Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa
File:                     3230302e312e3137352e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          RUN170stLL4o16mmn5xH9gdxuteaGvRBKf2cmu8XWc0=
Subject key identifier:   DE:58:C9:53:08:77:50:83:F4:07:D8:D5:22:99:5D:DC:19:8C:4A:36
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       4DB29191D33C052BCC969BD6F822AED089FA1FF8
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 04 Feb 2025 18:07:15 +0000
ROA not before:           Tue 04 Feb 2025 18:02:15 +0000
ROA not after:            Tue 03 Feb 2026 18:07:15 +0000
asID:                     3356
IP address blocks:        200.1.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:b2:91:91:d3:3c:05:2b:cc:96:9b:d6:f8:22:ae:d0:89:fa:1f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:15 2025 GMT
            Not After : Feb  3 18:07:15 2026 GMT
        Subject: CN=DE58C95308775083F407D8D522995DDC198C4A36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:58:6a:3a:4b:2e:8f:3f:bf:57:7a:74:6f:
                    e7:90:e9:1d:dc:c0:bb:b2:fc:dd:46:46:2c:51:bd:
                    c6:f8:6b:35:68:f4:f2:68:88:75:82:09:d2:89:01:
                    6e:15:50:38:0c:0d:f7:6e:8b:02:62:42:63:9f:cf:
                    7d:61:11:00:5a:1b:00:1d:d2:3b:41:c7:5a:bd:d8:
                    67:87:8a:66:62:2d:07:ea:00:37:54:94:bf:fb:8d:
                    07:61:77:24:ff:41:04:7b:a4:c5:0b:2c:e6:18:c9:
                    9d:b5:1a:56:a6:4b:08:7a:24:6a:52:95:0d:c8:5f:
                    1f:8e:3c:bf:fa:4b:d2:40:83:81:89:25:f8:b6:30:
                    10:14:ad:d2:33:af:c5:bf:f7:73:ca:2d:c3:f4:9b:
                    85:98:8c:48:7c:ca:13:b8:cc:68:fc:3e:57:48:e9:
                    62:fa:84:5c:42:46:d5:e0:b8:b9:30:75:4b:1c:7f:
                    47:eb:a1:a0:46:9f:b7:6c:8b:aa:75:89:08:4c:e4:
                    72:c4:1b:c7:15:2f:4d:49:c3:01:6b:2d:a9:c2:d9:
                    8a:25:f5:8a:dd:c4:0b:de:1a:f7:c1:73:22:f4:88:
                    0f:20:69:0d:7a:41:bc:29:61:9a:2a:d6:5d:c5:5e:
                    0b:a9:2c:23:54:e2:70:8b:18:9d:56:f6:ad:91:e9:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:58:C9:53:08:77:50:83:F4:07:D8:D5:22:99:5D:DC:19:8C:4A:36
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3230302e312e3137352e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:95:d1:90:0d:fd:f0:68:1a:9b:d5:bb:84:80:87:04:bd:f7:
         b6:dd:ed:98:0d:3e:3e:77:1d:d5:5e:74:f3:f3:41:9b:d6:05:
         45:90:d9:38:be:74:ca:85:e1:76:8e:cd:31:08:e8:9a:bd:07:
         e5:b5:c2:51:ab:e0:d6:61:a3:85:69:9f:6e:f3:0d:60:07:68:
         da:96:0a:80:fd:2f:97:1d:26:70:0c:12:ee:5d:0a:ce:21:cc:
         4a:4f:88:84:1f:74:49:02:c4:b5:f0:d4:96:4c:fe:01:3e:10:
         1e:de:49:67:4a:73:5c:6a:b9:b4:c8:f4:9d:7b:c2:3c:38:d9:
         a7:e2:be:6a:27:43:4b:c0:17:61:13:f0:a5:8a:3c:2f:0b:ea:
         06:a6:11:9a:fe:cd:f7:31:4b:cf:c0:2c:17:7b:b4:17:7a:4d:
         0b:4f:0e:81:6d:3b:96:ab:24:cb:e4:12:07:9e:86:81:dd:b2:
         7b:2d:98:94:20:42:6f:59:82:26:24:aa:89:56:51:56:43:ce:
         d0:a5:59:1d:6a:60:e8:a8:88:05:5b:9b:53:82:0f:af:42:d4:
         4b:7c:b9:6b:20:12:41:0d:40:d4:84:be:14:ea:28:3c:f4:c1:
         45:71:bc:dc:ca:ff:79:ae:3c:fb:31:e2:96:08:2b:a4:c4:13:
         35:82:8f:89
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUTbKRkdM8BSvMlpvW+CKu0In6H/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQzMzBFRjFCNzUxNTMxRTdBNTAzMDg2RTE1NzJCQ0Uy
RTM3RDBDQzAeFw0yNTAyMDQxODAyMTVaFw0yNjAyMDMxODA3MTVaMDMxMTAvBgNV
BAMTKERFNThDOTUzMDg3NzUwODNGNDA3RDhENTIyOTk1RERDMTk4QzRBMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUqVhqOksujz+/V3p0b+eQ6R3c
wLuy/N1GRixRvcb4azVo9PJoiHWCCdKJAW4VUDgMDfduiwJiQmOfz31hEQBaGwAd
0jtBx1q92GeHimZiLQfqADdUlL/7jQdhdyT/QQR7pMULLOYYyZ21GlamSwh6JGpS
lQ3IXx+OPL/6S9JAg4GJJfi2MBAUrdIzr8W/93PKLcP0m4WYjEh8yhO4zGj8PldI
6WL6hFxCRtXguLkwdUscf0froaBGn7dsi6p1iQhM5HLEG8cVL01JwwFrLanC2Yol
9YrdxAveGvfBcyL0iA8gaQ16QbwpYZoq1l3FXgupLCNU4nCLGJ1W9q2R6X9HAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU3ljJUwh3UIP0B9jVIpld3BmMSjYwHwYDVR0j
BBgwFoAUFDMO8bdRUx56UDCG4Vcrzi430MwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOTc3NTVENTA5MjdDNkIyRjdGNUM3OTQ4NENGQkE5RDM4
RDI2NTBENjI4QkVEODA1MjZDNjg1REVCMURFQjk0LzAvMTQzMzBFRjFCNzUxNTMx
RTdBNTAzMDg2RTE1NzJCQ0UyRTM3RDBDQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNDMzMEVGMUI3NTE1MzFFN0E1
MDMwODZFMTU3MkJDRTJFMzdEMENDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTk3NzU1RDUwOTI3QzZCMkY3RjVDNzk0ODRDRkJBOUQzOEQyNjUwRDYy
OEJFRDgwNTI2QzY4NURFQjFERUI5NC8wLzMyMzAzMDJlMzEyZTMxMzczNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAGvMA0GCSqG
SIb3DQEBCwUAA4IBAQApldGQDf3waBqb1buEgIcEvfe23e2YDT4+dx3VXnTz80Gb
1gVFkNk4vnTKheF2js0xCOiavQfltcJRq+DWYaOFaZ9u8w1gB2jalgqA/S+XHSZw
DBLuXQrOIcxKT4iEH3RJAsS18NSWTP4BPhAe3klnSnNcarm0yPSde8I8ONmn4r5q
J0NLwBdhE/ClijwvC+oGphGa/s33MUvPwCwXe7QXek0LTw6BbTuWqyTL5BIHnoaB
3bJ7LZiUIEJvWYImJKqJVlFWQ87QpVkdamDoqIgFW5tTgg+vQtRLfLlrIBJBDUDU
hL4U6ig89MFFcbzcyv95rjz7MeKWCCukxBM1go+J
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:55 2025 by rpki-client