Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f31392d3234203d3e203130363137.roa
File:                     3230302e36392e33322e302f31392d3234203d3e203130363137.roa (raw, json)
Hash identifier:          vd6PlXEQeZCgA9e2lrUN4Grkw+8P+tpKcwo8c3N8Bm4=
Subject key identifier:   62:64:51:EF:60:DF:25:61:43:C7:D2:3F:CC:8D:9A:2A:91:6B:EA:65
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       432B6B83CEA040D6DA0056BC9B813EB83982887B
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f31392d3234203d3e203130363137.roa
Signing time:             Tue 04 Feb 2025 18:48:44 +0000
ROA not before:           Tue 04 Feb 2025 18:43:44 +0000
ROA not after:            Tue 03 Feb 2026 18:48:44 +0000
asID:                     10617
IP address blocks:        200.69.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2b:6b:83:ce:a0:40:d6:da:00:56:bc:9b:81:3e:b8:39:82:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Feb  4 18:43:44 2025 GMT
            Not After : Feb  3 18:48:44 2026 GMT
        Subject: CN=626451EF60DF256143C7D23FCC8D9A2A916BEA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e3:f6:18:55:37:65:b2:9e:08:56:9f:37:d2:
                    c6:af:62:e0:cb:1a:40:cc:65:6e:3f:4f:a1:ca:45:
                    34:77:e0:c2:5e:63:2c:17:0e:67:cc:4b:c0:bc:2e:
                    34:64:9c:16:59:5c:5c:44:4c:42:93:a5:b7:19:a1:
                    b8:d7:f1:d0:0a:15:5b:1b:7e:f6:a6:f5:ed:90:76:
                    04:5a:f3:62:d9:2f:ce:57:66:31:d2:c4:3f:73:c8:
                    fd:46:1d:bc:7f:0a:6a:4b:1c:ac:eb:72:38:89:0c:
                    9d:fd:6f:31:7f:aa:a4:04:c3:cc:a1:ae:cd:30:74:
                    96:b9:4d:fa:81:b8:fa:96:ce:ca:e2:46:63:2d:50:
                    17:19:c7:2e:30:96:06:a3:bc:94:5a:4e:32:c0:e5:
                    c4:5e:98:83:2e:81:38:26:51:89:51:cc:d0:f0:fb:
                    26:2e:69:fa:97:84:3b:e5:25:17:52:df:3a:f0:0c:
                    40:9b:72:fe:d2:24:ed:13:dc:f4:4d:7c:cb:36:41:
                    49:88:54:f0:40:f2:6c:ff:92:89:86:48:00:76:55:
                    d5:10:2d:c6:98:db:ea:0c:3f:5f:5d:2d:4d:59:f7:
                    4f:f9:5a:f9:e3:3f:09:35:f6:56:b3:53:20:82:15:
                    1b:dd:e7:4e:f5:f6:cc:cb:bf:39:76:c8:14:62:0a:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:64:51:EF:60:DF:25:61:43:C7:D2:3F:CC:8D:9A:2A:91:6B:EA:65
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e36392e33322e302f31392d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.69.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:e4:5e:64:29:ee:1f:3a:bc:01:e0:34:d1:44:02:19:f9:f9:
         56:a0:0f:12:3d:62:32:e7:65:73:fe:59:47:18:97:33:2d:44:
         05:9d:7b:b2:6f:40:1a:bb:94:00:ce:1f:29:22:80:d1:2f:0c:
         0b:d5:0a:f2:2f:c5:f7:65:a3:cc:2d:00:7b:a4:e9:e3:73:a0:
         23:7d:7c:e5:e8:4f:ac:9c:ca:45:3e:7b:8a:9f:31:24:65:79:
         81:95:3d:71:5d:83:23:de:36:aa:1c:d6:5e:17:26:e9:18:07:
         c0:86:58:cd:d6:87:e8:b9:92:74:90:f7:d0:3c:9e:c8:c7:1a:
         ab:dd:26:f3:3f:d2:f4:c7:25:f9:b2:11:fc:e6:e2:ec:55:66:
         bb:13:ce:2b:b7:a9:ce:9f:40:94:50:05:fb:a0:71:af:d4:9c:
         2e:92:a1:7a:88:39:2e:89:2c:2d:ab:4c:d4:85:d5:d3:63:ca:
         a0:5b:46:09:9c:91:33:c7:d4:85:25:be:d0:36:47:03:ea:85:
         37:75:83:22:f2:ab:35:81:34:99:d2:d2:36:61:3a:da:f5:72:
         d5:12:34:65:b6:f1:7d:b9:0d:24:fd:6d:15:50:27:a7:c1:6d:
         e5:56:28:1c:62:7d:41:c0:30:7b:d6:0e:e7:33:ee:1b:85:ae:
         21:07:f4:79
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQytrg86gQNbaAFa8m4E+uDmCiHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZENkRBRkJGNTUxMUM1MzU2OTMzMEZGRkQyRTlFNTY0
OTc0RDE0RDAeFw0yNTAyMDQxODQzNDRaFw0yNjAyMDMxODQ4NDRaMDMxMTAvBgNV
BAMTKDYyNjQ1MUVGNjBERjI1NjE0M0M3RDIzRkNDOEQ5QTJBOTE2QkVBNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS4/YYVTdlsp4IVp830savYuDL
GkDMZW4/T6HKRTR34MJeYywXDmfMS8C8LjRknBZZXFxETEKTpbcZobjX8dAKFVsb
fvam9e2QdgRa82LZL85XZjHSxD9zyP1GHbx/CmpLHKzrcjiJDJ39bzF/qqQEw8yh
rs0wdJa5TfqBuPqWzsriRmMtUBcZxy4wlgajvJRaTjLA5cRemIMugTgmUYlRzNDw
+yYuafqXhDvlJRdS3zrwDECbcv7SJO0T3PRNfMs2QUmIVPBA8mz/komGSAB2VdUQ
LcaY2+oMP19dLU1Z90/5WvnjPwk19lazUyCCFRvd50719szLvzl2yBRiCpTrAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYmRR72DfJWFDx9I/zI2aKpFr6mUwHwYDVR0j
BBgwFoAUFtba+/VRHFNWkzD//S6eVkl00U0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NkE0ODNDODQwQjU5RDVBMzg2Q0MzNUZFODkxNzc0RjA3
Qzk0MEMyQTQ3M0EwQzgwOEZGNzlFOUQ2NzNBQzAxLzAvMTZENkRBRkJGNTUxMUM1
MzU2OTMzMEZGRkQyRTlFNTY0OTc0RDE0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNkQ2REFGQkY1NTExQzUzNTY5
MzMwRkZGRDJFOUU1NjQ5NzREMTRELmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzZBNDgzQzg0MEI1OUQ1QTM4NkNDMzVGRTg5MTc3NEYwN0M5NDBDMkE0
NzNBMEM4MDhGRjc5RTlENjczQUMwMS8wLzMyMzAzMDJlMzYzOTJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzAzNjMxMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIRSAwDQYJ
KoZIhvcNAQELBQADggEBAG7kXmQp7h86vAHgNNFEAhn5+VagDxI9YjLnZXP+WUcY
lzMtRAWde7JvQBq7lADOHykigNEvDAvVCvIvxfdlo8wtAHuk6eNzoCN9fOXoT6yc
ykU+e4qfMSRleYGVPXFdgyPeNqoc1l4XJukYB8CGWM3Wh+i5knSQ99A8nsjHGqvd
JvM/0vTHJfmyEfzm4uxVZrsTziu3qc6fQJRQBfugca/UnC6SoXqIOS6JLC2rTNSF
1dNjyqBbRgmckTPH1IUlvtA2RwPqhTd1gyLyqzWBNJnS0jZhOtr1ctUSNGW28X25
DST9bRVQJ6fBbeVWKBxifUHAMHvWDucz7huFriEH9Hk=
-----END CERTIFICATE-----
Generated at Thu Feb 13 19:14:40 2025 by rpki-client