Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203237393437.roa
File:                     3230302e31302e3134382e302f32322d3234203d3e203237393437.roa (raw, json)
Hash identifier:          CyRedciyHO8tHCtM4FpMl5Xkdqg3paMfQueJ4xBikoM=
Subject key identifier:   2A:37:E8:CD:61:45:8F:1B:82:50:5C:1C:50:A3:EB:22:0F:3A:4C:6A
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       4E4DC1D930E8365EA5887B641C722B5D00A23F07
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203237393437.roa
Signing time:             Tue 04 Mar 2025 20:11:20 +0000
ROA not before:           Tue 04 Mar 2025 20:06:20 +0000
ROA not after:            Tue 03 Mar 2026 20:11:20 +0000
asID:                     27947
IP address blocks:        200.10.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4d:c1:d9:30:e8:36:5e:a5:88:7b:64:1c:72:2b:5d:00:a2:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Mar  4 20:06:20 2025 GMT
            Not After : Mar  3 20:11:20 2026 GMT
        Subject: CN=2A37E8CD61458F1B82505C1C50A3EB220F3A4C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:45:c7:7f:e5:f4:e9:f3:98:51:3a:62:f3:
                    68:45:04:13:28:20:5a:e7:07:c3:ef:2e:b9:0b:92:
                    18:91:7d:b2:9b:d5:6c:ad:b2:52:5a:86:03:3f:c8:
                    02:28:c7:3c:41:a8:91:fa:6b:e5:c2:22:5e:1e:ac:
                    d5:2e:ec:af:d9:cc:38:14:2d:66:41:18:5d:d0:87:
                    b3:e3:b2:c9:d9:bf:d9:b0:43:96:99:9a:26:d9:85:
                    b6:62:0e:4c:75:6d:76:fd:60:ac:34:0d:08:11:ec:
                    91:60:49:6b:a5:74:e8:b5:0f:61:29:70:77:5b:14:
                    36:d7:eb:98:30:a5:ef:d9:11:43:8b:5c:8f:57:a2:
                    61:d9:46:7e:cc:18:73:fb:fe:7e:3a:4b:83:56:0b:
                    9a:46:61:8c:01:3e:03:56:eb:f9:17:60:95:c5:90:
                    48:01:5d:53:96:7d:cd:c0:c4:9a:ff:1e:81:04:f7:
                    e6:07:b9:a7:81:9b:59:47:df:80:60:5f:e5:c1:12:
                    c3:f3:8a:6e:dd:be:8f:b2:2e:f0:73:b1:62:1f:fd:
                    7f:d7:db:2b:c3:90:d3:ce:e8:d6:d9:2c:de:46:33:
                    3e:4a:a2:4d:ef:b6:60:18:bc:d7:dd:57:a2:6b:d7:
                    d4:16:45:07:ff:99:25:84:02:84:64:cb:65:7d:7f:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:37:E8:CD:61:45:8F:1B:82:50:5C:1C:50:A3:EB:22:0F:3A:4C:6A
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e31302e3134382e302f32322d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:9b:b7:51:46:c8:a6:07:df:e4:82:1f:1e:f1:9f:69:fe:5c:
         61:0d:65:50:f8:99:b4:ee:88:25:4b:19:4c:d3:80:54:f4:b6:
         e4:9c:23:ea:97:4b:d1:2a:d0:2e:3b:50:e0:be:6b:c8:27:a9:
         54:07:2d:09:95:2e:64:a1:12:b7:4b:9a:47:ca:ce:30:81:e4:
         0f:9a:9f:e8:93:7c:d5:4e:bb:43:0e:a3:2a:b9:50:09:09:b2:
         d3:29:db:1b:d4:de:d4:b0:22:0c:71:cb:49:55:d2:4c:85:2b:
         93:4d:58:70:71:6c:98:88:da:e3:22:6e:1e:ce:dc:9d:a7:9e:
         08:89:2c:f2:9a:e3:b5:ff:cc:c1:64:98:be:41:59:51:b2:1d:
         43:c4:4a:73:3f:83:53:ec:3d:b7:0d:c7:3b:a3:28:44:04:88:
         54:bb:76:1c:03:a3:4e:b2:f8:d4:b1:6b:1a:3e:7d:d5:a9:ab:
         6c:70:af:81:c4:2f:cd:98:17:d9:70:6d:1c:e2:2b:e5:dc:7a:
         30:27:3e:e6:a9:9f:2d:93:d5:db:12:71:97:83:be:0b:8d:2e:
         92:a5:5e:eb:e0:fe:9c:ec:17:20:b3:6a:ea:84:59:99:af:5e:
         40:cd:5b:d5:e1:df:7d:e1:16:82:c1:03:96:60:78:e7:34:25:
         3a:80:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:51 2025 by rpki-client