I8Ax3p+YoZUicpbAjai6J/wRPWDvn0wlezRNocOgO/+HZ8b8sDor8IZRHZMp
RDemW6d1RRBUPpENJLErt+5+3CZ4y+032//dWlOm9NFrv0F8Dnh1rA3HLhtTscbX
6efV0zDPl8ELDyYjt+zYH0q3sPIbH37lwjXl74r/2VbrpEEWtV/k55iGlvVSb+Ax
SRDFzuOYQWBRre8jplcyR1Hqmt90OA/QcCTgjG9V
-----END CERTIFICATE-----