Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139332e302f32342d3234203d3e203135333131.roa
File:                     3230302e35342e3139332e302f32342d3234203d3e203135333131.roa (raw, json)
Hash identifier:          YRzV2LE0U8GMmxy0DtRbEXOb8tHx0ZukSaWvkPG4ggQ=
Subject key identifier:   CF:82:EB:0F:AD:FB:18:86:3B:9C:3D:C7:95:D9:D3:10:A3:47:DC:8B
Certificate issuer:       /CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
Certificate serial:       6226042F30913EB6E97A4C71867DBC3CA09AB487
Authority key identifier: 5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139332e302f32342d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 18:32:02 +0000
ROA not before:           Tue 04 Feb 2025 18:27:02 +0000
ROA not after:            Tue 03 Feb 2026 18:32:02 +0000
asID:                     15311
IP address blocks:        200.54.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:26:04:2f:30:91:3e:b6:e9:7a:4c:71:86:7d:bc:3c:a0:9a:b4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F082C57CDBD68D82A84D9967C49585547E6E80F
        Validity
            Not Before: Feb  4 18:27:02 2025 GMT
            Not After : Feb  3 18:32:02 2026 GMT
        Subject: CN=CF82EB0FADFB18863B9C3DC795D9D310A347DC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:34:20:95:f3:fe:1b:f3:c8:68:32:22:bf:a1:
                    b0:bd:f4:8e:a0:bd:a8:b5:66:1c:9f:af:96:2a:2f:
                    10:d3:e1:06:7d:65:e5:fd:1e:a2:c0:c0:b7:84:0d:
                    80:7a:34:29:3b:0e:4a:79:88:29:b9:4d:c9:6e:34:
                    e1:cc:2f:0f:b5:66:86:42:41:e5:4d:0b:7d:e8:42:
                    8e:64:40:3f:48:23:7d:a4:5f:49:c2:5b:0d:4a:6b:
                    9e:b8:3c:d7:98:f3:db:f4:51:bf:23:8d:69:84:2c:
                    ac:88:40:3e:4d:03:f7:c8:ee:5c:6e:79:8c:5f:99:
                    d5:1a:97:dc:f2:e0:ec:86:41:48:9d:3e:0b:72:7f:
                    eb:63:dd:e9:09:83:c9:4b:f5:ad:da:d9:c9:12:99:
                    1b:94:56:e6:f3:5b:50:12:30:3e:4e:6e:74:a7:14:
                    da:ba:27:34:74:ec:32:4a:f9:c7:b1:9a:8a:79:d6:
                    af:ad:cf:0a:53:32:f0:0b:68:96:67:23:02:e1:e2:
                    a1:31:c6:1c:39:ae:2a:2f:6b:39:d9:0e:d5:ec:40:
                    8b:02:49:f0:ce:e7:e6:a4:ae:15:5a:a4:a0:4d:8b:
                    96:85:17:c5:d9:06:cd:6a:1f:a5:a2:e1:83:22:f7:
                    e5:15:b0:31:f8:90:f7:7f:78:5c:c1:07:58:b9:83:
                    d7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:EB:0F:AD:FB:18:86:3B:9C:3D:C7:95:D9:D3:10:A3:47:DC:8B
            X509v3 Authority Key Identifier:
                keyid:5F:08:2C:57:CD:BD:68:D8:2A:84:D9:96:7C:49:58:55:47:E6:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5F082C57CDBD68D82A84D9967C49585547E6E80F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B218F3CBA21C388131E0CAF6303A0B108E72AE53C573F3F35142DB16100168B/0/3230302e35342e3139332e302f32342d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.54.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:c5:3f:3b:17:64:12:d9:16:5b:c4:7f:ac:f7:ba:34:61:c6:
