Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa
File:                     3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          Zr318oUS5HawsE6bdiGgJnNGshCa5Zxc/GgVY0LVP5Q=
Subject key identifier:   0C:02:7F:D2:D5:4C:B9:A8:F8:96:41:45:81:F7:6D:B4:5E:F7:8D:7D
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       103242D8ED972E2CF33AAA2B4489827A02051E0C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:21 +0000
ROA not before:           Tue 04 Feb 2025 18:50:21 +0000
ROA not after:            Tue 03 Feb 2026 18:55:21 +0000
asID:                     14754
IP address blocks:        200.119.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:32:42:d8:ed:97:2e:2c:f3:3a:aa:2b:44:89:82:7a:02:05:1e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:21 2025 GMT
            Not After : Feb  3 18:55:21 2026 GMT
        Subject: CN=0C027FD2D54CB9A8F896414581F76DB45EF78D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:69:5a:03:b5:86:40:9c:b1:72:af:99:8e:
                    69:0d:ed:ca:ec:2e:de:05:ab:89:65:d4:21:a2:51:
                    7c:13:00:5e:64:0a:57:3d:9a:2a:4a:d6:23:bd:15:
                    bf:e5:cc:f1:16:8b:93:f1:09:5c:cb:9e:0d:20:42:
                    bd:77:2d:96:74:73:d6:49:fb:24:d7:08:5b:c0:6e:
                    e4:a5:5f:aa:f3:8a:26:3d:42:07:a8:1c:8d:e1:ae:
                    6c:e6:3c:8a:37:d1:b1:a2:dc:3a:43:87:b2:c4:66:
                    ef:ae:ad:00:50:86:44:3d:0b:df:46:a7:a4:b7:93:
                    53:cc:2d:b3:57:bf:f5:48:7c:0d:39:52:a8:5c:4d:
                    4f:7d:32:8b:88:0b:c6:81:28:f6:d0:79:5b:20:a3:
                    5d:84:3f:11:8d:c4:9b:c6:cd:96:0c:82:dc:b7:69:
                    f5:c3:5d:c4:72:ee:fa:d2:06:6b:7c:be:43:18:d6:
                    a9:ba:52:95:53:79:46:95:a5:6b:2a:37:7f:2b:aa:
                    53:8b:8b:01:47:d3:e5:1a:89:5c:e5:4e:76:bb:5a:
                    2d:36:31:a9:9d:66:6b:f7:15:f8:29:83:ec:b2:a8:
                    12:62:79:39:5d:74:d9:63:1f:78:db:d9:16:d4:0a:
                    3d:e6:97:11:d1:f1:89:01:15:17:fd:18:fd:8d:04:
                    f7:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:7F:D2:D5:4C:B9:A8:F8:96:41:45:81:F7:6D:B4:5E:F7:8D:7D
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:36:b7:47:22:b5:47:79:7e:0a:d4:8d:14:ad:b8:13:23:2e:
         ee:7b:c3:6f:50:65:96:bf:cc:0e:a4:00:61:22:20:d8:d4:df:
         3f:f2:b3:a9:2b:2c:de:7c:76:e8:45:92:27:31:99:5f:5a:71:
         ea:5a:dc:b4:5e:7d:8e:56:be:5e:5a:0a:21:ce:0a:73:7b:7c:
         85:d3:15:11:ac:e4:ce:bf:be:a5:85:07:e7:25:80:4d:1f:ff:
         71:b6:2f:30:88:b2:62:26:28:c0:eb:f9:ba:21:17:07:10:64:
         cb:b0:a6:85:de:a9:62:1f:7d:79:84:aa:c0:7a:04:19:7a:af:
         91:01:84:72:85:7a:70:05:11:46:fa:5c:dc:a6:39:bd:6f:ba:
         da:27:4f:5d:57:c6:4d:d7:01:be:65:bc:32:14:a8:52:56:76:
         b4:c3:17:4e:bc:2a:56:b9:55:7f:95:33:b5:8e:01:e7:4a:1d:
         22:d8:7e:af:74:48:8b:c0:25:e5:e3:9f:15:98:35:41:be:c3:
         bf:1a:3b:54:d3:80:27:b2:0a:bf:12:48:71:f9:aa:7a:91:7c:
         e0:d3:f3:72:2d:c8:21:27:62:4f:c2:76:25:47:ae:19:63:9f:
         c7:0a:3c:4a:24:f3:cb:37:e2:fb:d7:9a:d5:76:d2:a8:e9:fc:
         54:99:87:03
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEDJC2O2XLizzOqorRImCegIFHgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMjFaFw0yNjAyMDMxODU1MjFaMDMxMTAvBgNV
BAMTKDBDMDI3RkQyRDU0Q0I5QThGODk2NDE0NTgxRjc2REI0NUVGNzhEN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXl2laA7WGQJyxcq+ZjmkN7crs
Lt4Fq4ll1CGiUXwTAF5kClc9mipK1iO9Fb/lzPEWi5PxCVzLng0gQr13LZZ0c9ZJ
+yTXCFvAbuSlX6rziiY9QgeoHI3hrmzmPIo30bGi3DpDh7LEZu+urQBQhkQ9C99G
p6S3k1PMLbNXv/VIfA05UqhcTU99MouIC8aBKPbQeVsgo12EPxGNxJvGzZYMgty3
afXDXcRy7vrSBmt8vkMY1qm6UpVTeUaVpWsqN38rqlOLiwFH0+UaiVzlTna7Wi02
MamdZmv3Ffgpg+yyqBJieTlddNljH3jb2RbUCj3mlxHR8YkBFRf9GP2NBPcDAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDAJ/0tVMuaj4lkFFgfdttF73jX0wHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyHec
MA0GCSqGSIb3DQEBCwUAA4IBAQA2NrdHIrVHeX4K1I0UrbgTIy7ue8NvUGWWv8wO
pABhIiDY1N8/8rOpKyzefHboRZInMZlfWnHqWty0Xn2OVr5eWgohzgpze3yF0xUR
rOTOv76lhQfnJYBNH/9xti8wiLJiJijA6/m6IRcHEGTLsKaF3qliH315hKrAegQZ
eq+RAYRyhXpwBRFG+lzcpjm9b7raJ09dV8ZN1wG+ZbwyFKhSVna0wxdOvCpWuVV/
lTO1jgHnSh0i2H6vdEiLwCXl458VmDVBvsO/GjtU04Ansgq/Ekhx+ap6kXzg0/Ny
LcghJ2JPwnYlR64ZY5/HCjxKJPPLN+L715rVdtKo6fxUmYcD
-----END CERTIFICATE-----