Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa
File:                     3230302e33322e3235322e302f32342d3234203d3e203130323639.roa (raw, json)
Hash identifier:          0HPoxFWX+nmL1KRky85oOBoNI1O+N65ZoRGBZ2WsIUw=
Subject key identifier:   6D:FE:4E:BE:8F:87:34:9D:85:66:AC:8C:32:A9:C9:85:88:FF:57:56
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       2E99E8418F5770E7F8BBE54D4F32D95A730612E8
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:24 +0000
ROA not before:           Tue 04 Feb 2025 18:07:24 +0000
ROA not after:            Tue 03 Feb 2026 18:12:24 +0000
asID:                     10269
IP address blocks:        200.32.252.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:e8:41:8f:57:70:e7:f8:bb:e5:4d:4f:32:d9:5a:73:06:12:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:24 2025 GMT
            Not After : Feb  3 18:12:24 2026 GMT
        Subject: CN=6DFE4EBE8F87349D8566AC8C32A9C98588FF5756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:3a:08:a0:ea:af:59:ca:36:2a:b0:6f:77:
                    23:bd:96:be:11:00:6c:d4:73:62:51:84:84:f8:af:
                    1c:22:d7:12:5b:73:7b:35:5d:bc:ba:34:0f:7a:bb:
                    f0:01:ef:b3:f6:7f:1b:02:66:f8:95:5d:d9:d2:37:
                    75:4c:76:c2:37:3f:12:d3:80:3f:87:c4:b6:13:81:
                    ad:e3:2d:41:2d:a0:63:3b:e5:79:d3:d6:55:e9:d6:
                    b1:cd:d9:bb:c4:d2:0a:c4:02:da:89:1b:9f:e4:8b:
                    73:a4:a4:a0:94:17:bf:1b:77:3f:c1:8b:b3:76:f2:
                    ba:3f:a0:ad:60:bc:b0:3d:0a:de:d6:a5:8d:b9:39:
                    9b:b3:bf:d3:ee:60:3b:25:57:b0:03:34:b7:b6:ef:
                    9e:a0:8b:1d:23:04:0a:86:10:ab:65:cc:1a:6d:11:
                    52:53:1d:00:e3:f3:18:07:6e:27:d6:78:92:73:dc:
                    a2:69:a3:39:a2:fc:b0:5c:77:3c:56:11:8a:ef:39:
                    c9:21:bf:e0:5e:3b:0e:04:ad:2b:af:f9:c2:de:bb:
                    9d:cc:a7:9e:65:02:d4:d4:12:6f:07:f4:6e:d9:0f:
                    95:27:58:b7:3d:60:23:1c:6d:0b:9d:ff:50:c9:12:
                    06:a1:90:18:ca:d3:4c:67:c9:03:41:6d:04:4e:ae:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FE:4E:BE:8F:87:34:9D:85:66:AC:8C:32:A9:C9:85:88:FF:57:56
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3230302e33322e3235322e302f32342d3234203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.32.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:2a:01:54:9a:09:03:71:39:44:1d:39:dd:ad:9a:93:a5:
         ca:1e:d4:68:3c:97:3b:1d:8a:3c:08:ff:69:0d:5a:29:ce:0a:
         b1:f6:8f:bf:ff:18:f2:e5:6d:09:75:6a:b5:4c:d9:27:cf:77:
