Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34342e302f32332d3234203d3e203236363137.roa
File:                     3230302e31322e34342e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          9WatJuYBguIYJS0yygg/BEeaEkvhCz4Ta8dNLgfHcvY=
Subject key identifier:   7E:0F:B3:79:2C:19:BC:93:00:11:BE:88:7F:9F:3D:CB:44:C0:F6:A1
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       4C8F8CCA1B67184B494AF30001B774EAE0E58C23
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34342e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:39 +0000
ROA not before:           Tue 04 Feb 2025 18:01:39 +0000
ROA not after:            Tue 03 Feb 2026 18:06:39 +0000
asID:                     26617
IP address blocks:        200.12.44.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8f:8c:ca:1b:67:18:4b:49:4a:f3:00:01:b7:74:ea:e0:e5:8c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:39 2025 GMT
            Not After : Feb  3 18:06:39 2026 GMT
        Subject: CN=7E0FB3792C19BC930011BE887F9F3DCB44C0F6A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:a6:0a:64:77:c1:fa:69:09:2e:0e:44:de:
                    30:58:ec:54:ce:6d:46:28:a5:4d:40:b5:c8:31:05:
                    14:cc:78:a7:a1:e2:bd:d3:be:ac:04:e9:c2:c6:23:
                    3e:50:a7:7c:6d:48:7a:b4:75:ef:bf:bd:49:7b:20:
                    e3:30:06:2d:6d:37:14:21:61:fe:e9:c5:56:84:38:
                    8e:84:1c:8c:6d:6a:d0:2a:c7:5a:e7:52:7c:73:f1:
                    9b:e9:9c:a3:78:cb:b5:43:c5:3e:27:03:9d:01:f4:
                    b3:75:da:7b:11:f9:ba:26:ca:72:48:d9:9b:cb:88:
                    d4:d1:05:9b:58:1d:62:4a:56:4a:c2:7f:71:18:fb:
                    a3:c1:ab:31:83:59:1a:6c:6d:0e:ca:d7:a3:54:f9:
                    8a:05:9c:b3:4a:a8:db:f7:9c:3d:a4:05:cd:88:5a:
                    81:5d:93:dd:fd:04:a5:d5:bf:17:29:ea:bc:f5:16:
                    ab:1d:cd:71:89:b7:3e:d6:8b:ff:6f:e5:ec:94:a2:
                    ce:b7:5c:74:53:da:7f:18:e7:80:72:e6:c7:39:6b:
                    8d:18:8a:16:a7:da:c2:dd:cd:00:ea:ee:70:4b:31:
                    19:1e:56:4d:70:52:55:0c:84:88:05:5f:45:ea:f7:
                    8a:88:ba:52:cc:6e:a4:de:b2:e2:93:66:38:1d:99:
                    8f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0F:B3:79:2C:19:BC:93:00:11:BE:88:7F:9F:3D:CB:44:C0:F6:A1
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3230302e31322e34342e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:af:60:1c:af:15:04:dc:30:f8:4e:e1:49:5f:33:12:97:04:
         98:e4:d0:8f:f5:72:90:ca:97:59:ba:c0:98:38:f0:05:90:32:
