Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31392d3139203d3e203130323639.roa
File:                     3230302e33322e3139322e302f31392d3139203d3e203130323639.roa (raw, json)
Hash identifier:          Sh0tyMzy1kvVIeRhExsvGFd4SRl6eOC5Nr22E6d9xZU=
Subject key identifier:   63:3E:73:4C:33:4B:8A:20:C3:18:04:22:C2:6C:2D:5C:74:20:4D:48
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       0CB0497BEAC559C586BFBA231E8F9E38607711CB
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31392d3139203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:20 +0000
ROA not before:           Tue 04 Feb 2025 18:07:20 +0000
ROA not after:            Tue 03 Feb 2026 18:12:20 +0000
asID:                     10269
IP address blocks:        200.32.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b0:49:7b:ea:c5:59:c5:86:bf:ba:23:1e:8f:9e:38:60:77:11:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:20 2025 GMT
            Not After : Feb  3 18:12:20 2026 GMT
        Subject: CN=633E734C334B8A20C3180422C26C2D5C74204D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:3a:86:58:40:51:34:00:cf:84:6b:80:ce:
                    ed:44:2d:a6:95:8a:f9:58:0f:9a:ec:e7:64:13:fa:
                    f0:03:87:74:0c:34:c7:da:c6:f1:82:b8:67:29:61:
                    b0:10:dc:d3:9f:3f:fb:2a:2f:c5:46:19:d7:c9:2e:
                    bb:a3:4e:d9:66:5d:7b:8c:ee:c4:bf:b2:2e:d7:a2:
                    5f:74:ce:36:36:77:1d:98:ea:ca:8d:06:92:12:7c:
                    22:7c:df:e6:bb:fe:16:03:65:bf:b2:84:e3:00:b4:
                    71:71:93:57:51:01:67:2c:a5:95:50:2c:35:06:63:
                    78:fe:2c:72:7c:16:3a:d3:ad:f5:5e:90:0e:12:db:
                    2a:87:4c:05:2d:48:98:f8:99:2c:55:8c:84:6e:07:
                    74:27:f4:41:86:a1:1c:c4:b5:82:d3:82:69:e2:05:
                    1c:55:71:06:f8:8a:d1:4a:29:ac:d5:b9:e7:84:81:
                    68:1c:02:f0:60:cc:ba:82:23:0f:75:14:0c:6f:08:
                    08:dd:ba:0f:b8:bc:cf:33:91:35:c5:d3:50:7b:03:
                    09:cd:54:f8:d4:5c:4e:cc:69:ad:77:b8:bd:d2:0e:
                    a3:fa:ea:c8:ed:ba:f2:83:47:14:6e:88:e0:d9:86:
                    ec:3c:6d:3c:d5:e7:35:3e:75:f9:7e:38:70:ed:92:
                    dd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:73:4C:33:4B:8A:20:C3:18:04:22:C2:6C:2D:5C:74:20:4D:48
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139322e302f31392d3139203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:87:b5:cd:ae:39:18:fc:00:5f:7d:aa:f4:c5:0c:4f:dc:
         1d:e1:3c:f1:78:be:46:3a:16:e9:e2:9e:66:fb:bb:70:69:ef:
         75:c3:af:2d:73:a9:da:f1:bf:9e:fc:08:20:23:cd:66:5c:41:
         16:79:b3:29:5e:a1:53:d5:7e:29:80:d0:af:55:8a:07:22:c2:
         79:ae:4c:b8:f1:98:50:c8:13:a1:d7:9f:2c:e9:2d:8e:ca:c4:
         4d:81:e0:31:e3:16:ee:bb:68:30:7e:ec:46:c2:a6:25:05:eb:
         7b:44:e5:b9:8d:b6:8e:ae:ee:dd:a8:b8:27:7a:af:36:41:6a:
         6b:f0:77:5b:f2:d1:78:50:75:e9:aa:b8:2a:2d:b5:34:14:5c:
         20:ae:20:63:a8:30:79:11:e8:ff:eb:b9:9a:5e:0f:9c:06:0c:
         45:96:23:df:1d:ec:8a:ca:a4:57:28:53:78:62:f2:7c:80:37:
         3f:50:c5:8b:8e:37:29:44:31:10:c2:20:31:ca:e0:7a:72:19:
         17:26:bc:28:21:11:01:d7:a2:d8:66:1e:42:86:07:c8:65:c4:
         ff:b2:19:b5:a4:d9:7b:19:1c:1c:96:e2:2c:d5:7e:fd:85:e8:
         d6:e8:33:c8:ef:88:bf:9e:18:1a:b3:72:14:e5:47:0b:a3:16:
         3f:26:50:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:40 2025 by rpki-client