Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa
File:                     3230302e33372e302e302f31362d3234203d3e2036313437.roa (raw, json)
Hash identifier:          x8DI0fUWxmvVavawM04FqTLOyo3iHgnMeoVOpoA2D0g=
Subject key identifier:   86:0A:CD:47:F1:5F:AA:BD:E8:F4:95:ED:F7:1A:9A:9D:1F:48:F3:E5
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       7ECCCD00B550D3B86708BE8160A7E77DF48226E4
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:11 +0000
ROA not before:           Tue 04 Feb 2025 20:00:11 +0000
ROA not after:            Tue 03 Feb 2026 20:05:11 +0000
asID:                     6147
IP address blocks:        200.37.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cc:cd:00:b5:50:d3:b8:67:08:be:81:60:a7:e7:7d:f4:82:26:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:11 2025 GMT
            Not After : Feb  3 20:05:11 2026 GMT
        Subject: CN=860ACD47F15FAABDE8F495EDF71A9A9D1F48F3E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:71:00:ba:4f:98:66:01:3e:57:b6:0e:43:
                    5e:fd:2e:f1:3b:73:0e:1f:30:cb:bc:75:29:87:10:
                    42:d8:1a:a3:25:6d:1b:a2:ee:fe:28:09:db:2b:b7:
                    86:a4:22:d1:60:45:75:53:38:d0:f1:cc:05:65:8a:
                    35:2b:0b:b3:92:a0:79:14:7b:73:dc:44:f1:b0:6d:
                    14:b9:5b:84:2d:1a:7b:5d:9a:18:83:73:4b:7d:07:
                    e9:4d:f8:fc:75:3d:6a:62:70:38:d1:31:22:4c:16:
                    06:7d:24:7f:9d:21:7b:90:5a:ea:09:ab:49:50:83:
                    9e:89:f8:43:8f:99:00:9a:57:24:cf:2b:ca:ba:8e:
                    92:f0:45:fa:dc:41:91:87:6f:ad:a1:68:6d:23:00:
                    70:55:d1:d8:50:ad:ab:cc:4a:59:26:d9:3f:66:9d:
                    ca:27:a4:ea:6b:9d:b9:00:04:58:a3:c7:59:08:78:
                    6f:f1:e1:95:8f:db:a5:99:3b:4a:a3:87:99:75:e8:
                    3f:c9:9e:b7:6a:21:ee:31:66:90:ed:a9:64:72:40:
                    0a:95:1f:07:e1:94:b7:82:f8:57:4d:83:ea:7a:91:
                    74:70:85:71:7a:ef:7a:ce:d9:66:0d:01:1a:d9:b3:
                    ae:bf:fc:35:df:e9:e3:9d:a0:23:a8:0c:b9:c4:4d:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0A:CD:47:F1:5F:AA:BD:E8:F4:95:ED:F7:1A:9A:9D:1F:48:F3:E5
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3230302e33372e302e302f31362d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.37.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:17:b0:a6:13:55:55:46:e1:fc:93:04:c9:c4:11:84:ce:
         04:29:41:e1:cf:13:3f:a0:3a:58:cb:01:6f:77:16:5f:d2:77:
         bf:90:c2:3c:07:d8:55:29:05:37:20:f5:43:f3:1f:bf:cf:b0:
         69:38:5f:ff:1c:9f:61:df:49:5c:10:82:27:e2:a1:34:49:89:
         c1:4d:8d:76:3c:96:df:0a:c6:d1:06:d0:ac:81:44:a8:57:e0:
         1e:61:8a:5e:52:84:91:d6:88:48:75:0a:0a:e5:66:c1:58:b6:
         b6:4e:7a:c4:ba:46:39:a2:f0:82:5a:90:d6:1d:6a:5b:43:54:
         39:a6:eb:42:25:55:15:01:8a:d8:73:7c:6a:6a:66:6c:45:4a:
         74:ad:06:b4:e6:6e:f6:96:46:7e:5a:57:f5:c4:dd:73:f3:45:
         7f:79:ad:49:cc:36:2e:f8:02:3f:7a:c3:e5:51:9e:bc:4a:4c:
         c7:ea:ed:38:cd:9b:a4:90:3a:95:e6:a7:2c:46:fd:cc:29:81:
         f0:15:a5:88:52:04:de:47:a8:16:0c:2f:7f:6f:ab:5b:4d:31:
         4c:f3:a8:3a:ab:40:9d:1c:5f:ea:47:28:f4:52:9c:91:f9:aa:
         10:bc:0f:7f:35:1d:d3:c7:1e:a7:28:36:f6:56:77:35:9c:f5:
         7f:65:b6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:53 2025 by rpki-client