         6d:4b:c3:80:28:f4:2b:74:0c:a5:1d:d8:5d:4e:03:75:a9:1d:
         6d:16:41:fc:20:c0:13:c3:1d:0d:66:9b:fe:83:f7:f7:10:be:
         da:83:51:04:17:f2:9e:19:fa:a9:26:1e:d9:cc:18:ee:b8:cb:
         94:f0:7c:27:36:54:fd:7c:19:8e:a4:38:78:f2:a7:36:96:d1:
         a3:e6:5c:bf:22:0d:7d:56:25:95:b2:4e:5b:70:77:43:b3:81:
         db:63:74:be:91:bd:d3:87:29:b9:3d:4b:27:91:ad:43:73:ce:
         6b:96:4a:d8:71:1c:1c:06:d0:45:60:76:35:a9:0a:6b:fb:0b:
         b7:72:46:90:1e:d4:6c:d5:07:1d:55:e6:b7:de:6b:95:30:80:
         42:18:40:4c:c2:e2:b3:78:9d:f1:ce:63:a7:b6:94:89:55:c4:
         8c:e1:8b:9c:88:26:d4:de:9c:41:51:a1:aa:3d:27:c4:1a:83:
         68:a5:72:53:46:e3:dd:34:49:75:97:b1:34:86:ba:72:29:30:
         37:87:eb:68:30:34:52:b7:c2:4e:9d:f6:f1:89:e4:a2:e3:62:
         54:9c:36:b3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTI+MyhtnGEtJSvMAAbd06uDljCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRFNDFDMERBREIxMjQ2NUFGRjVDRjdBMzg5MzA1ODJF
NDQ5OTA4MzAeFw0yNTAyMDQxODAxMzlaFw0yNjAyMDMxODA2MzlaMDMxMTAvBgNV
BAMTKDdFMEZCMzc5MkMxOUJDOTMwMDExQkU4ODdGOUYzRENCNDRDMEY2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCco6YKZHfB+mkJLg5E3jBY7FTO
bUYopU1AtcgxBRTMeKeh4r3TvqwE6cLGIz5Qp3xtSHq0de+/vUl7IOMwBi1tNxQh
Yf7pxVaEOI6EHIxtatAqx1rnUnxz8ZvpnKN4y7VDxT4nA50B9LN12nsR+bomynJI
2ZvLiNTRBZtYHWJKVkrCf3EY+6PBqzGDWRpsbQ7K16NU+YoFnLNKqNv3nD2kBc2I
WoFdk939BKXVvxcp6rz1FqsdzXGJtz7Wi/9v5eyUos63XHRT2n8Y54By5sc5a40Y
ihan2sLdzQDq7nBLMRkeVk1wUlUMhIgFX0Xq94qIulLMbqTesuKTZjgdmY+bAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUfg+zeSwZvJMAEb6If589y0TA9qEwHwYDVR0j
BBgwFoAUVOQcDa2xJGWv9c96OJMFguRJkIMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTZFMkQ2OUE5NDJCMzNDN0M0ODFGMDhGRDBFN0FFQTVE
RkFFNDRGNDg1RDA3RUQwQTc0MDY0RERFQ0E2MzMzLzAvNTRFNDFDMERBREIxMjQ2
NUFGRjVDRjdBMzg5MzA1ODJFNDQ5OTA4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NEU0MUMwREFEQjEyNDY1QUZG
NUNGN0EzODkzMDU4MkU0NDk5MDgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU2RTJENjlBOTQyQjMzQzdDNDgxRjA4RkQwRTdBRUE1REZBRTQ0RjQ4
NUQwN0VEMEE3NDA2NERERUNBNjMzMy8wLzMyMzAzMDJlMzEzMjJlMzQzNDJlMzAy
ZjMyMzMyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHIDCwwDQYJ
KoZIhvcNAQELBQADggEBAJKvYByvFQTcMPhO4UlfMxKXBJjk0I/1cpDKl1m6wJg4
8AWQMm1Lw4Ao9Ct0DKUd2F1OA3WpHW0WQfwgwBPDHQ1mm/6D9/cQvtqDUQQX8p4Z
+qkmHtnMGO64y5TwfCc2VP18GY6kOHjypzaW0aPmXL8iDX1WJZWyTltwd0Ozgdtj
dL6RvdOHKbk9SyeRrUNzzmuWSthxHBwG0EVgdjWpCmv7C7dyRpAe1GzVBx1V5rfe
a5UwgEIYQEzC4rN4nfHOY6e2lIlVxIzhi5yIJtTenEFRoao9J8Qag2ilclNG4900
SXWXsTSGunIpMDeH62gwNFK3wk6d9vGJ5KLjYlScNrM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:21 2025 by rpki-client