Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73494A70605DD6D729B84B78112E087B62A26340BFF0E81FD89C8FD974F5AAC0/0/3230302e32362e3232342e302f32322d3234203d3e20323639383730.roa
File:                     3230302e32362e3232342e302f32322d3234203d3e20323639383730.roa (raw, json)
Hash identifier:          uUBlGBHn8B5i1BTGRWGjVEkm1HIwJp8BJR991jdnPGQ=
Subject key identifier:   FA:43:70:FA:F6:D7:2D:D2:91:B9:D7:D0:89:79:F5:D3:82:ED:E2:E2
Certificate issuer:       /CN=2500E444781DD46E23012CC7510DC53B16788A14
Certificate serial:       4757A9F11DCF0E96D6605B6DFFB8F0F4FB9EB8AD
Authority key identifier: 25:00:E4:44:78:1D:D4:6E:23:01:2C:C7:51:0D:C5:3B:16:78:8A:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2500E444781DD46E23012CC7510DC53B16788A14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73494A70605DD6D729B84B78112E087B62A26340BFF0E81FD89C8FD974F5AAC0/0/3230302e32362e3232342e302f32322d3234203d3e20323639383730.roa
Signing time:             Tue 04 Feb 2025 18:42:20 +0000
ROA not before:           Tue 04 Feb 2025 18:37:20 +0000
ROA not after:            Tue 03 Feb 2026 18:42:20 +0000
asID:                     269870
IP address blocks:        200.26.224.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:57:a9:f1:1d:cf:0e:96:d6:60:5b:6d:ff:b8:f0:f4:fb:9e:b8:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2500E444781DD46E23012CC7510DC53B16788A14
        Validity
            Not Before: Feb  4 18:37:20 2025 GMT
            Not After : Feb  3 18:42:20 2026 GMT
        Subject: CN=FA4370FAF6D72DD291B9D7D08979F5D382EDE2E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:c0:f1:3e:05:e4:bf:ee:b3:4c:a1:12:0f:
                    fc:3d:c9:bd:19:81:84:19:89:a9:67:97:f3:b8:01:
                    60:18:97:14:01:bc:6d:00:d3:b9:f3:33:52:e5:dc:
                    39:f3:2a:6c:ea:4c:46:89:40:da:56:90:01:db:86:
                    2d:c4:09:a7:78:61:92:ba:b3:fb:3f:50:79:ea:98:
                    18:00:5f:81:78:2c:44:19:4e:1c:c4:9f:48:97:25:
                    b1:19:e8:84:e8:c5:b7:58:9a:86:6e:6f:f6:d0:9f:
                    e5:1c:aa:0c:8c:c3:f3:7a:16:d7:1e:32:1c:a5:16:
                    11:5f:d9:56:55:e8:0b:3a:50:ca:65:cc:d6:1b:19:
                    cb:24:3e:0b:60:58:1c:5d:8a:dc:fa:3d:e5:12:d3:
                    dc:03:0a:6d:35:4e:7e:75:0f:2d:20:35:08:ce:c9:
                    b6:ec:35:4d:b6:3a:d3:77:4c:7b:f7:5a:8d:2f:58:
                    41:91:9a:0b:b6:75:be:04:64:1b:af:60:cd:e9:d3:
                    62:c8:8a:3e:9d:84:c6:07:59:7c:a6:69:96:97:3b:
                    43:4e:6b:91:76:3e:ec:4f:d8:fa:9c:a5:a7:f1:10:
                    4a:fe:f6:ef:52:7b:0c:6f:d0:84:e7:3c:a8:43:eb:
                    cb:ce:ab:77:5d:22:d2:bd:8b:3d:32:2c:5a:dc:39:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:43:70:FA:F6:D7:2D:D2:91:B9:D7:D0:89:79:F5:D3:82:ED:E2:E2
            X509v3 Authority Key Identifier:
                keyid:25:00:E4:44:78:1D:D4:6E:23:01:2C:C7:51:0D:C5:3B:16:78:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73494A70605DD6D729B84B78112E087B62A26340BFF0E81FD89C8FD974F5AAC0/0/2500E444781DD46E23012CC7510DC53B16788A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2500E444781DD46E23012CC7510DC53B16788A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73494A70605DD6D729B84B78112E087B62A26340BFF0E81FD89C8FD974F5AAC0/0/3230302e32362e3232342e302f32322d3234203d3e20323639383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:33:b2:fe:f0:9e:4a:6f:d9:18:c6:18:2d:0a:d5:17:95:
         10:2b:fb:6e:e7:7e:b6:1c:60:39:1a:7b:40:75:7d:95:72:11:
         76:e3:db:ec:94:6e:e4:ab:02:ee:69:66:93:06:e2:a4:70:f2:
         34:b0:a9:fe:40:14:b0:82:1e:84:a1:0f:6b:e9:57:0d:59:ce:
         2f:54:67:8f:af:11:b0:98:52:25:40:e3:05:88:76:0f:3f:3d:
         a5:43:a9:43:80:a1:b5:c8:df:0c:34:ef:72:ab:49:b7:69:1c:
         cd:0c:14:98:6d:f7:0d:16:a0:26:63:39:de:d3:9f:4a:4a:bb:
         f2:6b:8a:63:dc:bc:d1:8e:6c:11:10:d9:d4:d4:af:2b:d8:f5:
         48:21:b3:01:df:b1:21:c8:9a:ff:7e:d8:d8:e0:00:30:f4:f9:
         25:38:6b:9e:d1:85:f3:2b:8a:f8:b4:bd:b5:d8:f4:57:91:5d:
         fa:8b:b2:9f:48:f6:76:87:30:a8:29:b3:24:27:e3:86:55:d4:
         60:96:cb:7f:8e:21:bf:44:54:3b:72:f1:21:85:ab:ac:a4:ad:
         b7:c2:be:4b:77:e4:f0:9f:67:07:2a:09:b0:ff:b5:e3:16:f1:
         46:c4:4c:4e:a0:eb:8d:38:16:6d:75:28:33:a9:e9:4a:98:63:
         48:a3:ba:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:40 2025 by rpki-client