Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
File:                     3230302e35372e302e302f32302d3234203d3e203138373334.roa (raw, json)
Hash identifier:          vcJmy3rjH04//Dh5Y20xwubh1h4i3cm0gxKBrNr2a00=
Subject key identifier:   E8:24:88:19:03:DA:9B:74:D3:77:B7:7F:FA:AA:31:41:0B:90:1D:E0
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       228582AC4D1D3A41F4CF8A853AA5ACF5422E6E97
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:50 +0000
ROA not before:           Tue 04 Feb 2025 18:01:50 +0000
ROA not after:            Tue 03 Feb 2026 18:06:50 +0000
asID:                     18734
IP address blocks:        200.57.0.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:85:82:ac:4d:1d:3a:41:f4:cf:8a:85:3a:a5:ac:f5:42:2e:6e:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:50 2025 GMT
            Not After : Feb  3 18:06:50 2026 GMT
        Subject: CN=E824881903DA9B74D377B77FFAAA31410B901DE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:37:3a:de:89:af:2f:2c:53:eb:c8:09:3c:e2:
                    90:92:66:10:79:64:d6:a9:ee:35:85:6c:a6:8f:26:
                    b7:16:b3:0c:f1:eb:35:7e:d1:87:3c:a7:3b:d0:90:
                    f7:0e:7c:c1:79:ea:cd:89:0d:9d:64:ae:37:a7:eb:
                    51:c7:e8:e5:f6:1d:b5:9c:52:ff:15:c1:0a:ce:b2:
                    10:e4:e6:e0:c1:b2:47:ba:9f:78:b7:a1:ed:1b:3f:
                    aa:46:d3:32:bf:6b:e1:ac:19:46:4f:b3:1d:5d:4e:
                    11:80:4f:65:00:e6:1a:ad:92:12:e4:cd:35:68:65:
                    74:41:97:d1:09:4b:99:b7:59:8b:28:75:99:38:d5:
                    ad:6f:ae:f6:6f:c1:95:af:64:d9:85:b1:5b:05:8f:
                    8b:cd:dd:82:07:9e:f4:0f:16:b5:15:1f:22:29:dd:
                    51:01:22:20:8c:51:04:6b:06:32:f2:87:12:af:12:
                    6c:84:07:6a:dd:4a:2d:ba:9c:7d:c3:5d:93:83:38:
                    be:5a:02:3d:40:37:42:5a:65:fa:df:e7:b5:14:72:
                    f3:a0:83:1d:f0:80:80:bd:aa:5d:0f:ed:6b:9c:c7:
                    d9:66:d5:8e:d7:a9:c4:23:2a:4e:7b:7c:7b:b1:dd:
                    f7:ed:f6:b3:8d:8f:69:6b:17:41:63:88:2c:88:ff:
                    af:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:24:88:19:03:DA:9B:74:D3:77:B7:7F:FA:AA:31:41:0B:90:1D:E0
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e302e302f32302d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:ed:bd:b4:9b:cb:0b:6a:56:72:43:1c:d2:f3:60:71:2f:
         23:1f:3e:03:14:91:38:14:47:b2:07:9d:94:b8:1c:0b:13:53:
         6c:04:7b:a6:6e:f6:98:ec:75:b2:ea:30:7b:8f:1f:7d:01:44:
         f3:cf:01:48:af:0a:9d:fd:d4:dc:b5:20:08:98:dd:c2:28:85:
         9c:56:99:53:03:aa:fe:63:09:e5:c6:e1:ad:27:91:6c:4d:95:
         71:36:b2:94:b5:34:68:ab:7a:4b:f1:6e:81:6a:37:44:e6:1b:
         f7:0d:55:bc:65:0d:96:9d:41:7f:82:ca:7d:b3:ee:d7:42:0d:
         e1:aa:1b:b6:e4:ea:67:b3:77:cc:7d:f6:b5:c7:7c:6e:e4:d3:
         6c:18:a4:c0:10:c3:a3:e7:19:c4:61:67:4e:41:31:98:30:36:
         c9:63:98:ea:64:9f:a0:dc:90:59:74:2d:bd:08:48:15:79:2a:
         ef:65:7d:a3:b2:f2:eb:20:74:a8:3a:4b:51:c8:4f:25:23:4e:
         94:3b:59:39:8f:85:ed:53:b7:31:10:fc:49:6d:b7:02:6b:73:
         6d:32:a8:4d:18:8c:0f:84:31:f7:97:d3:fd:c5:e9:ea:d6:9f:
         41:61:ff:42:1f:51:da:75:d3:2e:a8:c9:28:68:86:be:a2:da:
         a4:11:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:32 2025 by rpki-client