Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa
File:                     3230302e392e3137362e302f32342d3234203d3e203238303237.roa (raw, json)
Hash identifier:          Ub7omvzfdhIVx8VSgpRFReeL9NmzfZ6c7avHY9n6MWQ=
Subject key identifier:   A8:7E:8D:57:08:A6:F5:38:16:DA:85:E6:28:FF:E3:D7:D4:50:72:1D
Certificate issuer:       /CN=5094E25430BCD5E2E482E64388ADB10B84687666
Certificate serial:       554BB994A31506ABCDD67FAA13D15867D9E18312
Authority key identifier: 50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa
Signing time:             Tue 04 Feb 2025 18:27:14 +0000
ROA not before:           Tue 04 Feb 2025 18:22:14 +0000
ROA not after:            Tue 03 Feb 2026 18:27:14 +0000
asID:                     28027
IP address blocks:        200.9.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4b:b9:94:a3:15:06:ab:cd:d6:7f:aa:13:d1:58:67:d9:e1:83:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5094E25430BCD5E2E482E64388ADB10B84687666
        Validity
            Not Before: Feb  4 18:22:14 2025 GMT
            Not After : Feb  3 18:27:14 2026 GMT
        Subject: CN=A87E8D5708A6F53816DA85E628FFE3D7D450721D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:df:fa:5e:e8:92:39:13:35:e9:a2:91:91:5b:
                    97:e5:61:d0:e3:00:77:50:a5:48:76:e6:7f:ff:a4:
                    a8:da:f6:08:48:52:d1:d3:dc:9e:e1:77:8b:12:b7:
                    d3:45:f3:b3:37:ff:88:ee:91:67:d5:0d:19:5b:4a:
                    db:d5:3d:68:7d:e4:b7:2c:6f:0c:72:f6:d9:07:b1:
                    d4:da:c0:39:b1:dd:42:97:3c:63:dc:9e:26:f3:7d:
                    62:f5:8c:2c:b8:f4:6e:6c:e3:1f:3f:c5:3c:b0:99:
                    76:8c:1b:eb:f6:a8:19:7c:cc:f7:61:98:90:dd:7c:
                    05:5a:a4:30:5b:f5:3b:5c:94:89:58:9b:a2:de:d6:
                    47:c8:06:24:ed:41:dd:4e:c3:aa:e1:d2:d2:70:18:
                    3b:d5:de:bf:3b:e9:71:27:1a:b7:8d:df:97:d1:36:
                    89:ab:04:3e:fb:99:26:53:0c:28:de:cd:08:bd:74:
                    65:72:8e:eb:80:f2:12:c3:62:6a:ab:9e:94:00:e1:
                    7d:99:a5:0b:53:ba:a1:09:1b:6f:ff:9b:4b:b4:9b:
                    db:de:f7:58:3a:dc:93:15:73:9b:e2:45:34:b2:c5:
                    da:c5:50:af:dd:13:79:a0:8a:d4:9a:38:20:99:2f:
                    dc:3e:ec:2d:5b:e0:5c:ac:85:0c:b3:97:5e:6a:28:
                    83:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7E:8D:57:08:A6:F5:38:16:DA:85:E6:28:FF:E3:D7:D4:50:72:1D
            X509v3 Authority Key Identifier:
                keyid:50:94:E2:54:30:BC:D5:E2:E4:82:E6:43:88:AD:B1:0B:84:68:76:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/5094E25430BCD5E2E482E64388ADB10B84687666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5094E25430BCD5E2E482E64388ADB10B84687666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/49103830332AC6B62BE5F050A24A7698B457D89966AC49F9D2D0D53B614ACD3F/0/3230302e392e3137362e302f32342d3234203d3e203238303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:88:f9:67:d0:38:29:82:46:d6:62:24:1b:ed:f6:95:9f:
