Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e203134373534.roa
File:                     3230302e3131392e3136302e302f32302d3234203d3e203134373534.roa (raw, json)
Hash identifier:          H4jmEt1RPw0U5vda0BuVh4rewYU4QPw+fQ7kdAHpmoY=
Subject key identifier:   B0:38:B9:1F:EA:ED:CC:A9:48:BD:74:39:9C:0A:3C:2A:FA:97:63:45
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       2E9E09B613C4180BCCE5758ED14D5936AFEE39DF
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:29 +0000
ROA not before:           Tue 04 Feb 2025 18:50:29 +0000
ROA not after:            Tue 03 Feb 2026 18:55:29 +0000
asID:                     14754
IP address blocks:        200.119.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9e:09:b6:13:c4:18:0b:cc:e5:75:8e:d1:4d:59:36:af:ee:39:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:29 2025 GMT
            Not After : Feb  3 18:55:29 2026 GMT
        Subject: CN=B038B91FEAEDCCA948BD74399C0A3C2AFA976345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:77:ba:c4:a6:7b:4d:dc:d4:bd:ab:a5:80:d7:
                    6f:26:32:c1:dd:cb:b2:cf:47:23:7f:aa:31:24:e9:
                    9e:7a:04:c4:ea:86:e5:aa:6f:4a:c9:e0:28:ae:34:
                    f6:eb:2f:2e:47:49:93:18:ec:74:2f:5c:76:23:db:
                    df:50:a2:65:9e:ed:c6:30:61:6d:c8:07:c7:8c:d2:
                    1e:41:72:42:af:bc:ec:1c:b9:de:98:4d:77:bc:92:
                    d5:5e:98:60:a4:b5:67:ee:3e:80:a9:3d:36:f7:d6:
                    ea:5f:5f:92:05:e6:f4:98:89:e8:f4:28:ae:7f:60:
                    95:29:33:2b:27:0f:c7:9a:a6:1a:78:57:90:55:46:
                    4d:a4:df:c3:2b:7f:54:5f:fb:71:d6:e8:ce:87:5f:
                    9e:7e:14:d3:4a:ee:d4:a3:da:37:2d:74:9a:28:0a:
                    eb:ed:e9:08:12:20:3e:db:ca:21:b5:f4:24:82:e4:
                    82:29:87:a3:ce:8e:92:3f:97:e8:73:e8:ab:70:53:
                    f2:e7:3f:11:a5:80:51:4e:6c:27:77:a3:2d:20:40:
                    d5:8e:21:71:36:3c:0c:e7:af:a6:7a:10:f2:99:98:
                    ed:8e:af:90:ad:f0:77:e7:bc:1b:a5:64:94:1e:7d:
                    67:8c:ef:18:bd:e6:cb:f6:8a:1e:72:4d:98:0a:84:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:38:B9:1F:EA:ED:CC:A9:48:BD:74:39:9C:0A:3C:2A:FA:97:63:45
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3136302e302f32302d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:a2:cf:8d:fc:51:a6:78:43:ec:cd:05:68:ce:6d:87:3a:37:
         0d:df:5f:50:c8:b8:7a:a1:64:c4:bd:8e:93:ad:c3:f7:45:b2:
         bc:46:f8:b9:5d:7f:54:0f:59:3f:30:ae:4c:b0:fe:53:03:ba:
         a9:4a:40:3b:15:fa:f3:f4:bc:07:a8:97:ec:6d:ca:03:0e:78:
         df:00:6a:5b:07:38:5f:96:13:39:32:d8:03:41:e6:dc:a5:eb:
         56:e5:06:b6:64:3a:dc:fa:b7:e1:d4:75:7e:b0:54:6e:85:92:
         ff:f2:11:d0:ec:7e:dc:4f:77:b1:96:60:06:61:ee:a9:55:f8:
         bd:48:20:f2:d8:08:28:f6:87:77:37:c4:fb:bc:9c:18:cf:38:
         87:d6:24:0a:c1:38:3e:7e:29:23:73:a6:39:9e:73:c2:f4:0f:
         dd:0a:2e:f4:af:90:9a:4d:ec:61:58:c1:e9:e7:c9:63:94:ea:
         22:f4:b4:89:b0:58:7e:e7:21:81:f2:53:93:4d:a3:e3:01:e5:
         db:42:6b:b6:5a:cc:5e:13:63:77:df:6a:a8:7c:0d:fd:fe:ae:
         93:70:a8:41:2a:cc:fe:94:17:37:3a:b2:da:fb:e3:da:33:1e:
         f4:49:b5:92:e3:bd:0e:83:25:30:43:37:c7:6c:1c:28:cd:7e:
         39:d9:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:17 2025 by rpki-client