Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa
File:                     3230302e312e3137352e302f32342d3234203d3e20323033.roa (raw, json)
Hash identifier:          71CBz7pmB65KnWoqhy76bHCWftM9BVrOU6ZXLqJRxDo=
Subject key identifier:   DB:6E:BA:C9:1A:4A:5F:F5:3D:B9:D5:02:DF:52:28:00:79:2C:0A:D6
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       12397CF431F19EEB250AD0FA749B417C7C04B766
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa
Signing time:             Tue 04 Feb 2025 18:07:16 +0000
ROA not before:           Tue 04 Feb 2025 18:02:16 +0000
ROA not after:            Tue 03 Feb 2026 18:07:16 +0000
asID:                     203
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:39:7c:f4:31:f1:9e:eb:25:0a:d0:fa:74:9b:41:7c:7c:04:b7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:16 2025 GMT
            Not After : Feb  3 18:07:16 2026 GMT
        Subject: CN=DB6EBAC91A4A5FF53DB9D502DF522800792C0AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:bf:9c:c4:7a:63:2f:e3:21:4e:26:2d:af:
                    e6:bf:c8:47:a2:4d:75:77:79:b3:2c:94:dd:30:a8:
                    4e:5b:37:33:da:bb:45:bc:f3:d6:73:c0:2f:29:4a:
                    80:6c:ef:69:8e:90:09:70:36:64:f4:3f:f8:5c:fb:
                    59:1b:83:56:a4:0b:b1:a1:0e:bf:2f:c4:eb:1c:43:
                    5a:25:9a:85:de:1a:25:95:63:60:49:96:1b:3f:0b:
                    b2:ca:a4:43:f4:22:63:2a:8b:ad:1f:fc:d3:db:79:
                    5b:86:89:cf:24:d0:07:ef:36:68:00:b6:87:9f:40:
                    7e:6e:8e:fc:ef:21:99:3f:e4:47:d9:b2:86:2f:cb:
                    03:19:02:bc:53:d3:63:f6:9e:5f:13:55:a3:8e:9d:
                    b0:c5:78:da:17:6a:0f:bc:07:f5:e9:9e:84:d8:74:
                    7f:8f:2f:90:07:1d:47:5a:0f:d9:3f:62:d7:ac:45:
                    73:b1:48:d8:a5:b8:d2:1e:c8:51:a1:cd:85:2a:19:
                    4e:1d:e9:b1:7b:3f:66:6a:59:5c:73:c7:59:b1:f4:
                    14:a4:89:de:eb:d9:be:15:7e:24:5d:b9:88:5c:59:
                    b0:1d:27:b8:91:1c:25:52:af:50:56:a2:02:bc:de:
                    1b:5f:1d:61:87:8b:bf:b1:1a:9a:ff:3e:66:62:db:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6E:BA:C9:1A:4A:5F:F5:3D:B9:D5:02:DF:52:28:00:79:2C:0A:D6
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:26:f3:fb:5f:ba:e7:10:ee:95:87:24:00:29:cd:74:f7:ec:
         db:2a:17:a1:67:a7:74:15:54:bf:21:0a:bc:48:f4:81:f4:5e:
         da:35:f0:22:d8:15:10:b9:ca:19:1b:3f:94:60:45:2e:bd:d3:
         4c:2f:f4:7e:ab:3d:c8:ce:d8:f7:e8:ad:19:72:df:1f:27:83:
         44:7a:07:d3:21:87:fe:0a:67:b5:7d:bf:60:47:b7:b7:31:32:
         68:1d:4e:4f:75:eb:e0:e2:a0:c7:99:45:dc:67:cd:99:6b:35:
         2f:be:9b:f8:c6:b1:4d:52:ce:06:b1:fc:7c:18:f4:65:6b:cf:
         c2:fb:5a:85:ea:76:fc:e6:5c:d2:19:fa:84:ea:39:60:fb:ba:
         d7:ff:62:e6:9d:6e:df:c6:52:56:0c:25:95:31:ab:4b:86:f6:
         96:1e:98:47:55:46:99:bf:2e:34:85:ad:a9:31:79:ff:fe:8b:
         2c:27:91:dd:71:a8:4f:11:4e:97:e1:68:f4:4a:13:dd:b9:63:
         d9:4c:5d:03:f0:22:c3:59:53:fa:67:a1:3e:e8:70:7e:77:3f:
         13:2b:52:75:8c:1e:47:41:20:20:14:4a:07:59:d6:be:43:33:
         9d:ab:ad:36:fb:26:17:73:0b:26:e9:8f:3e:04:a1:3e:8a:e6:
         94:f0:be:7c
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUEjl89DHxnuslCtD6dJtBfHwEt2YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNTAyMDQxODAyMTZaFw0yNjAyMDMxODA3MTZaMDMxMTAvBgNV
BAMTKERCNkVCQUM5MUE0QTVGRjUzREI5RDUwMkRGNTIyODAwNzkyQzBBRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDblb+cxHpjL+MhTiYtr+a/yEei
TXV3ebMslN0wqE5bNzPau0W889ZzwC8pSoBs72mOkAlwNmT0P/hc+1kbg1akC7Gh
Dr8vxOscQ1olmoXeGiWVY2BJlhs/C7LKpEP0ImMqi60f/NPbeVuGic8k0AfvNmgA
toefQH5ujvzvIZk/5EfZsoYvywMZArxT02P2nl8TVaOOnbDFeNoXag+8B/XpnoTY
dH+PL5AHHUdaD9k/YtesRXOxSNiluNIeyFGhzYUqGU4d6bF7P2ZqWVxzx1mx9BSk
id7r2b4VfiRduYhcWbAdJ7iRHCVSr1BWogK83htfHWGHi7+xGpr/PmZi278BAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQU2266yRpKX/U9udUC31IoAHksCtYwHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMyMzAzMDJlMzEyZTMxMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgBrzANBgkqhkiG
9w0BAQsFAAOCAQEAdCbz+1+65xDulYckACnNdPfs2yoXoWendBVUvyEKvEj0gfRe
2jXwItgVELnKGRs/lGBFLr3TTC/0fqs9yM7Y9+itGXLfHyeDRHoH0yGH/gpntX2/
YEe3tzEyaB1OT3Xr4OKgx5lF3GfNmWs1L76b+MaxTVLOBrH8fBj0ZWvPwvtahep2
/OZc0hn6hOo5YPu61/9i5p1u38ZSVgwllTGrS4b2lh6YR1VGmb8uNIWtqTF5//6L
LCeR3XGoTxFOl+Fo9EoT3blj2UxdA/Aiw1lT+mehPuhwfnc/EytSdYweR0EgIBRK
B1nWvkMznautNvsmF3MLJumPPgShPormlPC+fA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:28:03 2025 by rpki-client