Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233352e302f32342d3234203d3e203133333831.roa
File:                     3230302e3131322e3233352e302f32342d3234203d3e203133333831.roa (raw, json)
Hash identifier:          44UGqsq/uWiVnSI6sSfktaRe8mCZK1HbnDUGeqmL1OY=
Subject key identifier:   01:3F:24:48:CE:7F:4C:97:DF:D6:0A:02:B3:7D:94:32:6B:FE:D4:0A
Certificate issuer:       /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial:       2B7F38D184F66220939F8551A93FF04AE2DE46A9
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233352e302f32342d3234203d3e203133333831.roa
Signing time:             Tue 04 Feb 2025 20:07:55 +0000
ROA not before:           Tue 04 Feb 2025 20:02:55 +0000
ROA not after:            Tue 03 Feb 2026 20:07:55 +0000
asID:                     13381
IP address blocks:        200.112.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7f:38:d1:84:f6:62:20:93:9f:85:51:a9:3f:f0:4a:e2:de:46:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
        Validity
            Not Before: Feb  4 20:02:55 2025 GMT
            Not After : Feb  3 20:07:55 2026 GMT
        Subject: CN=013F2448CE7F4C97DFD60A02B37D94326BFED40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1c:41:36:e7:14:69:eb:e6:48:f5:45:51:66:
                    00:22:a3:ea:7a:24:49:78:4b:1b:8b:72:e4:5e:7f:
                    46:64:83:1c:8a:0f:01:78:18:49:ff:d5:30:ab:20:
                    b4:8d:29:b1:3f:5e:14:67:7f:f6:51:51:e1:9b:bb:
                    5b:aa:84:fd:88:03:b0:4c:bc:12:6b:db:11:14:eb:
                    e5:15:9c:53:b7:f4:f6:b6:2f:71:bb:8a:46:89:ed:
                    76:f8:60:05:ba:1a:bd:23:b2:50:d5:44:32:53:4f:
                    bf:98:8f:09:4b:1b:76:5f:23:37:64:92:84:ab:79:
                    60:7c:81:14:50:3b:f9:b1:b7:0b:3e:de:05:43:bd:
                    3e:77:9b:33:98:01:7a:ac:6a:0c:66:1d:10:6d:53:
                    b0:fc:40:c5:d8:61:7f:3c:72:0d:49:0b:ed:01:9e:
                    91:54:97:80:1a:45:9a:7d:42:33:e1:01:35:70:e7:
                    7c:d8:76:a6:b4:1b:9b:22:ee:a1:94:df:58:3f:07:
                    03:55:ee:5f:65:10:62:06:e7:9d:9f:e1:f5:b0:f1:
                    8a:aa:8e:09:9d:a0:33:ef:07:f5:7a:83:15:2f:eb:
                    1a:71:86:37:02:e9:6e:a3:e2:32:5b:7d:0a:cb:2f:
                    bc:83:73:d2:00:12:89:f4:06:65:71:9b:0e:60:7a:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:24:48:CE:7F:4C:97:DF:D6:0A:02:B3:7D:94:32:6B:FE:D4:0A
            X509v3 Authority Key Identifier:
                keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3233352e302f32342d3234203d3e203133333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.112.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:1f:a3:55:17:e2:41:28:01:88:05:b8:75:34:8d:78:65:83:
