Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e20323632313732.roa
File:                     3230302e3131392e3135302e302f32342d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          JpdGrXsd7G/e1ryOa7qpjeROwMX/ihPrQeasf04Vce8=
Subject key identifier:   DB:E2:9F:4E:15:35:0B:32:C1:E0:6B:26:0F:47:1A:44:FA:09:D9:57
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       55254792BA4F7DD731C8B5AEDB0ABDFC83C4EBA6
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:12 +0000
ROA not before:           Tue 04 Feb 2025 18:50:12 +0000
ROA not after:            Tue 03 Feb 2026 18:55:12 +0000
asID:                     262172
IP address blocks:        200.119.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:25:47:92:ba:4f:7d:d7:31:c8:b5:ae:db:0a:bd:fc:83:c4:eb:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:12 2025 GMT
            Not After : Feb  3 18:55:12 2026 GMT
        Subject: CN=DBE29F4E15350B32C1E06B260F471A44FA09D957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:56:55:cc:6b:3b:51:3e:e7:31:79:e6:e2:90:
                    24:5c:1a:ac:34:1b:61:2c:88:96:6a:10:aa:f2:44:
                    46:5b:e3:59:34:fa:a4:59:cd:25:e2:28:2b:65:0b:
                    63:4d:41:d9:4c:98:fc:ff:82:98:88:38:d8:53:52:
                    1e:fc:b7:ca:ee:9f:9a:9c:b2:ff:1c:c3:08:e5:c9:
                    db:12:04:a6:84:33:eb:19:30:bf:5e:1c:c4:f1:7e:
                    b8:98:61:15:62:01:90:b6:78:10:e7:7d:61:4b:6e:
                    ec:b3:25:44:0a:d1:37:33:64:87:58:f8:65:ba:e9:
                    1b:3c:b5:f2:4c:43:ca:7a:46:4d:84:bd:52:bf:68:
                    a5:cc:f0:f4:17:62:2b:48:1e:21:fd:83:fd:74:57:
                    5c:74:21:2d:41:19:a1:e0:f6:65:c3:30:d6:73:11:
                    a2:72:cf:c7:e2:c4:b4:b2:46:c8:ec:d9:73:3a:8b:
                    ab:5d:c7:ec:82:3a:0a:23:93:cf:06:9f:a0:40:b9:
                    fb:7b:fc:0b:65:d3:e4:29:d9:38:45:cb:c1:73:4b:
                    9f:9f:01:0f:51:e2:3b:c0:24:bd:1a:ff:79:51:a1:
                    7f:c5:11:d0:db:f7:de:ab:9d:a6:98:21:cd:dc:b7:
                    08:96:a8:24:5d:ce:4f:a9:04:4d:4c:79:ff:e0:b7:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E2:9F:4E:15:35:0B:32:C1:E0:6B:26:0F:47:1A:44:FA:09:D9:57
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135302e302f32342d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:b6:cb:fd:d0:ee:4c:d8:fe:7e:67:9b:b0:07:64:95:1d:7d:
         0e:29:86:4f:3f:ca:46:43:29:a5:1d:df:77:70:1c:a2:23:c0:
         93:78:c3:05:43:a8:d7:11:f0:a9:a2:da:18:3b:f6:8d:ce:86:
         de:8e:99:8a:c3:89:12:30:0d:b0:e5:c4:d2:32:27:e2:7e:15:
         34:a8:c2:95:87:ac:fa:85:ec:3c:de:fc:31:8c:a2:59:39:da:
         0b:54:c1:aa:5e:6a:9d:0f:bd:d9:a4:a4:6d:40:56:36:da:f4:
         25:49:d7:ab:c9:34:22:36:d5:a9:15:de:7d:c2:c7:63:ee:01:
         99:f6:4f:b5:7b:b2:1b:0d:61:2e:12:0f:25:10:8e:26:c2:85:
         f1:7e:88:91:8a:eb:cc:af:f4:bc:cb:cd:ae:c5:66:59:4d:d2:
         84:ea:3b:00:9b:fe:5c:b4:aa:2d:7a:ea:af:bc:0b:2f:c4:4a:
         c7:53:c7:cc:5e:c1:a3:2e:07:b3:7b:a7:5e:63:44:e9:a2:06:
         5b:75:58:bb:2a:e2:a6:24:23:aa:d6:04:ea:45:c3:90:f5:07:
         42:f5:74:26:12:da:35:58:0d:b6:7b:11:df:57:2a:67:22:13:
         54:91:c0:dc:aa:ca:39:02:41:fc:1a:c1:b9:44:f5:bd:7a:c1:
         ff:2a:32:bf
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUVSVHkrpPfdcxyLWu2wq9/IPE66YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTJaFw0yNjAyMDMxODU1MTJaMDMxMTAvBgNV
BAMTKERCRTI5RjRFMTUzNTBCMzJDMUUwNkIyNjBGNDcxQTQ0RkEwOUQ5NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpVlXMaztRPucxeebikCRcGqw0
G2EsiJZqEKryREZb41k0+qRZzSXiKCtlC2NNQdlMmPz/gpiIONhTUh78t8run5qc
sv8cwwjlydsSBKaEM+sZML9eHMTxfriYYRViAZC2eBDnfWFLbuyzJUQK0TczZIdY
+GW66Rs8tfJMQ8p6Rk2EvVK/aKXM8PQXYitIHiH9g/10V1x0IS1BGaHg9mXDMNZz
EaJyz8fixLSyRsjs2XM6i6tdx+yCOgojk88Gn6BAuft7/Atl0+Qp2ThFy8FzS5+f
AQ9R4jvAJL0a/3lRoX/FEdDb996rnaaYIc3ctwiWqCRdzk+pBE1Mef/gtwSDAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU2+KfThU1CzLB4GsmD0caRPoJ2VcwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM3MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADI
d5YwDQYJKoZIhvcNAQELBQADggEBAIe2y/3Q7kzY/n5nm7AHZJUdfQ4phk8/ykZD
KaUd33dwHKIjwJN4wwVDqNcR8Kmi2hg79o3Oht6OmYrDiRIwDbDlxNIyJ+J+FTSo
wpWHrPqF7Dze/DGMolk52gtUwapeap0PvdmkpG1AVjba9CVJ16vJNCI21akV3n3C
x2PuAZn2T7V7shsNYS4SDyUQjibChfF+iJGK68yv9LzLza7FZllN0oTqOwCb/ly0
qi166q+8Cy/ESsdTx8xewaMuB7N7p15jROmiBlt1WLsq4qYkI6rWBOpFw5D1B0L1
dCYS2jVYDbZ7Ed9XKmciE1SRwNyqyjkCQfwawblE9b16wf8qMr8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:41:46 2025 by rpki-client