         ff:97:4e:0c:0b:75:fc:ed:93:d4:96:37:be:f4:b9:5e:37:ab:
         b3:48:74:9b:9d:8b:b4:fe:29:7c:36:b6:1b:6b:17:85:09:1a:
         1a:03:3b:cf:b3:2a:4f:0d:5e:d2:6f:f7:eb:75:60:e5:4a:47:
         c8:fe:2a:3f:79:16:2e:31:22:3f:37:ea:e5:ec:2e:8e:fb:52:
         cd:02:e9:84:a3:94:e9:12:65:ed:05:f6:21:dd:fc:67:e7:58:
         4b:ee:ad:4c:78:0d:32:89:1e:5a:87:e4:4d:bc:d7:de:54:a9:
         72:b4:19:02:0c:0c:cc:ff:1b:9f:e2:ab:81:ad:e2:78:78:78:
         bb:bb:cd:c4:1d:bf:c9:ac:d3:dc:03:f1:9f:48:ee:2b:67:5f:
         87:8d:13:7c:2f:d6:b9:55:6b:b3:f1:89:be:71:df:24:cf:41:
         d4:f8:f8:66:3e:90:96:52:5b:71:57:fb:d2:81:61:00:f0:a2:
         02:c1:91:e4:b6:f6:c2:62:90:51:ca:10:79:0e:34:e3:d2:30:
         51:a4:00:19:fd:79:a8:66:c4:ae:06:b9:9a:0c:03:a6:5d:60:
         80:14:98:e6:4e:bb:c4:01:e5:e2:65:77:84:39:0f:18:a3:41:
         a6:60:6e:52
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUYiYELzCRPrbpekxxhn28PKCatIcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUYwODJDNTdDREJENjhEODJBODREOTk2N0M0OTU4NTU0
N0U2RTgwRjAeFw0yNTAyMDQxODI3MDJaFw0yNjAyMDMxODMyMDJaMDMxMTAvBgNV
BAMTKENGODJFQjBGQURGQjE4ODYzQjlDM0RDNzk1RDlEMzEwQTM0N0RDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNCCV8/4b88hoMiK/obC99I6g
vai1Zhyfr5YqLxDT4QZ9ZeX9HqLAwLeEDYB6NCk7Dkp5iCm5TcluNOHMLw+1ZoZC
QeVNC33oQo5kQD9II32kX0nCWw1Ka564PNeY89v0Ub8jjWmELKyIQD5NA/fI7lxu
eYxfmdUal9zy4OyGQUidPgtyf+tj3ekJg8lL9a3a2ckSmRuUVubzW1ASMD5ObnSn
FNq6JzR07DJK+cexmop51q+tzwpTMvALaJZnIwLh4qExxhw5riovaznZDtXsQIsC
SfDO5+akrhVapKBNi5aFF8XZBs1qH6Wi4YMi9+UVsDH4kPd/eFzBB1i5g9e1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUz4LrD637GIY7nD3HldnTEKNH3IswHwYDVR0j
BBgwFoAUXwgsV829aNgqhNmWfElYVUfm6A8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80QjIxOEYzQ0JBMjFDMzg4MTMxRTBDQUY2MzAzQTBCMTA4
RTcyQUU1M0M1NzNGM0YzNTE0MkRCMTYxMDAxNjhCLzAvNUYwODJDNTdDREJENjhE
ODJBODREOTk2N0M0OTU4NTU0N0U2RTgwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RjA4MkM1N0NEQkQ2OEQ4MkE4
NEQ5OTY3QzQ5NTg1NTQ3RTZFODBGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEIyMThGM0NCQTIxQzM4ODEzMUUwQ0FGNjMwM0EwQjEwOEU3MkFFNTND
NTczRjNGMzUxNDJEQjE2MTAwMTY4Qi8wLzMyMzAzMDJlMzUzNDJlMzEzOTMzMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNTMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg2wTAN
BgkqhkiG9w0BAQsFAAOCAQEALcU/OxdkEtkWW8R/rPe6NGHG/5dODAt1/O2T1JY3
vvS5Xjers0h0m52LtP4pfDa2G2sXhQkaGgM7z7MqTw1e0m/363Vg5UpHyP4qP3kW
LjEiPzfq5ewujvtSzQLphKOU6RJl7QX2Id38Z+dYS+6tTHgNMokeWofkTbzX3lSp
crQZAgwMzP8bn+Krga3ieHh4u7vNxB2/yazT3APxn0juK2dfh40TfC/WuVVrs/GJ
vnHfJM9B1Pj4Zj6QllJbcVf70oFhAPCiAsGR5Lb2wmKQUcoQeQ4049IwUaQAGf15
qGbErga5mgwDpl1ggBSY5k67xAHl4mV3hDkPGKNBpmBuUg==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:25:59 2025 by rpki-client