Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e20323632313732.roa
File:                     3230302e3131392e3134382e302f32332d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          9o8dkvFk+o91eWI53HJFpq4Zuug6HLZ2THtz0Cs7lZw=
Subject key identifier:   EB:FA:0B:6E:A1:42:99:E4:74:C5:9D:89:D5:61:80:F2:73:42:35:8D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1B4B898E56B28896196F1B8D217CCB9D621B2F2C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:25 +0000
ROA not before:           Tue 04 Feb 2025 18:50:25 +0000
ROA not after:            Tue 03 Feb 2026 18:55:25 +0000
asID:                     262172
IP address blocks:        200.119.148.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:89:8e:56:b2:88:96:19:6f:1b:8d:21:7c:cb:9d:62:1b:2f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:25 2025 GMT
            Not After : Feb  3 18:55:25 2026 GMT
        Subject: CN=EBFA0B6EA14299E474C59D89D56180F27342358D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:73:7f:de:fe:8d:f4:0a:0a:81:94:5e:c4:
                    2a:4f:93:69:eb:34:6b:e8:67:82:af:69:5c:ec:77:
                    53:e0:33:5f:9a:c7:02:6e:72:bb:77:f2:63:e5:a9:
                    d3:20:ad:63:f8:20:03:63:5f:97:c4:e9:46:c8:e5:
                    47:86:b8:2b:dc:b0:c7:3b:22:f3:84:f5:c4:bf:03:
                    78:be:0a:28:3d:a9:e1:a0:4a:e6:f0:6c:65:a2:01:
                    3f:50:2d:37:fb:c7:86:3b:7f:1e:78:13:a9:95:68:
                    88:8c:1b:ae:15:bc:a5:26:1b:ef:ab:bc:a2:60:27:
                    02:09:50:6a:40:4b:84:c6:46:30:fc:32:d2:a7:74:
                    7a:5a:66:c3:12:b8:a9:23:4e:d3:32:c9:8b:8f:e7:
                    c4:0a:7f:28:87:c1:81:04:85:76:22:42:13:bd:b8:
                    71:56:d5:f0:76:ed:55:e6:62:cb:91:ab:57:69:95:
                    e4:6a:37:1b:3f:3c:f9:3c:e2:cd:cc:0b:d5:7a:1f:
                    e9:d2:aa:ee:c5:a0:bd:64:23:b7:23:8d:6b:b9:7d:
                    ff:e3:b8:d1:dc:2d:7e:59:24:ba:ad:2b:10:23:3e:
                    02:5e:d0:74:9d:fa:f6:85:0c:03:92:a2:b0:57:a2:
                    54:3a:e5:f0:b6:bc:0a:69:41:88:e0:73:7e:ea:70:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FA:0B:6E:A1:42:99:E4:74:C5:9D:89:D5:61:80:F2:73:42:35:8D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3134382e302f32332d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:83:7d:1c:dd:ed:95:8f:3d:fe:d5:df:03:c4:f4:cb:a2:dc:
         39:57:16:07:87:bd:3d:8c:87:62:a7:46:31:2e:1c:87:1b:09:
         f9:19:22:17:f9:bb:8b:8e:6b:01:b4:0a:59:6b:c9:aa:d2:2a:
         09:95:ed:42:a3:cb:1a:53:11:d8:3c:1d:8a:6e:b8:47:01:4e:
         40:ba:34:2c:30:26:bd:a6:0b:ab:86:72:9a:4c:f0:b8:b2:a4:
         cb:53:a5:9b:3e:44:dd:9f:02:6a:2a:18:65:81:b0:32:01:ab:
         7b:a2:ee:5a:55:af:b9:bc:7e:b3:18:ec:7c:ab:e0:0e:34:54:
         66:94:2e:0d:1e:94:b7:41:eb:fa:0a:29:aa:55:fd:7c:44:d9:
         fd:2b:ff:95:da:8c:d1:db:12:6a:ed:69:7d:b8:2f:82:ad:d7:
         71:c6:ba:2d:83:2a:18:b3:bb:b7:b2:ea:e9:aa:68:8d:64:13:
         f6:7a:01:1e:53:2d:db:b3:b5:f6:ab:ef:c6:36:2c:0a:f6:a9:
         05:a2:a5:e5:df:8b:5a:ad:0e:8f:ce:02:43:a0:ab:d4:de:28:
         bd:b4:52:ab:fe:6c:ec:f3:c1:c9:84:5f:91:9c:18:bf:01:45:
         08:19:83:14:18:0e:16:c6:99:9a:f8:7c:e6:0f:96:24:15:c5:
         f5:0b:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:20:48 2025 by rpki-client