         89:52:fd:90:d0:aa:86:61:bb:c9:1e:a1:6c:2d:83:31:dd:97:
         70:26:06:83:1c:47:cd:86:d8:46:59:6c:4b:ef:22:96:e3:e4:
         7a:43:3c:ec:ba:dc:6b:cd:25:85:ca:44:61:fc:fc:61:51:81:
         c4:d4:e1:33:05:e3:4c:7a:5a:73:2e:be:8d:89:a6:05:56:e3:
         cf:af:91:8c:3e:eb:0c:f3:49:bc:80:35:2e:d2:b5:8c:7f:7e:
         79:5b:30:cd:ff:1e:fa:b2:80:f8:95:62:86:c5:f2:c1:d5:08:
         84:f2:e6:fa:ed:54:d1:22:90:33:02:a2:bb:9d:39:d9:07:82:
         b9:a0:5e:3f:37:12:c3:73:ae:1c:77:cb:c3:c9:b7:21:3b:21:
         1d:7c:85:25:f3:36:63:57:a2:2e:54:61:06:6d:97:f7:d1:00:
         ee:87:09:5d:c0:00:05:9d:df:98:19:52:d8:3a:21:45:64:8f:
         c7:a7:5e:07:16:76:66:69:1f:8e:e6:b4:c3:21:83:ba:26:7c:
         c7:54:5f:2f:59:f9:0f:77:8b:e8:b2:ca:27:00:12:03:cc:52:
         d1:f9:e3:25:43:eb:d2:49:c5:ae:5c:ed:05:f4:9a:cb:e7:8c:
         5b:5e:4e:f7
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVUu5lKMVBqvN1n+qE9FYZ9nhgxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5NEUyNTQzMEJDRDVFMkU0ODJFNjQzODhBREIxMEI4
NDY4NzY2NjAeFw0yNTAyMDQxODIyMTRaFw0yNjAyMDMxODI3MTRaMDMxMTAvBgNV
BAMTKEE4N0U4RDU3MDhBNkY1MzgxNkRBODVFNjI4RkZFM0Q3RDQ1MDcyMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw3/pe6JI5EzXpopGRW5flYdDj
AHdQpUh25n//pKja9ghIUtHT3J7hd4sSt9NF87M3/4jukWfVDRlbStvVPWh95Lcs
bwxy9tkHsdTawDmx3UKXPGPcnibzfWL1jCy49G5s4x8/xTywmXaMG+v2qBl8zPdh
mJDdfAVapDBb9TtclIlYm6Le1kfIBiTtQd1Ow6rh0tJwGDvV3r876XEnGreN35fR
NomrBD77mSZTDCjezQi9dGVyjuuA8hLDYmqrnpQA4X2ZpQtTuqEJG2//m0u0m9ve
91g63JMVc5viRTSyxdrFUK/dE3mgitSaOCCZL9w+7C1b4FyshQyzl15qKINzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUqH6NVwim9TgW2oXmKP/j19RQch0wHwYDVR0j
BBgwFoAUUJTiVDC81eLkguZDiK2xC4RodmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTEwMzgzMDMzMkFDNkI2MkJFNUYwNTBBMjRBNzY5OEI0
NTdEODk5NjZBQzQ5RjlEMkQwRDUzQjYxNEFDRDNGLzAvNTA5NEUyNTQzMEJDRDVF
MkU0ODJFNjQzODhBREIxMEI4NDY4NzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDk0RTI1NDMwQkNENUUyRTQ4
MkU2NDM4OEFEQjEwQjg0Njg3NjY2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkxMDM4MzAzMzJBQzZCNjJCRTVGMDUwQTI0QTc2OThCNDU3RDg5OTY2
QUM0OUY5RDJEMEQ1M0I2MTRBQ0QzRi8wLzMyMzAzMDJlMzkyZTMxMzczNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzgzMDMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICbAwDQYJ
KoZIhvcNAQELBQADggEBAF+diPln0DgpgkbWYiQb7faVn4lS/ZDQqoZhu8keoWwt
gzHdl3AmBoMcR82G2EZZbEvvIpbj5HpDPOy63GvNJYXKRGH8/GFRgcTU4TMF40x6
WnMuvo2JpgVW48+vkYw+6wzzSbyANS7StYx/fnlbMM3/HvqygPiVYobF8sHVCITy
5vrtVNEikDMCorudOdkHgrmgXj83EsNzrhx3y8PJtyE7IR18hSXzNmNXoi5UYQZt
l/fRAO6HCV3AAAWd35gZUtg6IUVkj8enXgcWdmZpH47mtMMhg7omfMdUXy9Z+Q93
i+iyyicAEgPMUtH54yVD69JJxa5c7QX0msvnjFteTvc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:32 2025 by rpki-client