Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203134373534.roa
File:                     3230302e3131392e3137362e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          1z6BuTPiRLplPK689euOV58d97o1DHq/PJTh8yiGies=
Subject key identifier:   8D:FE:BD:91:E7:84:A9:21:0D:E5:37:BB:29:39:B3:4C:DD:20:84:E1
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       49CF042E949D41294431DD4B3B8B50381955F410
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:14 +0000
ROA not before:           Tue 04 Feb 2025 18:50:14 +0000
ROA not after:            Tue 03 Feb 2026 18:55:14 +0000
asID:                     14754
IP address blocks:        200.119.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cf:04:2e:94:9d:41:29:44:31:dd:4b:3b:8b:50:38:19:55:f4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:14 2025 GMT
            Not After : Feb  3 18:55:14 2026 GMT
        Subject: CN=8DFEBD91E784A9210DE537BB2939B34CDD2084E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:1a:a7:33:22:9a:34:76:49:f4:1e:fd:7e:
                    62:d1:49:7f:e9:0b:98:f3:71:e7:e4:7f:ac:d8:9e:
                    ac:92:38:37:4d:c3:f3:19:18:ad:f9:46:8d:2d:74:
                    da:04:de:1b:20:a9:c7:4d:71:44:26:41:fe:20:4e:
                    cc:5b:ed:2a:fd:14:49:04:b4:9d:57:65:c6:b9:90:
                    39:3d:9e:1c:9c:28:93:e2:aa:e9:ef:70:68:ea:4e:
                    b5:aa:57:e6:2f:39:cf:7f:24:d9:af:d3:7a:96:87:
                    7f:22:7c:10:3e:3f:3a:08:c7:77:5f:5e:28:c1:f7:
                    e2:f0:fb:d6:3b:3a:eb:19:d4:4d:08:5e:57:d9:aa:
                    ed:77:85:f3:e1:05:1d:bc:fc:7e:7e:f9:47:50:70:
                    3c:fc:07:d7:c5:1f:31:68:a6:85:28:5b:d4:26:bf:
                    db:a5:6c:76:a8:b0:73:ce:24:98:82:7a:90:72:5b:
                    a5:1d:d8:ba:c0:84:23:52:34:e5:7a:38:3b:1c:3a:
                    9e:87:f4:ef:9f:71:32:b8:91:c6:20:0a:12:4b:28:
                    25:c4:b3:42:48:95:6a:05:b3:05:ca:c6:bb:77:33:
                    16:f5:ac:bf:0d:4a:4a:05:16:90:9a:e6:6c:38:cf:
                    db:27:ca:7f:fd:63:3e:8d:4f:92:4e:84:a0:78:d8:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FE:BD:91:E7:84:A9:21:0D:E5:37:BB:29:39:B3:4C:DD:20:84:E1
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3230302e3131392e3137362e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.119.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:07:a1:e9:b2:17:a4:21:48:b8:47:81:90:d9:01:97:cc:1d:
         5f:a5:bb:2d:24:a9:7a:04:2e:75:24:cd:8e:09:8e:f3:79:69:
         71:13:de:67:03:41:cf:b8:3a:2e:db:e0:44:34:c5:6c:44:9b:
         41:1f:f2:e8:d7:8e:03:10:66:d9:d9:de:6e:08:53:e4:a9:53:
         e6:ef:0a:c9:22:e6:8c:7c:42:50:87:69:27:90:b4:3c:6b:db:
         69:b6:fe:12:66:bd:76:a7:32:13:78:dc:e4:9a:16:42:20:2f:
         9d:5a:20:e0:7c:b2:ff:4c:69:5d:8c:86:63:51:5f:f9:f1:64:
         d8:30:73:4d:22:53:f2:33:9a:80:58:c6:4d:03:23:fc:da:ce:
         8f:2e:64:75:fb:f3:38:10:3a:47:4f:2d:e8:19:8d:1f:8d:fb:
         c5:89:cd:38:8a:b2:98:e8:3c:1c:42:38:17:2a:de:fe:69:87:
         5d:b3:e4:c3:1e:db:c7:ff:cd:a1:46:af:4a:08:da:ea:22:0c:
         b6:76:03:02:9e:8c:93:cd:02:6a:50:78:30:2e:1f:36:1d:0e:
         e2:bb:68:34:87:c7:94:cf:8a:fa:7f:bf:cc:08:35:dd:a8:9c:
         82:ce:c1:f2:df:a8:66:4b:66:fd:20:f2:7d:bd:fa:94:30:f3:
         28:aa:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:59 2025 by rpki-client