Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
File:                     3230302e35372e31302e302f32342d3234203d3e203138373334.roa (raw, json)
Hash identifier:          hlo++6wRYdRCl3fsa43KpujRMJyzwoNN3wH/7jr/0/M=
Subject key identifier:   63:8D:FF:28:A6:E3:71:F3:44:54:52:81:F3:B2:BA:A4:AD:C7:CB:CC
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       4D976D9A1CE6B2CB7EB0B17F674CAAF27220895E
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:52 +0000
ROA not before:           Tue 04 Feb 2025 18:01:52 +0000
ROA not after:            Tue 03 Feb 2026 18:06:52 +0000
asID:                     18734
IP address blocks:        200.57.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:97:6d:9a:1c:e6:b2:cb:7e:b0:b1:7f:67:4c:aa:f2:72:20:89:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:52 2025 GMT
            Not After : Feb  3 18:06:52 2026 GMT
        Subject: CN=638DFF28A6E371F344545281F3B2BAA4ADC7CBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:92:26:48:a2:b7:5a:06:5e:d9:89:7b:35:
                    13:ab:e4:68:74:51:84:2e:1a:15:74:25:94:0e:0e:
                    f0:fe:48:7a:30:a3:a3:fd:41:b6:21:59:de:3b:f0:
                    a5:9f:96:3f:74:37:08:72:f2:cc:f8:1f:1c:7c:14:
                    12:d5:63:d6:32:79:61:c2:bb:cc:40:7c:81:05:be:
                    53:de:a8:b2:d6:5a:a5:e1:0c:45:3a:94:1b:80:d3:
                    a9:5e:d5:e0:b9:5e:21:a1:9f:67:64:0c:da:01:bb:
                    59:ac:af:63:c9:31:f5:9b:4d:34:80:3d:76:19:c1:
                    93:cb:08:02:40:72:ce:86:e6:7a:d8:f5:51:54:9f:
                    cd:76:be:f3:c1:a5:09:52:8a:ec:b3:d2:5c:10:50:
                    6a:ee:61:89:34:2c:49:7c:78:4e:b9:85:2a:62:35:
                    56:e2:97:26:3a:6d:e9:88:b3:54:c9:6b:ff:d9:2b:
                    85:aa:a3:5f:44:78:5f:11:17:75:13:02:7e:cf:75:
                    5b:d0:ed:b7:6a:4d:d0:2d:db:02:01:be:3e:17:0a:
                    fb:f1:56:24:e9:35:0b:e8:30:51:28:a1:39:39:73:
                    54:48:d6:70:78:d7:ba:a2:eb:8f:70:04:3d:5d:69:
                    a2:01:8d:fd:ae:74:2a:12:a3:c8:16:cb:92:d2:a1:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8D:FF:28:A6:E3:71:F3:44:54:52:81:F3:B2:BA:A4:AD:C7:CB:CC
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3230302e35372e31302e302f32342d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.57.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:35:e3:72:4f:f2:80:19:4a:6d:ec:e7:ae:b9:58:8b:88:90:
         30:49:c9:74:bb:68:d2:e9:a9:c5:26:5e:56:3e:86:ef:1d:b7:
         b1:46:ac:e5:b8:f4:11:53:3e:a9:e6:e7:d1:49:c7:43:da:8f:
