Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa
File:                     3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          UmF6wNmDppllIuz3a+l35QtcKz/9rqcZs2KK1whu8Ac=
Subject key identifier:   28:0D:C6:AF:CD:FB:1A:C9:B6:35:CB:75:E2:16:E7:5B:9F:FD:9A:B5
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5945B3DFBCD81BEED765F733F3659A48A5BE2950
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:27 +0000
ROA not before:           Tue 04 Feb 2025 18:50:27 +0000
ROA not after:            Tue 03 Feb 2026 18:55:27 +0000
asID:                     262172
IP address blocks:        200.119.144.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:45:b3:df:bc:d8:1b:ee:d7:65:f7:33:f3:65:9a:48:a5:be:29:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:27 2025 GMT
            Not After : Feb  3 18:55:27 2026 GMT
        Subject: CN=280DC6AFCDFB1AC9B635CB75E216E75B9FFD9AB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a4:ab:8e:1f:36:e6:4e:79:08:6a:39:55:ee:
                    78:3f:c9:6d:55:61:f7:f6:93:48:3c:dc:c3:6c:b5:
                    5c:ec:ac:15:ef:97:7b:d4:07:39:04:89:6b:1b:e0:
                    db:f8:bf:d5:d4:1f:df:f4:ec:1d:4d:68:3f:3f:ee:
                    62:f7:48:09:41:e7:03:c5:cb:25:4b:fd:a7:b6:83:
                    ce:22:55:8d:4b:3e:dc:f4:56:86:91:78:a2:f4:7d:
                    dc:36:5a:2d:df:52:be:8c:4b:7f:20:40:b6:76:f8:
                    10:ed:f3:23:d5:be:73:51:3e:5c:4a:f4:1e:bb:29:
                    02:f6:45:15:5f:b1:b7:6d:2e:30:93:e4:75:d0:cf:
                    4e:f3:15:43:56:35:62:fe:03:1a:9f:fd:cd:31:e0:
                    e2:fe:f6:88:92:da:ae:8c:f3:a7:a7:45:f2:66:47:
                    43:9b:fa:81:38:22:4e:4d:a5:1a:23:88:20:97:ea:
                    d0:ef:88:4a:c3:4e:88:37:5d:71:83:48:39:37:f9:
                    7b:f0:22:fe:39:28:20:35:4b:90:d0:e4:a8:e4:ad:
                    bf:da:c2:cb:9f:12:d3:95:b1:2d:a7:56:62:9f:82:
                    9a:c6:72:9c:d1:6e:05:3d:03:d4:d4:6e:53:bb:f2:
                    ca:a0:24:7b:58:1e:f2:a7:16:27:b5:15:95:ed:85:
                    a4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0D:C6:AF:CD:FB:1A:C9:B6:35:CB:75:E2:16:E7:5B:9F:FD:9A:B5
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134342e302f32322d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:1e:28:79:dd:33:9d:bc:3d:bf:93:72:c6:6c:d7:9a:ba:
         22:c4:0a:70:87:b3:66:36:d3:6a:45:59:0e:b9:ea:c9:82:0f:
         5c:7c:d3:c2:91:df:85:9e:f3:8c:e3:a3:12:e4:ee:a3:98:d9:
         af:35:33:74:aa:eb:0f:71:78:83:5f:46:e9:0a:d3:41:4d:79:
         cf:4f:d0:07:54:3d:a9:ce:3c:6a:12:1a:20:98:6a:7b:22:74:
         6a:c5:5f:15:0a:8f:35:f1:cb:06:70:51:73:30:6c:88:db:80:
         48:b5:d2:48:84:56:f5:a7:c2:7e:31:80:43:88:1e:6e:11:e3:
         6e:dc:10:e9:b4:ae:df:a1:a8:b0:e5:23:db:de:90:1e:75:63:
         f1:46:92:d1:c1:13:3c:10:7b:a7:81:4d:b8:d1:49:16:6c:76:
         37:0f:dc:4a:54:46:87:15:6d:bb:11:86:8b:fa:32:3a:52:09:
         5d:4b:a6:6e:0b:3a:6c:1e:63:e2:22:55:d6:36:c4:2b:d9:6b:
         2d:0d:7d:3f:63:73:42:55:c2:b5:3a:fd:db:6e:ef:79:ff:e9:
         68:b1:08:d0:ed:77:09:c5:96:ba:6d:47:d8:b9:e1:c5:26:39:
         bd:f2:42:56:80:49:d4:59:ea:ae:54:c3:ec:e0:ef:87:90:2b:
         ab:5e:17:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:33 2025 by rpki-client