Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138382e302f32332d3234203d3e203236363137.roa
File:                     3230302e33352e3138382e302f32332d3234203d3e203236363137.roa (raw, json)
Hash identifier:          esp+mPfh6gadjjE6cjytHGa4XtIT2JVYnS7a8XWN48k=
Subject key identifier:   CD:FC:62:FC:E1:34:AA:C3:47:09:82:25:A3:0E:31:57:74:ED:21:26
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3061EA23BA697AC381E0E69164AC267127295139
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138382e302f32332d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:25 +0000
ROA not before:           Tue 04 Feb 2025 18:10:25 +0000
ROA not after:            Tue 03 Feb 2026 18:15:25 +0000
asID:                     26617
IP address blocks:        200.35.188.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:61:ea:23:ba:69:7a:c3:81:e0:e6:91:64:ac:26:71:27:29:51:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:25 2025 GMT
            Not After : Feb  3 18:15:25 2026 GMT
        Subject: CN=CDFC62FCE134AAC347098225A30E315774ED2126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:7d:b1:c3:54:40:83:02:d7:be:7a:cd:eb:
                    5d:ac:f0:6c:f9:1e:2a:0f:ab:71:c6:ef:fd:68:01:
                    9c:a3:4a:1a:67:f1:c0:b5:2a:e2:89:49:32:e8:b5:
                    0c:83:a5:fd:5c:06:ae:0e:8a:4b:aa:50:2a:06:47:
                    50:ca:bf:b6:50:9a:03:2b:ea:9b:72:19:cc:65:a0:
                    e5:44:98:70:11:7a:f0:08:9f:c3:9f:37:1a:31:e9:
                    a8:c8:e1:96:f4:1e:c1:b0:12:84:f8:c7:cb:96:9e:
                    f1:7c:74:c6:24:69:16:67:ab:a8:ac:9d:b4:77:7d:
                    df:1c:00:27:6e:b8:de:9f:aa:07:4e:8d:94:59:a0:
                    60:c9:47:68:41:8f:93:87:4d:e6:ca:32:70:26:4c:
                    61:47:c9:cc:45:f2:e7:75:72:c2:6c:35:f0:16:b0:
                    8c:6f:c5:85:a6:26:f9:82:60:4b:da:ac:d0:1e:4e:
                    8c:3c:b9:a5:fa:4a:da:dc:0a:ac:52:f7:fa:af:3b:
                    29:79:29:fa:0a:60:3d:46:94:09:05:da:ce:ec:10:
                    a8:48:06:ac:bf:d8:0d:00:84:55:2b:31:91:45:aa:
                    b2:d4:16:49:50:b5:cf:cf:32:74:71:53:e7:d3:6a:
                    9f:9a:ec:cc:15:35:9b:84:4c:fc:7d:d5:08:d0:f9:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:62:FC:E1:34:AA:C3:47:09:82:25:A3:0E:31:57:74:ED:21:26
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3230302e33352e3138382e302f32332d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:c8:bc:25:e5:bd:be:29:3c:fb:fd:a6:c2:fa:cf:19:7a:
         15:e5:1e:06:41:c1:33:3e:1d:11:9a:de:d3:98:91:7f:96:37:
         7f:b0:e4:ad:cb:4a:20:53:0a:ab:1e:b5:ca:95:12:47:29:e7:
         70:78:76:ec:82:40:53:9e:a7:eb:1c:c4:36:a1:a0:46:8b:ff:
         85:05:89:bc:90:09:4c:3c:f3:07:9f:c1:09:8c:6d:56:20:82:
         42:43:f6:54:3b:3f:28:43:6d:6e:f7:4f:17:a5:5e:39:bd:95:
         2b:d4:39:9d:ec:82:ef:27:ef:00:e2:ab:f7:6b:bd:ef:c9:57:
         c5:a3:1a:8e:b4:c1:b7:8f:d7:26:f1:2f:31:0d:63:b1:8d:9f:
         17:4d:0b:79:04:29:62:af:e9:17:a2:6c:9b:4c:29:d8:f2:7a:
         79:38:82:d7:11:d7:bd:65:59:fa:63:88:85:c7:ef:8f:23:fb:
         8e:a7:9b:d7:d1:ba:a6:09:79:4b:b4:ed:29:73:88:36:7a:9c:
         36:05:4e:29:2d:f2:e2:be:87:e9:5e:96:b2:ed:31:5d:b5:6b:
         26:e0:fd:c1:61:c3:ad:e8:b0:c2:f3:e4:78:b7:73:17:a7:67:
         eb:0d:b1:42:87:d6:70:5f:42:b9:26:ba:f7:67:5e:c8:f2:d4:
         9c:b1:7e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:06 2025 by rpki-client