Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa
File:                     3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          h42HKb0DRxxWocnDhGnMTog0YmvZPdwlX6+/Z/VE65o=
Subject key identifier:   20:10:A3:93:19:22:67:83:32:5C:4B:0E:4A:92:64:F0:E5:FD:1E:21
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       67E7EBC6CB52FF0F895F3755D1AD0335E59BCCF6
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:13 +0000
ROA not before:           Tue 04 Feb 2025 18:50:13 +0000
ROA not after:            Tue 03 Feb 2026 18:55:13 +0000
asID:                     14754
IP address blocks:        200.119.148.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:e7:eb:c6:cb:52:ff:0f:89:5f:37:55:d1:ad:03:35:e5:9b:cc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:13 2025 GMT
            Not After : Feb  3 18:55:13 2026 GMT
        Subject: CN=2010A39319226783325C4B0E4A9264F0E5FD1E21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c9:fc:91:81:e3:39:e9:59:31:45:9f:a5:66:
                    f6:73:54:10:7e:7f:0b:f4:c1:3b:aa:cd:e0:5a:05:
                    d8:da:c8:00:4a:6b:64:7b:c6:27:53:72:d4:54:91:
                    e4:2f:a8:41:c7:d7:fa:f0:82:65:cb:61:50:85:93:
                    27:fe:2a:23:dc:2d:5b:8e:4c:59:5b:d8:ba:0e:06:
                    2e:6c:11:46:19:c3:34:4d:d5:8e:55:1d:58:b4:34:
                    8d:d6:89:d7:ab:92:e0:1a:35:fb:e0:03:7f:46:12:
                    74:78:17:fd:25:10:18:65:ee:90:d7:8b:4d:2c:3c:
                    45:44:b6:98:a0:86:20:a8:63:52:84:f4:0b:90:1e:
                    8f:de:9a:e3:d5:f6:78:df:95:a9:cf:cb:4d:c2:d6:
                    a7:76:4e:b2:58:40:de:b0:cf:31:96:b3:6d:06:07:
                    b1:78:e6:ae:32:0d:54:aa:14:2f:34:ae:9f:a5:a3:
                    44:82:45:92:d3:e4:78:a7:1e:0b:37:eb:e5:01:32:
                    bf:70:ef:c9:0c:be:4b:6f:83:9b:6d:37:42:63:18:
                    0e:cc:a3:36:2a:36:4f:94:54:3c:a7:0a:ae:60:c3:
                    39:ce:a2:14:5a:19:1b:76:89:96:11:c1:db:50:0f:
                    55:89:a7:fc:ef:ff:71:73:45:5f:dd:3c:a9:de:f9:
                    9c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:A3:93:19:22:67:83:32:5C:4B:0E:4A:92:64:F0:E5:FD:1E:21
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:10:25:9b:6f:cb:8c:7d:43:14:c3:00:56:4a:46:e9:0c:
         bf:cb:ef:d8:ce:53:38:72:c7:49:73:83:fb:f3:1e:31:1b:5d:
         46:5c:a3:6c:f8:78:cb:3c:a6:0a:f7:21:a0:c8:a7:49:38:5d:
         f9:29:63:8b:b8:d5:9c:13:7c:a0:03:79:e0:92:db:ae:6c:54:
         04:78:86:32:3f:2b:09:6b:00:5a:17:9b:e8:42:67:6d:23:fd:
         01:e3:59:d3:9d:23:92:6d:f9:ec:17:3d:a1:c9:a9:6c:07:45:
         10:2b:11:da:62:4f:3d:6d:43:8c:95:d5:ca:f4:38:c3:28:37:
         90:34:8d:60:a6:a2:f3:94:58:33:54:65:a5:33:28:28:d2:30:
         3a:79:fd:69:51:fa:9b:e6:c0:a0:8f:43:0c:c9:07:2d:d6:bf:
         ec:44:54:bd:a6:c5:e6:ec:5e:89:ea:21:1f:eb:52:1e:0f:77:
         c7:ac:1d:3b:65:15:6d:2c:5a:d5:b7:ec:82:f0:fa:f0:4f:c7:
         b5:44:03:c8:85:6a:73:72:78:d6:27:6b:b1:65:dd:7c:c3:b1:
         27:63:c5:b5:22:72:81:95:62:fa:bd:89:bd:18:66:3c:95:68:
         f0:2d:52:e4:84:7f:db:aa:7f:1f:64:9a:78:d7:65:d4:ef:af:
         44:e2:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:35:58 2025 by rpki-client