Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e35322e302f32342d3234203d3e203237373235.roa
File:                     3230302e31342e35322e302f32342d3234203d3e203237373235.roa (raw, json)
Hash identifier:          mApVGpJZSekBygDJ8f87/ekBE4zR6m8cMGoKGZp/owA=
Subject key identifier:   D9:F1:68:2E:24:71:21:B6:14:AC:77:59:F6:48:3D:0D:19:FC:1A:70
Certificate issuer:       /CN=0853D584282A848F37AB7DF143D8977A037C0B75
Certificate serial:       2404BA32B7D3877D89D2C57158FA4400EFAA5CFC
Authority key identifier: 08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e35322e302f32342d3234203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:03:40 +0000
ROA not before:           Tue 04 Feb 2025 17:58:40 +0000
ROA not after:            Tue 03 Feb 2026 18:03:40 +0000
asID:                     27725
IP address blocks:        200.14.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:04:ba:32:b7:d3:87:7d:89:d2:c5:71:58:fa:44:00:ef:aa:5c:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0853D584282A848F37AB7DF143D8977A037C0B75
        Validity
            Not Before: Feb  4 17:58:40 2025 GMT
            Not After : Feb  3 18:03:40 2026 GMT
        Subject: CN=D9F1682E247121B614AC7759F6483D0D19FC1A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:08:12:90:6e:ac:85:a0:b8:d8:b1:f5:20:
                    05:8e:5f:01:a3:f6:6b:5e:4e:70:96:93:4e:ad:f9:
                    df:52:da:55:3d:41:7a:bc:39:fc:2c:4f:a7:0a:95:
                    cf:39:89:c6:46:02:c4:dc:b0:eb:c3:5c:34:cf:c1:
                    d2:1d:3a:5a:d1:1f:4f:86:7b:f4:12:71:bb:66:21:
                    73:66:d2:09:40:fa:c2:e3:71:7a:6a:df:82:be:16:
                    32:c5:11:4c:f2:94:57:43:26:b1:d1:70:c6:f8:21:
                    b0:6a:66:fd:4b:a6:98:2c:c0:83:6b:73:11:10:ea:
                    1b:aa:9a:8f:ce:82:b6:c4:8b:da:6e:d2:e6:3f:93:
                    a0:e3:63:82:72:8e:1b:7f:f2:bb:9f:e2:05:9f:1e:
                    fd:d8:29:ab:0d:ac:cd:c1:43:dc:50:c0:2f:9a:ae:
                    c1:b9:09:ab:32:58:23:7a:06:7c:8c:db:54:58:a8:
                    4c:b0:8c:7e:24:03:bd:c4:1d:7b:3d:53:8e:98:1e:
                    24:ce:b0:e5:79:78:68:7d:11:ea:69:04:ad:09:4a:
                    54:07:31:2f:7e:e9:74:cb:99:62:f2:a2:e3:8d:08:
                    d3:11:e0:85:79:b4:f6:2b:15:c2:c6:87:f4:ab:5b:
                    51:de:d1:18:8f:3d:b7:75:42:01:8c:97:50:45:14:
                    c7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F1:68:2E:24:71:21:B6:14:AC:77:59:F6:48:3D:0D:19:FC:1A:70
            X509v3 Authority Key Identifier:
                keyid:08:53:D5:84:28:2A:84:8F:37:AB:7D:F1:43:D8:97:7A:03:7C:0B:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/0853D584282A848F37AB7DF143D8977A037C0B75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0853D584282A848F37AB7DF143D8977A037C0B75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3177105F79EA035DDDB82F17F4CD322FC96430CB37B1E0909795B4338874F634/0/3230302e31342e35322e302f32342d3234203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:2e:c0:ac:60:44:fe:01:0a:a7:73:a8:b2:26:a5:43:41:
