Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138322e302f32342d3234203d3e203236363137.roa
File:                     3230302e33352e3138322e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          QGkWIpkEapflIZbVLl2FL7W14q5dsoySaqH5tx/yk2o=
Subject key identifier:   EA:A9:E0:CA:51:F9:F8:AB:5F:C7:6B:41:2E:71:C0:A9:0B:EF:EF:5A
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       58246504B2BCDBFE51FF2BE854CDDB237D6D104F
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138322e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:33 +0000
ROA not before:           Tue 04 Feb 2025 18:10:33 +0000
ROA not after:            Tue 03 Feb 2026 18:15:33 +0000
asID:                     26617
IP address blocks:        200.35.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:24:65:04:b2:bc:db:fe:51:ff:2b:e8:54:cd:db:23:7d:6d:10:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:33 2025 GMT
            Not After : Feb  3 18:15:33 2026 GMT
        Subject: CN=EAA9E0CA51F9F8AB5FC76B412E71C0A90BEFEF5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:c6:79:9c:a6:d1:6c:0a:dc:1d:f4:93:94:
                    25:f9:96:55:ee:d8:fb:35:30:e1:db:ab:a0:10:f0:
                    ed:fb:30:94:22:fd:c4:4c:71:09:78:45:f7:2e:e6:
                    51:f8:0d:f0:5e:84:35:c0:85:19:c8:89:b9:12:94:
                    61:87:35:ed:72:e1:51:b2:23:0a:a7:a3:cf:ac:e8:
                    11:fe:92:e8:1f:1f:74:bb:c8:2c:41:4b:5e:1c:ce:
                    2c:1d:33:99:60:c6:70:bf:d4:f0:ae:4b:08:c2:e6:
                    c5:63:69:fc:c9:29:26:4d:7c:f9:db:df:e8:57:c4:
                    a0:e4:ff:41:c0:61:3f:d0:b8:dd:13:73:8b:c9:29:
                    92:f4:c8:5a:78:b1:d8:75:f3:34:81:6d:8d:97:c8:
                    af:3c:14:c0:0d:06:70:1e:55:75:41:f6:08:89:c8:
                    fc:54:9f:b7:39:94:f7:c8:9b:b2:e5:13:bd:44:67:
                    7f:7b:93:71:93:f0:8a:7e:05:6c:fd:6c:fc:9e:df:
                    6c:a6:df:dc:af:e0:c0:13:90:34:de:d9:c1:82:fb:
                    0d:a1:e2:d5:cb:47:84:04:df:55:37:58:03:43:d2:
                    be:be:41:35:bb:34:8f:a6:12:11:8f:3f:87:5f:ac:
                    a2:55:0a:47:84:69:b2:16:f9:d5:fe:5a:dd:ea:e0:
                    2e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A9:E0:CA:51:F9:F8:AB:5F:C7:6B:41:2E:71:C0:A9:0B:EF:EF:5A
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138322e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:ec:86:27:69:88:cf:6d:4e:af:89:fa:af:be:f9:fb:72:
         e1:68:b0:ce:a5:fe:89:78:79:2c:a3:07:06:71:0e:2d:e5:32:
         1e:5b:a2:06:29:23:67:6a:57:30:d3:52:b3:a5:04:04:e3:5e:
         e3:fd:77:30:de:0c:13:db:f4:00:b1:73:07:ca:44:fb:f1:e2:
         a4:47:58:d0:3a:2b:c9:cd:d6:e9:68:10:24:84:b9:b5:1f:86:
         28:a6:28:83:a3:f6:ef:cd:bc:b3:24:72:20:e4:b2:5b:a6:68:
         37:c7:10:e6:0f:7c:4b:82:a7:1f:a2:5e:8c:f3:6e:75:75:6e:
         a2:c1:c5:61:e9:0b:63:31:5e:da:20:1f:58:7e:62:00:58:62:
         bf:19:b8:6f:8a:7a:80:a7:34:40:5d:58:a0:d3:7b:b5:19:f0:
         13:29:19:66:fa:f2:8b:42:8e:a7:ce:de:84:ef:a7:94:ff:cb:
         22:58:a9:07:82:1f:99:90:27:e1:b6:e3:54:ab:61:0f:67:50:
         8c:b2:8a:7a:f7:89:81:2d:c9:fa:83:ab:b9:72:42:20:ee:c2:
         59:cc:bc:cb:2d:16:0b:d1:7f:23:3a:37:29:90:48:e5:9e:da:
         bc:ef:9e:13:27:f0:7e:f6:c2:c8:c9:81:18:75:0e:0f:7d:d9:
         68:67:ae:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:17 2025 by rpki-client