Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e20323632313732.roa
File:                     3230302e3131392e3135362e302f32322d3234203d3e20323632313732.roa (raw, json)
Hash identifier:          19nu4YB1jgoQoHlYQm2JViL6jZto7s91y5hN5V1aK48=
Subject key identifier:   89:5D:49:D9:13:7D:37:A0:97:F6:6A:31:8A:7C:8A:0A:51:B6:FC:DE
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       255F09837122E37F00CD4FEB6612D3D38E46046A
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e20323632313732.roa
Signing time:             Tue 04 Feb 2025 18:55:17 +0000
ROA not before:           Tue 04 Feb 2025 18:50:17 +0000
ROA not after:            Tue 03 Feb 2026 18:55:17 +0000
asID:                     262172
IP address blocks:        200.119.156.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5f:09:83:71:22:e3:7f:00:cd:4f:eb:66:12:d3:d3:8e:46:04:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:17 2025 GMT
            Not After : Feb  3 18:55:17 2026 GMT
        Subject: CN=895D49D9137D37A097F66A318A7C8A0A51B6FCDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2a:6b:85:17:4c:cf:c7:81:f2:82:14:42:fb:
                    72:2f:fb:c6:68:f3:56:f6:5c:a4:d1:c8:e2:2f:b8:
                    ac:8b:57:36:41:2e:a4:cf:34:90:c9:64:f2:7b:b2:
                    2a:53:c2:83:f6:57:f0:c8:f5:7f:7d:3b:95:68:31:
                    5e:bb:bd:6f:d4:a3:d6:8d:41:bc:61:06:2e:00:0d:
                    cc:c8:6a:97:30:5f:03:1e:e2:e3:72:ad:9f:8a:50:
                    03:80:b6:94:90:b6:19:60:9f:9b:b3:4d:5e:ea:cd:
                    fb:52:e1:ec:d2:0d:06:cd:4a:6c:b3:96:2d:a9:52:
                    a1:1a:eb:9f:8f:bd:d0:6b:26:f1:3d:a3:fe:04:18:
                    ef:27:c9:5b:59:87:f5:87:61:c9:d0:54:b6:46:7d:
                    ef:3b:22:81:e5:4b:39:d6:57:c9:b2:3d:40:f9:5b:
                    a1:c8:ec:b7:77:09:6d:4e:e5:d5:ca:eb:5d:e8:bf:
                    97:88:a9:6c:ba:d6:13:83:81:e7:ed:5e:cf:be:e0:
                    a6:09:53:d6:34:83:d7:b6:09:b8:5d:ba:c7:99:39:
                    2f:a9:d0:11:48:26:f3:60:c7:28:32:f0:8d:b8:02:
                    fb:8e:05:2d:d2:48:4c:c8:c5:e5:af:fc:4e:ee:e3:
                    d8:93:bd:57:cd:79:08:c7:45:6d:f9:a6:af:be:f7:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:5D:49:D9:13:7D:37:A0:97:F6:6A:31:8A:7C:8A:0A:51:B6:FC:DE
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3135362e302f32322d3234203d3e20323632313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:be:61:78:05:79:19:f4:93:99:5a:c0:12:35:2e:7f:8a:61:
         1c:68:cd:67:bd:0f:2e:b5:22:7a:5f:45:ec:8c:fe:c0:36:9a:
         11:e2:1f:5e:e9:f4:2d:15:5a:9a:3c:11:75:df:33:1b:58:1f:
         a2:89:17:77:ea:e4:00:bc:49:32:30:9d:37:bb:3f:fd:d1:0f:
         3b:05:72:65:ac:2b:68:9c:3c:ff:b9:60:14:3d:c2:35:f2:a6:
         f6:29:46:25:c0:a4:d0:e5:8a:34:e5:e4:44:6f:d3:aa:b1:9f:
         71:b7:01:0a:b9:6c:50:86:47:76:d1:79:38:67:06:4b:b7:4c:
         7a:35:e2:df:32:08:28:11:e6:1d:04:c0:a0:fe:21:c9:ad:7b:
         e8:af:8c:33:50:1b:93:a6:51:b4:50:2c:26:c3:11:51:d7:6b:
         fe:09:fd:a4:03:2d:d6:92:c7:09:63:3a:0e:fd:93:15:17:91:
         68:5a:6c:ac:1b:e3:fa:9c:a7:f5:f4:b9:40:df:5f:1d:ba:fa:
         09:d5:4d:6d:2a:4c:c0:15:ca:2f:48:90:a5:fd:ac:97:bf:f9:
         27:1e:07:b8:9d:a6:df:16:9b:8e:39:63:68:e8:c5:06:c1:29:
         24:a3:40:86:61:5d:55:5d:3f:94:17:59:7a:83:b2:ac:dc:b9:
         dd:2a:e5:db
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJV8Jg3Ei438AzU/rZhLT045GBGowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTdaFw0yNjAyMDMxODU1MTdaMDMxMTAvBgNV
BAMTKDg5NUQ0OUQ5MTM3RDM3QTA5N0Y2NkEzMThBN0M4QTBBNTFCNkZDREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6KmuFF0zPx4HyghRC+3Iv+8Zo
81b2XKTRyOIvuKyLVzZBLqTPNJDJZPJ7sipTwoP2V/DI9X99O5VoMV67vW/Uo9aN
QbxhBi4ADczIapcwXwMe4uNyrZ+KUAOAtpSQthlgn5uzTV7qzftS4ezSDQbNSmyz
li2pUqEa65+PvdBrJvE9o/4EGO8nyVtZh/WHYcnQVLZGfe87IoHlSznWV8myPUD5
W6HI7Ld3CW1O5dXK613ov5eIqWy61hODgeftXs++4KYJU9Y0g9e2CbhduseZOS+p
0BFIJvNgxygy8I24AvuOBS3SSEzIxeWv/E7u49iTvVfNeQjHRW35pq++9x7dAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUiV1J2RN9N6CX9moxinyKClG2/N4wHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMyMzAzMDJlMzEzMTM5MmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMTM3MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALI
d5wwDQYJKoZIhvcNAQELBQADggEBAEe+YXgFeRn0k5lawBI1Ln+KYRxozWe9Dy61
InpfReyM/sA2mhHiH17p9C0VWpo8EXXfMxtYH6KJF3fq5AC8STIwnTe7P/3RDzsF
cmWsK2icPP+5YBQ9wjXypvYpRiXApNDlijTl5ERv06qxn3G3AQq5bFCGR3bReThn
Bku3THo14t8yCCgR5h0EwKD+Icmte+ivjDNQG5OmUbRQLCbDEVHXa/4J/aQDLdaS
xwljOg79kxUXkWhabKwb4/qcp/X0uUDfXx26+gnVTW0qTMAVyi9IkKX9rJe/+Sce
B7idpt8Wm445Y2joxQbBKSSjQIZhXVVdP5QXWXqDsqzcud0q5ds=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:06:35 2025 by rpki-client