         a1:77:10:b1:9e:cf:61:bb:01:25:23:ff:da:f3:b5:8f:96:7f:
         e1:4b:de:b2:3b:d6:a3:ff:f9:0e:43:64:18:43:27:94:b4:57:
         61:0f:d7:bd:c1:a1:c6:68:33:4a:c5:52:6c:5f:ff:64:3a:e6:
         e6:6b:19:1f:0c:87:d1:8c:70:d7:62:74:d9:9f:cf:bb:ad:f6:
         8c:56:fe:ee:ff:fc:13:9c:b0:e0:4d:35:78:69:ce:d5:55:dd:
         47:ca:22:74:54:4b:cf:ce:38:d5:0b:54:97:62:02:8a:94:ef:
         6e:20:df:27:b6:11:66:d9:29:6a:34:d0:50:5c:16:0f:de:38:
         92:f1:ad:32:36:13:bb:63:d8:4f:45:6b:85:82:1f:47:ef:4f:
         83:f8:3e:0a:27:f5:65:90:ab:42:d1:01:7a:1c:81:59:99:e6:
         de:75:ff:bc:f9:05:7c:ef:bd:34:b7:21:f7:aa:a0:f6:29:26:
         6a:fb:37:71:87:c9:2d:44:68:b4:73:59:5e:43:36:0a:ab:ae:
         d1:05:a5:68:da:e0:03:33:b9:c7:f5:b1:a1:d5:6d:a9:16:f1:
         f3:1d:b7:2e:e1:54:d4:55:a7:87:8a:cb:a4:9d:63:eb:7b:7d:
         ab:ca:c5:8e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJAS6MrfTh32J0sVxWPpEAO+qXPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg1M0Q1ODQyODJBODQ4RjM3QUI3REYxNDNEODk3N0Ew
MzdDMEI3NTAeFw0yNTAyMDQxNzU4NDBaFw0yNjAyMDMxODAzNDBaMDMxMTAvBgNV
BAMTKEQ5RjE2ODJFMjQ3MTIxQjYxNEFDNzc1OUY2NDgzRDBEMTlGQzFBNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDETQgSkG6shaC42LH1IAWOXwGj
9mteTnCWk06t+d9S2lU9QXq8OfwsT6cKlc85icZGAsTcsOvDXDTPwdIdOlrRH0+G
e/QScbtmIXNm0glA+sLjcXpq34K+FjLFEUzylFdDJrHRcMb4IbBqZv1LppgswINr
cxEQ6huqmo/OgrbEi9pu0uY/k6DjY4Jyjht/8ruf4gWfHv3YKasNrM3BQ9xQwC+a
rsG5CasyWCN6BnyM21RYqEywjH4kA73EHXs9U46YHiTOsOV5eGh9EeppBK0JSlQH
MS9+6XTLmWLyouONCNMR4IV5tPYrFcLGh/SrW1He0RiPPbd1QgGMl1BFFMeFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU2fFoLiRxIbYUrHdZ9kg9DRn8GnAwHwYDVR0j
BBgwFoAUCFPVhCgqhI83q33xQ9iXegN8C3UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMTc3MTA1Rjc5RUEwMzVERERCODJGMTdGNENEMzIyRkM5
NjQzMENCMzdCMUUwOTA5Nzk1QjQzMzg4NzRGNjM0LzAvMDg1M0Q1ODQyODJBODQ4
RjM3QUI3REYxNDNEODk3N0EwMzdDMEI3NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wODUzRDU4NDI4MkE4NDhGMzdB
QjdERjE0M0Q4OTc3QTAzN0MwQjc1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzE3NzEwNUY3OUVBMDM1REREQjgyRjE3RjRDRDMyMkZDOTY0MzBDQjM3
QjFFMDkwOTc5NUI0MzM4ODc0RjYzNC8wLzMyMzAzMDJlMzEzNDJlMzUzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczNzMyMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIDjQwDQYJ
KoZIhvcNAQELBQADggEBABSuLsCsYET+AQqnc6iyJqVDQaF3ELGez2G7ASUj/9rz
tY+Wf+FL3rI71qP/+Q5DZBhDJ5S0V2EP173BocZoM0rFUmxf/2Q65uZrGR8Mh9GM
cNdidNmfz7ut9oxW/u7//BOcsOBNNXhpztVV3UfKInRUS8/OONULVJdiAoqU724g
3ye2EWbZKWo00FBcFg/eOJLxrTI2E7tj2E9Fa4WCH0fvT4P4Pgon9WWQq0LRAXoc
gVmZ5t51/7z5BXzvvTS3IfeqoPYpJmr7N3GHyS1EaLRzWV5DNgqrrtEFpWja4AMz
ucf1saHVbakW8fMdty7hVNRVp4eKy6SdY+t7favKxY4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:30 2025 by rpki-client