Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
File:                     3230302e35322e3134342e302f32302d3230203d3e203237393332.roa (raw, json)
Hash identifier:          uCG4LwFzTZxZpg8S1tnueRiB/hWFfWsyxS2gDiAHxHw=
Subject key identifier:   21:5D:D8:F0:50:F6:06:9D:7F:96:FB:B3:17:F1:09:16:F9:EC:CB:CF
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       07B98D6BBFBB630E504183370F7272B8E0688F03
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa
Signing time:             Tue 04 Feb 2025 18:09:07 +0000
ROA not before:           Tue 04 Feb 2025 18:04:07 +0000
ROA not after:            Tue 03 Feb 2026 18:09:07 +0000
asID:                     27932
IP address blocks:        200.52.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b9:8d:6b:bf:bb:63:0e:50:41:83:37:0f:72:72:b8:e0:68:8f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:07 2025 GMT
            Not After : Feb  3 18:09:07 2026 GMT
        Subject: CN=215DD8F050F6069D7F96FBB317F10916F9ECCBCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:16:ef:fb:70:b0:4b:6b:9a:f4:92:f4:a0:
                    a3:bf:c1:74:76:ce:ee:e5:6e:46:7f:84:1b:9e:e6:
                    71:82:bc:e1:fc:d6:23:8b:b6:9c:a2:bf:d4:7d:15:
                    fe:1f:60:3e:52:93:a9:16:72:36:c4:e8:4f:f9:ed:
                    1d:b1:3e:54:52:9a:0c:2f:fc:76:65:16:9f:85:72:
                    60:3d:0e:58:45:18:5c:6e:2a:6b:2e:59:a1:ca:66:
                    59:01:8b:5e:c1:95:69:0d:2a:00:82:2f:a2:42:c2:
                    06:84:ab:b3:31:3a:81:f3:53:6e:67:52:a0:ce:c7:
                    5d:7a:36:d4:02:60:55:c8:e6:55:1a:94:40:c2:0f:
                    d1:2c:35:e2:a0:86:39:1c:04:f6:98:0e:fe:92:d1:
                    c8:01:36:e1:09:7f:52:88:77:ab:20:46:80:a3:ad:
                    39:21:6d:58:c1:a8:cf:a0:f7:d2:bf:e3:14:25:4b:
                    bb:73:c6:44:d7:c6:d5:73:aa:90:31:39:fd:4f:f5:
                    ba:e0:97:f6:c3:f7:bd:9c:b8:01:75:df:87:41:b7:
                    29:54:c5:2d:4e:91:5f:b2:0d:fa:9b:df:28:f7:04:
                    71:90:f3:15:13:50:c9:b8:7e:81:1e:05:50:ef:82:
                    a7:3a:b9:1d:68:7c:49:b6:e5:8c:c3:ae:61:e9:ba:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:5D:D8:F0:50:F6:06:9D:7F:96:FB:B3:17:F1:09:16:F9:EC:CB:CF
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3230302e35322e3134342e302f32302d3230203d3e203237393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:e5:fb:9e:ab:68:c0:ac:cf:14:fe:c4:94:9e:9a:5b:10:
         13:4f:b8:ee:21:fb:67:aa:6a:aa:2c:0e:ca:b1:3d:35:a9:f6:
         78:28:99:5c:07:f8:14:96:62:aa:30:21:4f:1b:72:44:7f:48:
         ee:9f:fa:45:0b:b8:7d:41:12:23:b3:d2:b2:bb:82:d7:6c:de:
         53:0f:5c:31:f4:31:32:35:17:8f:cd:57:27:aa:51:68:39:e8:
         bb:f5:d8:79:61:ad:2f:ba:0c:54:11:df:81:34:2e:55:ca:5f:
         d5:fe:95:0f:88:ff:3f:f2:19:80:2f:ac:37:3e:64:79:ed:e5:
         27:84:76:e2:71:15:50:7c:ec:9b:df:84:15:73:cb:98:aa:7d:
         96:09:07:e5:39:d8:e0:c0:75:6e:72:c9:9f:83:c4:31:0b:86:
         e3:94:37:35:9a:fb:9d:c1:5f:0f:b2:89:cf:2e:14:f9:46:c9:
         a3:6b:07:59:84:4f:f6:2c:22:76:2a:b0:b1:38:c0:7f:c9:b7:
         07:2b:b7:3f:7f:33:b0:5b:dc:35:62:85:3f:4f:03:91:d1:ae:
         42:7a:03:ce:fc:c4:43:7c:7d:8d:fd:41:9d:ed:37:81:68:e9:
         01:2a:00:c4:93:cd:24:ff:77:65:96:3c:5a:3b:aa:5f:ad:8c:
         4d:87:86:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:42 2025 by rpki-client