Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa
File:                     3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          deXleZ3Yw7Xr7SdvDfQWoLC0kcEBySXRFRxTCyAHYBo=
Subject key identifier:   28:9C:8B:2A:A4:5C:2B:C2:CC:66:8D:4F:DC:28:6D:B0:31:3E:62:E8
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       134F49B626370B6C9C78FA2AB13A1A8FCA0091C2
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:15 +0000
ROA not before:           Tue 04 Feb 2025 18:50:15 +0000
ROA not after:            Tue 03 Feb 2026 18:55:15 +0000
asID:                     262172
IP address blocks:        200.119.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:4f:49:b6:26:37:0b:6c:9c:78:fa:2a:b1:3a:1a:8f:ca:00:91:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:15 2025 GMT
            Not After : Feb  3 18:55:15 2026 GMT
        Subject: CN=289C8B2AA45C2BC2CC668D4FDC286DB0313E62E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:40:1e:7b:77:23:61:ea:09:00:03:5b:69:
                    40:08:a3:a5:44:60:19:26:f5:9d:52:38:a2:01:57:
                    1a:4f:e7:52:97:b2:2d:ee:b4:13:b9:96:3e:67:99:
                    f0:a1:9f:e6:da:da:87:f6:39:1e:1a:d4:f2:62:ba:
                    4f:30:58:cc:cc:7f:9c:6b:b9:d0:9d:3b:8f:bb:a0:
                    e5:76:22:2d:58:7a:94:08:ef:43:f2:fe:ea:b4:13:
                    46:c7:46:97:ce:64:94:de:fd:9c:15:6f:5c:e1:8d:
                    ba:42:f0:c3:7d:e4:32:dc:83:75:b9:ca:b7:5b:73:
                    cb:42:90:5c:d4:6e:9c:3e:d3:b6:af:eb:93:8f:49:
                    fb:83:d0:ae:9c:70:3f:1a:27:1b:eb:83:03:7c:4c:
                    95:5b:e1:2b:eb:a4:3c:b2:61:e5:ca:47:23:44:9d:
                    5d:02:01:0d:c3:30:57:5a:53:2e:06:cb:33:4e:cb:
                    87:71:cb:8d:08:c5:6b:b5:f1:80:58:24:c5:29:13:
                    c1:6a:f4:61:b6:1c:45:b4:bc:cb:0c:0b:ca:a9:5a:
                    d0:94:c3:4b:af:89:52:30:ec:f3:34:43:5e:e4:b8:
                    c8:c0:ff:43:95:4a:69:9a:3a:2f:cc:40:ca:0b:04:
                    fd:0c:9a:78:83:8c:d1:31:30:de:b2:86:ec:6d:f8:
                    ad:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9C:8B:2A:A4:5C:2B:C2:CC:66:8D:4F:DC:28:6D:B0:31:3E:62:E8
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3132382e302f32302d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:19:0b:6b:68:3e:de:93:94:a3:35:9f:73:6a:2c:d2:b7:c2:
         bb:37:9c:8a:da:d4:eb:ba:42:03:02:26:dc:fb:2c:3e:d0:3e:
         3c:de:0b:34:ba:6c:92:b8:56:b3:d9:9f:41:30:ba:1f:ee:93:
         a2:76:69:ab:07:61:26:35:e7:3f:98:b3:ab:1f:67:8d:44:c2:
         a5:ef:3b:2a:29:77:e1:13:df:f3:5c:15:f7:29:75:3b:3d:46:
         9f:e5:a6:a6:fc:b3:f1:ef:ba:d3:c2:d7:71:76:25:b9:50:1e:
         dc:06:b5:f1:5b:9f:21:6d:02:01:dc:8f:6f:53:f0:bd:ba:07:
         e5:69:b3:d9:b1:a4:44:c0:a9:a5:a5:02:cc:50:33:09:04:64:
         2e:56:98:47:5e:77:09:ac:df:5e:bf:02:e7:c2:6b:40:73:46:
         87:77:26:3c:60:60:6a:68:6d:18:89:f2:d8:a9:32:3d:d4:f5:
         36:13:3e:26:34:4b:39:b8:fe:9a:e1:7a:61:0e:bf:a3:8f:f9:
         63:5b:80:36:c1:fd:a9:b1:36:a8:d4:99:91:83:65:6b:a1:11:
         db:26:ae:b7:fd:2d:9a:7e:70:09:ec:03:4a:d1:43:f9:62:ad:
         37:58:af:a8:94:64:7f:ac:d8:49:0b:ac:27:cb:05:26:72:ca:
         a1:d0:9c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:43:49 2025 by rpki-client