Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203237393839.roa
File:                     3230302e312e3137352e302f32342d3234203d3e203237393839.roa (raw, json)
Hash identifier:          2JuZ00scNwAzfS37cEN11kaTC13q/9zZ2fWto8jGBN0=
Subject key identifier:   2A:10:5E:2E:01:A8:AF:88:4F:35:BE:36:12:E4:18:8D:4C:4B:CC:F2
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       3BC39BE77E39ACB5AEAB6AF68F752CC4687B9419
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203237393839.roa
Signing time:             Tue 04 Feb 2025 18:07:18 +0000
ROA not before:           Tue 04 Feb 2025 18:02:18 +0000
ROA not after:            Tue 03 Feb 2026 18:07:18 +0000
asID:                     27989
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c3:9b:e7:7e:39:ac:b5:ae:ab:6a:f6:8f:75:2c:c4:68:7b:94:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:18 2025 GMT
            Not After : Feb  3 18:07:18 2026 GMT
        Subject: CN=2A105E2E01A8AF884F35BE3612E4188D4C4BCCF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:c7:e8:0a:cb:f1:af:35:a2:e9:8a:74:55:
                    e2:cb:ac:f1:d0:7f:cf:6a:4b:11:02:e6:da:59:63:
                    de:82:1f:9d:d4:c0:e9:fd:f8:d2:76:83:67:b0:25:
                    c8:ca:92:d2:f5:31:f1:6a:42:02:fe:27:6c:5e:8d:
                    6a:ac:66:fe:51:a7:c6:ed:d8:57:57:a4:0c:61:d9:
                    d1:33:d8:b2:dd:9c:5b:56:99:bb:09:b0:24:fb:f2:
                    77:50:40:b8:31:7c:39:59:24:a8:9c:ea:d1:41:a6:
                    39:f8:36:9e:f2:9c:82:b6:54:da:fd:df:2a:b7:ec:
                    34:e6:f1:4a:eb:72:fb:6d:e6:d3:26:8f:c5:5d:f6:
                    63:c3:76:55:ea:f9:f2:5d:ed:ae:11:81:f5:3c:dc:
                    f3:a6:90:fd:d7:13:e0:3f:a6:e2:46:67:ae:37:84:
                    cf:18:fe:b6:1d:d6:75:6b:da:d1:1f:54:5c:1a:30:
                    d0:77:05:83:7b:b1:5a:5d:00:c1:0b:13:e0:88:6b:
                    3d:bd:5d:16:fb:8c:7b:5a:dc:50:18:4e:65:af:e2:
                    c7:eb:84:0c:df:28:75:24:fe:c2:61:47:82:15:d9:
                    3e:15:8a:be:73:cc:63:8c:58:eb:c0:43:55:71:58:
                    3a:40:ae:8a:e8:2a:4b:94:0c:70:fa:55:13:9d:cb:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:5E:2E:01:A8:AF:88:4F:35:BE:36:12:E4:18:8D:4C:4B:CC:F2
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b6:25:ab:ac:76:df:22:6e:df:f2:8a:a8:a6:3d:a5:a9:08:
         96:dd:6d:cb:fa:1f:ff:16:0c:8c:8d:59:3b:0d:54:dc:50:33:
         0f:4c:8b:9d:35:9a:9d:89:95:22:64:b0:1b:09:7d:c4:d4:17:
         4b:fb:73:b2:38:1f:a3:35:b1:37:77:5f:68:cb:57:0d:ec:f4:
         be:3c:05:0e:d0:5a:b6:2a:00:45:63:df:9b:4b:a0:4c:5f:5b:
         cb:c9:76:9f:21:fc:8a:5d:56:87:03:e1:69:3c:f3:38:3d:22:
         77:8c:07:51:08:fb:46:7c:04:82:db:b2:0a:2d:db:db:c1:6e:
         8d:34:b2:dc:34:fb:73:ef:59:44:4b:cb:4b:c6:f0:3e:25:9f:
         35:11:87:1a:d9:75:85:11:65:c8:e2:0f:4a:e6:95:de:a5:fc:
         4b:40:13:94:72:69:05:2d:56:cd:b7:fb:5f:b1:f8:42:de:57:
         6f:81:80:9f:8b:91:01:d2:0a:a3:fa:1a:57:34:e3:a5:36:82:
         60:93:c0:5e:bd:ce:5a:a1:f6:32:f7:97:01:93:0c:42:15:83:
         1f:77:15:98:dd:f1:d8:f2:23:ab:d7:63:4a:6b:05:d5:99:2c:
         11:51:be:96:5f:52:3e:ec:c8:56:b4:f8:9d:a0:23:cc:90:d8:
         81:64:f5:57
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUO8Ob5345rLWuq2r2j3UsxGh7lBkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNTAyMDQxODAyMThaFw0yNjAyMDMxODA3MThaMDMxMTAvBgNV
BAMTKDJBMTA1RTJFMDFBOEFGODg0RjM1QkUzNjEyRTQxODhENEM0QkNDRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCsfoCsvxrzWi6Yp0VeLLrPHQ
f89qSxEC5tpZY96CH53UwOn9+NJ2g2ewJcjKktL1MfFqQgL+J2xejWqsZv5Rp8bt
2FdXpAxh2dEz2LLdnFtWmbsJsCT78ndQQLgxfDlZJKic6tFBpjn4Np7ynIK2VNr9
3yq37DTm8Urrcvtt5tMmj8Vd9mPDdlXq+fJd7a4RgfU83POmkP3XE+A/puJGZ643
hM8Y/rYd1nVr2tEfVFwaMNB3BYN7sVpdAMELE+CIaz29XRb7jHta3FAYTmWv4sfr
hAzfKHUk/sJhR4IV2T4Vir5zzGOMWOvAQ1VxWDpAroroKkuUDHD6VROdy6LTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKhBeLgGor4hPNb42EuQYjUxLzPIwHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMyMzAzMDJlMzEyZTMxMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIAa8wDQYJ
KoZIhvcNAQELBQADggEBAJO2Jausdt8ibt/yiqimPaWpCJbdbcv6H/8WDIyNWTsN
VNxQMw9Mi501mp2JlSJksBsJfcTUF0v7c7I4H6M1sTd3X2jLVw3s9L48BQ7QWrYq
AEVj35tLoExfW8vJdp8h/IpdVocD4Wk88zg9IneMB1EI+0Z8BILbsgot29vBbo00
stw0+3PvWURLy0vG8D4lnzURhxrZdYURZcjiD0rmld6l/EtAE5RyaQUtVs23+1+x
+ELeV2+BgJ+LkQHSCqP6Glc046U2gmCTwF69zlqh9jL3lwGTDEIVgx93FZjd8djy
I6vXY0prBdWZLBFRvpZfUj7syFa0+J2gI8yQ2IFk9Vc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:34 2025 by rpki-client