Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139382e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3139382e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          84NddZp/5M4hnpTM/KiAWnaWx/AQpNkz37e7DZLfugk=
Subject key identifier:   7F:50:39:1E:98:E2:52:8F:FA:76:01:C6:BF:F7:1D:70:65:7E:7F:B7
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       412BC3C406333FA3700A34D80B043C1C9E548BD1
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139382e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:16 +0000
ROA not before:           Tue 04 Feb 2025 18:07:16 +0000
ROA not after:            Tue 03 Feb 2026 18:12:16 +0000
asID:                     10269
IP address blocks:        200.32.198.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:c3:c4:06:33:3f:a3:70:0a:34:d8:0b:04:3c:1c:9e:54:8b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:16 2025 GMT
            Not After : Feb  3 18:12:16 2026 GMT
        Subject: CN=7F50391E98E2528FFA7601C6BFF71D70657E7FB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:65:e1:39:94:1e:26:9b:25:fd:15:d4:0e:31:
                    55:fb:dc:2c:43:c2:4d:cf:c7:90:99:76:f5:97:da:
                    5e:03:5d:ee:6b:0e:42:4e:97:72:fe:37:36:51:2d:
                    44:67:a3:c0:3c:63:af:18:ed:59:86:c8:9e:17:d2:
                    89:56:aa:17:21:3c:70:a8:12:4a:e9:2a:ab:4d:b5:
                    58:96:07:09:f9:1f:bd:66:e6:bd:c5:49:8a:5e:01:
                    57:87:67:43:65:0c:47:9a:1b:17:97:25:d7:40:21:
                    4c:41:de:dd:11:05:6f:d3:ea:fb:35:2b:c1:56:42:
                    b1:b8:79:0c:e5:34:7f:a7:ba:50:17:a6:4e:69:a3:
                    7a:1c:9e:21:3d:e7:90:a5:37:38:27:d6:06:e7:0f:
                    d5:2d:f6:85:df:6b:56:0d:fe:5b:81:81:17:ef:0e:
                    55:2b:7c:03:3c:b5:c6:29:01:40:6f:a7:ac:d6:0e:
                    b1:cc:f7:6c:3e:cd:69:67:10:0d:41:11:c4:c5:fd:
                    40:b7:1a:bf:1b:d8:cd:fe:51:3c:90:30:91:75:24:
                    89:35:da:d8:08:11:37:01:a2:2e:b0:bc:1e:cc:dd:
                    56:0e:92:83:05:90:cf:18:bd:08:12:d2:6d:15:e0:
                    da:53:68:ee:fd:01:97:e0:1f:76:34:82:a8:b7:3e:
                    85:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:50:39:1E:98:E2:52:8F:FA:76:01:C6:BF:F7:1D:70:65:7E:7F:B7
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3139382e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:bf:ce:d1:db:88:72:c9:83:69:e2:f1:d7:4e:e2:80:c6:9e:
         2e:f5:59:65:ab:23:6b:eb:78:43:0f:8d:f7:38:f5:b8:56:da:
         1d:3b:0a:ca:73:bc:2c:ee:bd:93:f0:dc:fd:17:7a:5a:53:01:
         68:8c:e7:e7:d9:9e:1a:2f:30:de:04:ea:80:b2:06:0d:d1:5a:
         14:04:54:96:22:95:97:2b:49:3c:f6:39:23:53:b0:32:e3:87:
         90:1b:86:3b:7f:50:ec:b7:67:fe:48:65:96:7f:9c:58:ae:19:
         5e:9f:31:f9:0c:83:49:73:0d:bc:80:56:3f:3c:f6:80:10:09:
         11:0c:d6:1f:4f:2c:b8:ca:48:25:d9:57:20:87:d3:b6:c3:b3:
         68:a6:3f:05:a8:22:44:d5:dd:7d:70:f8:0e:67:41:c1:c5:6f:
         e5:3b:5b:c6:be:35:a2:cb:a9:88:1c:2e:b3:af:39:32:13:e3:
         fd:b7:b6:99:25:4f:32:64:ad:d3:bc:f6:8d:ae:e2:70:fa:4a:
         2d:bd:4d:da:d6:62:5b:89:c7:35:ef:df:23:57:35:01:70:d2:
         18:03:44:8a:3e:02:55:ed:ee:10:e6:0e:68:d7:f3:24:46:94:
         fe:12:6e:c7:4f:d6:6e:cc:d3:19:b4:5a:4f:28:b3:ba:95:94:
         5b:89:4a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:04 2025 by rpki-client