         73:b7:f0:60:39:55:08:d3:c0:2c:86:62:97:22:85:9b:63:73:
         ca:b8:82:9d:fb:ad:31:1d:a7:b9:b9:12:a4:0b:b2:73:b6:8d:
         6c:38:90:ca:be:0b:76:1c:8e:94:b4:06:6b:d0:15:3c:d1:0d:
         d0:37:c1:ec:f8:7f:80:77:de:60:a2:99:2f:37:cb:14:4c:a8:
         47:8f:54:5e:5c:6c:fd:da:02:34:e8:b9:34:3a:f9:0f:63:bd:
         d4:cf:10:8b:14:a7:d2:f3:f3:31:bb:fb:6e:03:99:c2:e2:bb:
         49:c2:80:3c:a3:0f:5e:ea:09:f1:81:4b:89:10:91:fa:4b:78:
         8b:ac:bd:f0:e2:99:f8:91:be:84:95:75:f2:0c:68:5d:f6:0a:
         bc:8a:c6:c1:14:1d:f4:aa:11:fe:ca:76:56:3d:d2:ae:98:a1:
         20:6e:04:bf:ea:7c:1f:00:88:2c:25:fa:c0:0c:79:61:f2:a6:
         82:89:20:bc:3b:5b:8c:d3:88:30:43:1e:8e:f8:3b:fc:b5:24:
         67:57:88:28
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIULpnoQY9XcOf4u+VNTzLZWnMGEugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTBFOUE2MkI3MTg4OTg2N0JEOTM2QTA1RjA1ODc0QzBG
NDhFODQ5MjAeFw0yNTAyMDQxODA3MjRaFw0yNjAyMDMxODEyMjRaMDMxMTAvBgNV
BAMTKDZERkU0RUJFOEY4NzM0OUQ4NTY2QUM4QzMyQTlDOTg1ODhGRjU3NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRajoIoOqvWco2KrBvdyO9lr4R
AGzUc2JRhIT4rxwi1xJbc3s1Xby6NA96u/AB77P2fxsCZviVXdnSN3VMdsI3PxLT
gD+HxLYTga3jLUEtoGM75XnT1lXp1rHN2bvE0grEAtqJG5/ki3OkpKCUF78bdz/B
i7N28ro/oK1gvLA9Ct7WpY25OZuzv9PuYDslV7ADNLe2756gix0jBAqGEKtlzBpt
EVJTHQDj8xgHbifWeJJz3KJpozmi/LBcdzxWEYrvOckhv+BeOw4ErSuv+cLeu53M
p55lAtTUEm8H9G7ZD5UnWLc9YCMcbQud/1DJEgahkBjK00xnyQNBbQROrpdVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbf5Ovo+HNJ2FZqyMMqnJhYj/V1YwHwYDVR0j
BBgwFoAUUOmmK3GImGe9k2oF8Fh0wPSOhJIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMDFERTVFQTAxNDU2RjM2NTIwQUFFRTQzNjM4MDVFMDY5
QjcxMkVDRkM3QzE1N0EzOTlCNTk3RkYxQTgyNEUxLzAvNTBFOUE2MkI3MTg4OTg2
N0JEOTM2QTA1RjA1ODc0QzBGNDhFODQ5Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MEU5QTYyQjcxODg5ODY3QkQ5
MzZBMDVGMDU4NzRDMEY0OEU4NDkyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzAxREU1RUEwMTQ1NkYzNjUyMEFBRUU0MzYzODA1RTA2OUI3MTJFQ0ZD
N0MxNTdBMzk5QjU5N0ZGMUE4MjRFMS8wLzMyMzAzMDJlMzMzMjJlMzIzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMyMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgg/DAN
BgkqhkiG9w0BAQsFAAOCAQEAbg4qAVSaCQNxOUQdOd2tmpOlyh7UaDyXOx2KPAj/
aQ1aKc4KsfaPv/8Y8uVtCXVqtUzZJ893c7fwYDlVCNPALIZilyKFm2NzyriCnfut
MR2nubkSpAuyc7aNbDiQyr4LdhyOlLQGa9AVPNEN0DfB7Ph/gHfeYKKZLzfLFEyo
R49UXlxs/doCNOi5NDr5D2O91M8QixSn0vPzMbv7bgOZwuK7ScKAPKMPXuoJ8YFL
iRCR+kt4i6y98OKZ+JG+hJV18gxoXfYKvIrGwRQd9KoR/sp2Vj3SrpihIG4Ev+p8
HwCILCX6wAx5YfKmgokgvDtbjNOIMEMejvg7/LUkZ1eIKA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:05:06 2025 by rpki-client