         ad:07:09:02:4c:5d:3c:a2:93:3f:15:84:26:08:2d:48:78:cc:
         f3:7f:d1:86:51:09:bb:f4:49:62:ca:3b:d5:02:d1:5d:d7:7b:
         ab:78:5a:fe:04:1a:5d:6b:c8:0a:62:45:d8:a0:b2:1b:76:89:
         18:ac:db:bc:c4:81:c9:f7:22:7c:fa:02:c8:27:c7:d5:c0:26:
         0c:75:78:8a:87:36:56:f3:8f:3f:fc:5d:52:a3:df:1a:6a:7c:
         61:5d:68:9b:ab:d2:f7:5f:2c:d0:b1:a4:3c:0e:28:55:bc:c4:
         75:28:6a:59:a1:17:73:bb:8a:f0:8d:81:60:42:93:71:c6:41:
         41:9a:ce:e7:68:77:df:c9:e6:4a:bc:dc:e9:b2:1f:d5:bd:29:
         21:04:6c:25:c8:90:a7:b0:f1:14:a4:9a:79:1d:6a:b2:32:cc:
         1f:fa:96:b6:b6:89:83:ab:ff:37:b9:e0:1e:a0:13:a7:73:e8:
         34:39:69:64:9a:52:1b:28:91:a0:d0:55:00:d1:a9:64:7c:a7:
         9d:c6:30:19:79:1c:79:21:52:de:c2:1b:33:08:71:4d:68:ca:
         3a:bc:4d:28:d9:65:1c:99:81:8f:a7:fe:42:2a:89:09:8b:cc:
         b8:21:08:ed
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUK3840YT2YiCTn4VRqT/wSuLeRqkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM1RTU3RUQ5NzI0NkU4QzAyOTk3RTRGQ0YwQzNFRDEz
RTEwMDc0QTAeFw0yNTAyMDQyMDAyNTVaFw0yNjAyMDMyMDA3NTVaMDMxMTAvBgNV
BAMTKDAxM0YyNDQ4Q0U3RjRDOTdERkQ2MEEwMkIzN0Q5NDMyNkJGRUQ0MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoHEE25xRp6+ZI9UVRZgAio+p6
JEl4SxuLcuRef0ZkgxyKDwF4GEn/1TCrILSNKbE/XhRnf/ZRUeGbu1uqhP2IA7BM
vBJr2xEU6+UVnFO39Pa2L3G7ikaJ7Xb4YAW6Gr0jslDVRDJTT7+YjwlLG3ZfIzdk
koSreWB8gRRQO/mxtws+3gVDvT53mzOYAXqsagxmHRBtU7D8QMXYYX88cg1JC+0B
npFUl4AaRZp9QjPhATVw53zYdqa0G5si7qGU31g/BwNV7l9lEGIG552f4fWw8Yqq
jgmdoDPvB/V6gxUv6xpxhjcC6W6j4jJbfQrLL7yDc9IAEon0BmVxmw5gekZnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAT8kSM5/TJff1goCs32UMmv+1AowHwYDVR0j
BBgwFoAUo15X7ZckbowCmX5Pzww+0T4QB0owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80Q0QxODY5N0NDRDZBMDgwMTUwNDEwMkFFMTc1QzE2NEE4
RUYwNDlCRUMwMkU2NjUwQjc2RkI0MUUyMjdEOUE5LzAvQTM1RTU3RUQ5NzI0NkU4
QzAyOTk3RTRGQ0YwQzNFRDEzRTEwMDc0QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BMzVFNTdFRDk3MjQ2RThDMDI5
OTdFNEZDRjBDM0VEMTNFMTAwNzRBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNENEMTg2OTdDQ0Q2QTA4MDE1MDQxMDJBRTE3NUMxNjRBOEVGMDQ5QkVD
MDJFNjY1MEI3NkZCNDFFMjI3RDlBOS8wLzMyMzAzMDJlMzEzMTMyMmUzMjMzMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzMzODMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyHDr
MA0GCSqGSIb3DQEBCwUAA4IBAQAFH6NVF+JBKAGIBbh1NI14ZYOtBwkCTF08opM/
FYQmCC1IeMzzf9GGUQm79EliyjvVAtFd13ureFr+BBpda8gKYkXYoLIbdokYrNu8
xIHJ9yJ8+gLIJ8fVwCYMdXiKhzZW848//F1So98aanxhXWibq9L3XyzQsaQ8DihV
vMR1KGpZoRdzu4rwjYFgQpNxxkFBms7naHffyeZKvNzpsh/VvSkhBGwlyJCnsPEU
pJp5HWqyMswf+pa2tomDq/83ueAeoBOnc+g0OWlkmlIbKJGg0FUA0alkfKedxjAZ
eRx5IVLewhszCHFNaMo6vE0o2WUcmYGPp/5CKokJi8y4IQjt
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:34 2025 by rpki-client