         c6:d1:af:1b:ee:d8:b4:97:f1:24:57:d0:cf:7b:d1:d8:3a:eb:
         f5:d8:24:f2:03:3e:05:c1:a3:51:04:57:b8:4c:d0:0e:f3:fc:
         d5:15:a7:3f:4c:ae:5e:64:95:aa:7c:46:5c:6a:1b:93:b6:6e:
         4b:0f:88:6f:0d:f3:57:a7:2c:d0:a7:f2:c8:9e:e5:82:36:4e:
         64:cc:25:e4:4a:cf:f9:cf:11:63:c7:e6:1a:f2:03:e8:e8:3f:
         c4:ca:ea:c8:02:b3:da:93:49:76:6b:68:f3:29:09:81:b6:74:
         10:a0:f4:f2:86:55:2a:9d:64:b2:52:cb:92:1b:46:09:d8:14:
         04:21:72:c4:5f:15:f0:9c:1b:bc:1b:73:be:d5:20:e3:00:b9:
         05:1a:3b:46:c4:7c:fe:9d:dd:87:a7:f9:a0:64:9c:ea:e1:d5:
         22:aa:f7:3f:c2:20:b1:b0:00:50:e7:f3:9a:ba:15:64:fb:ad:
         1f:4e:84:1d:12:bb:6e:e7:2e:a0:7f:19:b0:dd:37:d1:e8:77:
         e5:b8:8c:50
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTZdtmhzmsst+sLF/Z0yq8nIgiV4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5N0EyNTgzNkI0MjlFOUU2RDE1NTE4REM3Mzk3MDBC
NkM5QzRGRDAeFw0yNTAyMDQxODAxNTJaFw0yNjAyMDMxODA2NTJaMDMxMTAvBgNV
BAMTKDYzOERGRjI4QTZFMzcxRjM0NDU0NTI4MUYzQjJCQUE0QURDN0NCQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAoJImSKK3WgZe2Yl7NROr5Gh0
UYQuGhV0JZQODvD+SHowo6P9QbYhWd478KWflj90Nwhy8sz4Hxx8FBLVY9YyeWHC
u8xAfIEFvlPeqLLWWqXhDEU6lBuA06le1eC5XiGhn2dkDNoBu1msr2PJMfWbTTSA
PXYZwZPLCAJAcs6G5nrY9VFUn812vvPBpQlSiuyz0lwQUGruYYk0LEl8eE65hSpi
NVbilyY6bemIs1TJa//ZK4Wqo19EeF8RF3UTAn7PdVvQ7bdqTdAt2wIBvj4XCvvx
ViTpNQvoMFEooTk5c1RI1nB417qi649wBD1daaIBjf2udCoSo8gWy5LSoSNVAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUY43/KKbjcfNEVFKB87K6pK3Hy8wwHwYDVR0j
BBgwFoAUeZeiWDa0Kenm0VUY3HOXALbJxP0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80RjJGRkZCMEIzODM0MDQ1RjdDNDI4MkFFQjRDNjQ1REQ5
NDYxNzUwQ0NENTMzOEY4Q0M2RkQ2NUY1QUUxQ0NBLzAvNzk5N0EyNTgzNkI0MjlF
OUU2RDE1NTE4REM3Mzk3MDBCNkM5QzRGRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OTk3QTI1ODM2QjQyOUU5RTZE
MTU1MThEQzczOTcwMEI2QzlDNEZELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNEYyRkZGQjBCMzgzNDA0NUY3QzQyODJBRUI0QzY0NUREOTQ2MTc1MEND
RDUzMzhGOENDNkZENjVGNUFFMUNDQS8wLzMyMzAzMDJlMzUzNzJlMzEzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzgzNzMzMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADIOQowDQYJ
KoZIhvcNAQELBQADggEBAHA143JP8oAZSm3s5665WIuIkDBJyXS7aNLpqcUmXlY+
hu8dt7FGrOW49BFTPqnm59FJx0Paj8bRrxvu2LSX8SRX0M970dg66/XYJPIDPgXB
o1EEV7hM0A7z/NUVpz9Mrl5klap8RlxqG5O2bksPiG8N81enLNCn8sie5YI2TmTM
JeRKz/nPEWPH5hryA+joP8TK6sgCs9qTSXZraPMpCYG2dBCg9PKGVSqdZLJSy5Ib
RgnYFAQhcsRfFfCcG7wbc77VIOMAuQUaO0bEfP6d3Yen+aBknOrh1SKq9z/CILGw
AFDn85q6FWT7rR9OhB0Su27nLqB/GbDdN9Hod+W4jFA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:09 2025 by rpki-client