Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e3132312e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          h0c+54eN7p9R2Bp3yfrJpkIRDT0LrKjpM73dDU9gqmQ=
Subject key identifier:   F1:6E:BD:AE:9D:E5:EF:7D:F7:9D:F0:E1:E3:33:6A:5C:B0:88:6C:5C
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       2F5D9DC73089CF583A5D0E566E721C14412D89DE
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:09 +0000
ROA not before:           Tue 04 Feb 2025 20:00:09 +0000
ROA not after:            Tue 03 Feb 2026 20:05:09 +0000
asID:                     6147
IP address blocks:        200.121.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5d:9d:c7:30:89:cf:58:3a:5d:0e:56:6e:72:1c:14:41:2d:89:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:09 2025 GMT
            Not After : Feb  3 20:05:09 2026 GMT
        Subject: CN=F16EBDAE9DE5EF7DF79DF0E1E3336A5CB0886C5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:99:b7:1e:a1:90:80:d9:9a:66:37:c4:7f:
                    27:1c:27:f6:42:ab:3d:f3:2b:1d:78:d8:1a:00:24:
                    e0:f5:f2:73:84:6a:70:a5:7e:4d:66:37:90:81:a2:
                    1d:84:f5:c8:96:eb:d0:25:f2:3a:2c:21:db:ff:d7:
                    10:5f:f0:cc:a8:7f:03:70:94:59:13:77:89:7f:fb:
                    bf:c6:0c:78:7e:fc:4a:7e:fc:6c:75:45:30:02:06:
                    4f:e3:05:2f:fd:a6:25:ff:28:ba:18:0f:0a:7d:0b:
                    64:f8:10:5c:52:e0:dd:b1:ae:33:01:f9:fc:dd:07:
                    57:09:20:1f:13:0e:48:21:e0:f0:03:e8:a5:17:98:
                    e7:4f:e6:ed:49:30:94:04:25:30:ba:f5:04:3e:ea:
                    16:46:de:50:20:f5:ac:f0:30:61:3f:1f:ba:ab:a1:
                    c1:eb:8b:79:cd:db:0f:5c:17:cf:c9:ed:46:37:07:
                    65:88:6d:c9:4f:b2:f1:6a:2d:79:18:8e:b8:d6:b8:
                    c9:63:f9:94:7e:5f:a9:26:e6:6e:4b:11:36:8a:17:
                    0b:07:b0:7a:0e:57:83:f5:af:62:f6:b0:57:42:21:
                    53:27:1e:47:75:7e:d0:01:35:00:d6:4f:11:89:cb:
                    e8:da:0d:57:a1:ba:6b:05:b4:6e:c5:47:e4:9a:34:
                    df:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6E:BD:AE:9D:E5:EF:7D:F7:9D:F0:E1:E3:33:6A:5C:B0:88:6C:5C
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e3132312e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.121.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:cf:e3:5e:99:3f:70:4c:58:4d:23:80:72:1e:e2:15:87:d9:
         e4:79:cc:b9:6c:db:8b:80:80:98:d6:9f:63:5d:7f:57:bc:32:
         31:ab:09:88:35:e8:8e:b8:77:d3:86:ee:84:62:92:98:13:7b:
         c7:e5:be:9e:e7:2e:da:eb:c3:22:57:a5:60:d1:22:82:5d:6a:
         29:ee:e6:d0:d6:5f:5e:bf:26:2f:d3:eb:a9:c6:6c:30:32:8b:
         f5:d2:b8:75:e7:3d:16:a3:fe:a2:83:eb:e0:3e:fc:c1:fa:03:
         5d:bb:e6:7f:45:df:72:c5:97:f8:4c:e7:84:28:0f:83:09:3f:
         ab:9d:29:73:3e:e2:55:6a:48:b7:ca:0e:1a:4e:ab:47:f5:6e:
         8a:f9:46:66:3f:62:7f:ab:d9:47:7d:88:e0:c8:15:68:d6:92:
         f9:e4:ab:4b:f3:1c:58:64:da:cd:58:58:41:61:ae:40:92:4b:
         9b:2b:f2:df:54:dc:40:44:dc:0f:3b:ef:27:2b:80:13:a6:a2:
         7b:01:35:8c:15:f2:c1:fb:53:df:d5:94:7d:7e:01:f9:51:ee:
         82:1e:e9:df:95:86:70:e8:38:64:80:16:2e:07:c0:44:66:bf:
         33:7a:35:0e:99:c5:42:9e:3e:20:ad:8a:7e:43:59:7a:f1:6d:
         17:1b:2a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:22 2025 by rpki-client