Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa
File:                     3230302e31342e33372e302f32342d3234203d3e203532333332.roa (raw, json)
Hash identifier:          yrR8lKVCdq84RTcmR63wJjrh7m/AZ70I7+ISLKPY9+0=
Subject key identifier:   FD:AD:D4:76:9F:11:D8:65:83:6E:AE:75:0D:93:95:15:D8:36:AF:66
Certificate issuer:       /CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
Certificate serial:       5E5A9E7386F297A5EE2A4481611A11FCA8E26F6C
Authority key identifier: 48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa
Signing time:             Tue 04 Feb 2025 18:35:21 +0000
ROA not before:           Tue 04 Feb 2025 18:30:21 +0000
ROA not after:            Tue 03 Feb 2026 18:35:21 +0000
asID:                     52332
IP address blocks:        200.14.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5a:9e:73:86:f2:97:a5:ee:2a:44:81:61:1a:11:fc:a8:e2:6f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=481B3876880F63D5F9BA6D763D7E663E9DB369FC
        Validity
            Not Before: Feb  4 18:30:21 2025 GMT
            Not After : Feb  3 18:35:21 2026 GMT
        Subject: CN=FDADD4769F11D865836EAE750D939515D836AF66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:9c:15:96:5a:2a:2e:d6:8f:90:4e:14:df:
                    aa:3e:68:a8:03:77:6e:4f:b3:52:52:4c:1f:2a:7c:
                    9f:59:69:96:a0:f7:aa:5a:25:f3:7c:8c:3a:55:52:
                    89:64:ce:f6:22:95:c8:7e:04:a1:c1:db:7f:02:29:
                    65:47:1a:5d:f5:a2:a4:b3:b4:82:b6:62:ae:41:62:
                    2b:2f:9d:20:1a:db:07:af:86:3c:1c:d4:88:3d:99:
                    be:ab:9e:8a:95:6e:b2:37:9b:cd:17:17:a1:be:0b:
                    ad:31:91:60:7a:53:0e:07:cc:fa:78:5a:cc:18:9f:
                    90:05:7f:d1:ef:62:75:1a:0d:e4:41:9f:21:7c:39:
                    30:99:15:07:32:1d:ed:c7:40:6b:42:00:21:02:38:
                    34:f3:06:48:21:88:81:cb:29:51:da:15:c8:43:fc:
                    40:ed:d5:61:fe:99:92:0b:5f:d9:a9:87:44:b1:81:
                    ef:bf:e2:5a:62:52:14:5b:61:b0:12:85:3d:24:ed:
                    a2:54:f2:9a:ee:98:5a:09:ee:5a:24:27:7b:be:ed:
                    be:3c:d0:65:ba:03:a1:fe:e7:90:d8:ae:0d:94:ee:
                    22:55:02:2f:74:8d:68:65:c3:e4:d3:0f:b0:f3:fc:
                    f7:56:45:3c:d0:27:15:e7:f5:e3:0d:9e:aa:b4:aa:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AD:D4:76:9F:11:D8:65:83:6E:AE:75:0D:93:95:15:D8:36:AF:66
            X509v3 Authority Key Identifier:
                keyid:48:1B:38:76:88:0F:63:D5:F9:BA:6D:76:3D:7E:66:3E:9D:B3:69:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/481B3876880F63D5F9BA6D763D7E663E9DB369FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F8205A5BB97201E990D3372B7AF94155D7F1863EE2E79B447406F0540D9B002/0/3230302e31342e33372e302f32342d3234203d3e203532333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:44:1b:d2:c7:cd:35:68:7c:60:de:b7:89:d2:0f:28:45:
         73:4f:7f:bb:0a:df:34:42:40:0b:76:1f:dc:fe:ed:7e:67:05:
         8a:2d:21:42:ce:79:ab:85:89:5d:6a:ae:c9:62:dc:79:ea:68:
         9a:1a:ea:95:72:f3:b6:8b:5c:be:8a:77:ab:75:06:5d:47:34:
         45:2f:e1:14:de:d9:d4:f5:46:c0:b8:e2:b6:fe:1d:34:e7:8c:
         dc:bf:ad:e9:7e:70:3f:40:27:e3:55:ec:6b:7f:42:fa:13:32:
         8e:fd:ba:cb:6e:d5:90:35:d1:bc:5f:c3:03:22:dd:6d:88:17:
         4f:ea:86:13:08:ec:77:80:77:a3:b6:f0:46:b2:96:4c:09:27:
         8f:13:f4:b6:02:49:07:e6:19:16:b9:94:8b:bc:b4:bf:b2:c9:
         b0:66:e7:60:2a:30:2a:ed:d3:c2:72:af:45:06:07:c6:ba:b0:
         35:a1:f3:3f:c4:f8:f3:31:58:1a:12:fc:03:c5:67:15:11:b7:
         bd:4e:44:e9:cd:ac:02:e7:f3:0c:bc:75:5e:23:b0:60:df:84:
         4c:13:a8:32:d2:ae:a6:64:1f:93:c1:b2:d2:bd:05:4f:85:c2:
         5a:33:7f:d9:78:ff:1f:f5:3d:5f:5e:6f:7a:74:66:bf:41:03:
         d5:4c:54:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:21 2025 by rpki-client