Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa
File:                     3230302e33322e3232382e302f32322d3232203d3e203130323639.roa (raw, json)
Hash identifier:          lZ+mJ6Te9CTXRZxFIvFXZm1R+N2Ea1hkJhLGlYnmDT4=
Subject key identifier:   B2:A0:DC:6B:D3:7F:C3:83:91:E5:71:AD:5D:8D:53:DF:C3:E8:4B:70
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       0C5297FAC3D70071F1FB05B92D11E5F284C34516
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:22 +0000
ROA not before:           Tue 04 Feb 2025 18:07:22 +0000
ROA not after:            Tue 03 Feb 2026 18:12:22 +0000
asID:                     10269
IP address blocks:        200.32.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:52:97:fa:c3:d7:00:71:f1:fb:05:b9:2d:11:e5:f2:84:c3:45:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:22 2025 GMT
            Not After : Feb  3 18:12:22 2026 GMT
        Subject: CN=B2A0DC6BD37FC38391E571AD5D8D53DFC3E84B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:56:36:30:07:a2:93:40:a7:97:d5:30:8e:
                    60:5a:45:e6:ef:00:02:9f:2b:6a:95:34:7f:43:07:
                    88:04:ec:e1:21:4a:93:a5:88:09:97:1b:d1:df:5c:
                    17:b8:6c:71:dd:92:0e:ff:a3:69:2b:75:70:c6:b9:
                    b2:43:ce:2e:a3:4b:bd:37:9f:f4:7e:f6:1f:13:f6:
                    a1:ad:97:08:e3:6d:cf:72:02:8e:97:65:00:68:4a:
                    9c:07:7a:6f:52:81:3a:b0:ef:5a:ff:37:47:14:ea:
                    ba:34:68:b4:e8:96:a5:36:f6:4c:2b:b6:72:72:87:
                    c3:e5:47:f5:6a:c6:78:bf:81:90:d9:9e:ff:24:7c:
                    07:05:ab:dd:f1:f2:41:50:b1:6d:1b:58:6d:c7:e0:
                    e6:c9:a4:ea:8e:e3:51:54:c3:f2:95:0c:a5:ea:b9:
                    5a:ae:93:4e:1b:c4:e1:e2:24:ff:3d:ae:9e:13:22:
                    87:09:47:58:8d:31:51:b3:c6:60:02:d2:c5:69:b0:
                    d1:d2:03:e5:f6:f1:55:4c:d0:69:e8:23:e4:16:df:
                    63:c6:8c:1c:1d:3b:c3:b1:2a:69:55:96:b9:68:5b:
                    a7:91:56:80:1a:bb:ff:b9:d4:4e:24:f3:17:db:4d:
                    80:d7:60:fe:b7:10:88:a2:55:8b:da:d7:6d:52:a8:
                    0f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:DC:6B:D3:7F:C3:83:91:E5:71:AD:5D:8D:53:DF:C3:E8:4B:70
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3232382e302f32322d3232203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:46:06:f2:0f:f6:de:68:f7:89:5a:3e:93:c6:30:a1:d5:68:
         d8:46:e7:1c:df:91:4a:f8:b4:1a:fe:56:fc:d5:8b:ca:b3:a9:
         2e:48:e4:fc:5b:17:46:39:51:c8:91:8e:25:88:e6:5d:8c:0c:
         ba:68:9a:49:95:54:21:bb:08:78:12:52:0c:f4:cb:bb:ec:61:
         38:b6:50:bc:53:6d:cb:96:1c:3b:99:04:53:22:89:c2:a4:8f:
         22:c9:7c:17:42:67:4e:4d:23:61:70:9c:22:04:c9:2e:d7:fe:
         ee:f4:78:ea:0e:7c:3d:37:6b:01:54:76:d8:87:66:40:ee:53:
         7d:85:c3:aa:67:bb:c0:9c:ce:be:ca:76:95:55:b0:24:06:6b:
         f5:98:80:0d:4f:1a:fc:62:63:bc:77:5e:9e:5b:fa:e1:78:f8:
         0c:7c:bd:e4:93:99:bf:ea:b0:aa:1a:4a:6e:21:f5:c4:e6:3b:
         44:6e:d5:47:58:95:51:dc:fc:58:7d:72:50:9d:51:f3:67:ed:
         67:45:8e:22:98:bc:27:5b:91:23:c4:d9:b3:12:d3:5f:42:72:
         9a:52:02:e6:ba:64:20:da:42:3d:a6:ca:4f:6e:fb:db:b7:5a:
         4c:a8:64:20:bc:3b:fd:06:fd:cd:ac:c6:2f:ab:7f:94:79:ca:
         3f:e7:c9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:14 2025 by rpki-client