Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa
File:                     3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa (raw, json)
Hash identifier:          BWjJLHMmCrR5ZLhySvJOp76aJBDTjt6ktQsEYI4bKFI=
Subject key identifier:   67:C0:44:B7:55:69:B1:34:55:61:1E:24:BE:5A:A3:FF:FF:EF:EC:F6
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       3B54F4FF42934F495AA5BFF2D53C94D5E7F1942B
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:20 +0000
ROA not before:           Tue 04 Feb 2025 18:50:20 +0000
ROA not after:            Tue 03 Feb 2026 18:55:20 +0000
asID:                     13682
IP address blocks:        200.119.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:54:f4:ff:42:93:4f:49:5a:a5:bf:f2:d5:3c:94:d5:e7:f1:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:20 2025 GMT
            Not After : Feb  3 18:55:20 2026 GMT
        Subject: CN=67C044B75569B13455611E24BE5AA3FFFFEFECF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:1d:cb:d3:d6:ed:c3:f4:f3:15:7a:45:b8:
                    66:71:c6:fe:98:b8:77:3f:df:5c:ea:27:15:24:0b:
                    a1:90:e1:8c:7c:ad:8d:d3:24:06:81:41:d1:95:5b:
                    81:37:1a:e5:5c:2d:32:d2:5b:9c:05:90:66:68:57:
                    45:57:0f:e2:24:cc:8d:ab:dd:37:3c:57:6e:2b:4e:
                    12:47:05:29:c0:4b:24:da:9d:60:0e:62:31:08:d6:
                    85:67:c0:cc:17:5f:b6:65:b5:a7:87:78:88:12:d1:
                    3c:55:bf:d4:af:f2:88:e7:a2:f6:a2:52:5b:38:be:
                    6c:1c:ec:44:fe:9e:4c:37:e3:9a:74:5d:32:4d:1e:
                    e8:c3:ea:3f:66:89:e0:23:d2:26:24:a2:01:d7:fc:
                    85:21:ee:6a:60:11:a8:6d:66:7b:c8:4f:df:48:e7:
                    4d:20:9a:6e:0f:f1:65:45:1b:95:99:84:7a:68:1a:
                    95:7b:2d:95:52:0d:fa:c3:04:ac:68:40:50:e3:b6:
                    e4:5e:79:b6:d9:bb:81:ca:fe:d5:e4:aa:35:9c:04:
                    22:9b:19:ad:5a:7a:3d:a4:bf:e4:69:ee:17:20:aa:
                    a3:01:02:c5:3e:a2:de:ac:b8:72:71:f1:42:10:cb:
                    1d:53:3d:22:4d:59:2f:cf:88:55:14:19:2e:5e:6b:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C0:44:B7:55:69:B1:34:55:61:1E:24:BE:5A:A3:FF:FF:EF:EC:F6
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a4:7a:ea:d1:79:97:3d:4b:cf:f6:4c:25:5b:08:df:48:d9:
         d8:b9:de:76:e9:a5:85:4a:a7:0e:c3:c7:af:0e:42:b2:3b:23:
         92:d0:3f:a1:30:99:17:a0:76:70:68:97:4b:4e:15:50:98:87:
         43:74:e8:29:0c:cb:0a:de:d2:28:51:33:f5:ab:ae:d0:63:7d:
         36:50:f9:40:3d:2e:06:18:c7:ab:41:2c:e8:52:79:ec:35:8c:
         6f:13:bf:1e:f5:3e:dc:cf:b6:5c:c4:83:56:77:81:7b:3c:77:
         7c:ef:06:a5:05:30:73:83:6f:be:30:43:5a:d5:36:46:db:70:
         13:2c:d4:c8:c4:2d:46:5c:c6:84:84:a9:16:0e:2a:fd:a7:b3:
         b9:2e:bc:17:c0:8c:4a:5e:23:b7:24:e3:2d:7f:26:a3:58:b8:
         98:b0:ae:de:42:27:ae:f7:a2:36:36:c5:03:5b:c3:aa:bf:43:
         8e:34:00:33:63:14:98:ba:3a:ec:51:52:27:55:a6:5d:e0:24:
         90:b4:c5:1f:cc:04:24:9f:9a:e3:a1:8f:a0:e9:cc:c3:5e:c3:
         c7:a0:84:dc:b4:77:cb:53:bd:90:4f:46:c9:fc:c5:a7:03:46:
         12:33:4f:48:6e:f8:1c:b0:a1:47:1b:e7:92:37:22:a7:0d:83:
         cd:8e:35:72
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUO1T0/0KTT0lapb/y1TyU1efxlCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMjBaFw0yNjAyMDMxODU1MjBaMDMxMTAvBgNV
BAMTKDY3QzA0NEI3NTU2OUIxMzQ1NTYxMUUyNEJFNUFBM0ZGRkZFRkVDRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg8B3L09btw/TzFXpFuGZxxv6Y
uHc/31zqJxUkC6GQ4Yx8rY3TJAaBQdGVW4E3GuVcLTLSW5wFkGZoV0VXD+IkzI2r
3Tc8V24rThJHBSnASyTanWAOYjEI1oVnwMwXX7ZltaeHeIgS0TxVv9Sv8ojnovai
Uls4vmwc7ET+nkw345p0XTJNHujD6j9mieAj0iYkogHX/IUh7mpgEahtZnvIT99I
500gmm4P8WVFG5WZhHpoGpV7LZVSDfrDBKxoQFDjtuReebbZu4HK/tXkqjWcBCKb
Ga1aej2kv+Rp7hcgqqMBAsU+ot6suHJx8UIQyx1TPSJNWS/PiFUUGS5ea1DBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZ8BEt1VpsTRVYR4kvlqj///v7PYwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHeW
MA0GCSqGSIb3DQEBCwUAA4IBAQCkpHrq0XmXPUvP9kwlWwjfSNnYud526aWFSqcO
w8evDkKyOyOS0D+hMJkXoHZwaJdLThVQmIdDdOgpDMsK3tIoUTP1q67QY302UPlA
PS4GGMerQSzoUnnsNYxvE78e9T7cz7ZcxINWd4F7PHd87walBTBzg2++MENa1TZG
23ATLNTIxC1GXMaEhKkWDir9p7O5LrwXwIxKXiO3JOMtfyajWLiYsK7eQieu96I2
NsUDW8Oqv0OONAAzYxSYujrsUVInVaZd4CSQtMUfzAQkn5rjoY+g6czDXsPHoITc
tHfLU72QT0bJ/MWnA0YSM09IbvgcsKFHG+eSNyKnDYPNjjVy
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:21 2025 by rpki-client