Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa
File:                     3230302e32342e31322e302f32322d3234203d3e20323632323536.roa (raw, json)
Hash identifier:          pQvzhGvNQCY5GK0y3fxe/VtWcTFCg0yzXxenkrjj9Hw=
Subject key identifier:   F6:CD:16:F6:CD:18:B1:30:BD:57:47:A4:73:9E:18:0D:80:18:95:61
Certificate issuer:       /CN=410286DB57C8E11037CA1FA15398D477DB32FDE9
Certificate serial:       42255D35ED735640CBCE52D24C1D2BB510E3F0A1
Authority key identifier: 41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa
Signing time:             Tue 04 Feb 2025 18:45:37 +0000
ROA not before:           Tue 04 Feb 2025 18:40:37 +0000
ROA not after:            Tue 03 Feb 2026 18:45:37 +0000
asID:                     262256
IP address blocks:        200.24.12.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:25:5d:35:ed:73:56:40:cb:ce:52:d2:4c:1d:2b:b5:10:e3:f0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=410286DB57C8E11037CA1FA15398D477DB32FDE9
        Validity
            Not Before: Feb  4 18:40:37 2025 GMT
            Not After : Feb  3 18:45:37 2026 GMT
        Subject: CN=F6CD16F6CD18B130BD5747A4739E180D80189561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:f2:4b:e1:28:0a:01:7e:7d:62:a7:a6:f0:
                    6a:3b:78:e1:88:82:14:a3:f8:e1:85:47:e5:52:e9:
                    32:70:a8:7d:f8:50:25:01:a4:9c:83:09:3c:e1:c2:
                    6a:bd:a4:b5:81:3f:ed:e4:2a:f9:d6:48:fb:26:87:
                    3b:c7:b0:a7:ba:59:cb:0e:f2:d9:14:1e:64:f9:9b:
                    95:fc:bd:ee:7c:c6:fe:ae:52:c8:50:1f:f2:4d:bf:
                    78:de:1b:11:bc:d9:67:31:6d:61:bf:85:41:19:4d:
                    d3:c2:37:7e:a2:ee:0f:23:81:e9:64:17:ad:a5:24:
                    74:97:80:ff:eb:ea:ee:97:3e:e0:1f:29:19:4b:02:
                    2f:c8:f8:5b:06:0e:b7:a2:bf:09:1e:47:be:c6:b6:
                    03:49:27:f4:14:b0:de:43:57:db:29:27:e2:18:8d:
                    9d:d0:2f:b5:b0:fb:1a:d3:4a:8d:f6:7b:8e:38:3a:
                    56:13:d9:61:1a:29:20:c8:a1:fc:3f:ae:f9:0c:8f:
                    7b:b7:f8:82:7f:cc:1a:e0:05:98:7f:b2:1c:10:09:
                    6b:9b:af:aa:10:ad:7a:eb:3f:51:af:05:71:29:4a:
                    b7:2f:26:e1:78:ce:26:2a:de:18:2d:2a:ca:d6:37:
                    69:0d:92:9d:9a:ae:bb:bd:ac:d8:c8:52:7d:56:c0:
                    66:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CD:16:F6:CD:18:B1:30:BD:57:47:A4:73:9E:18:0D:80:18:95:61
            X509v3 Authority Key Identifier:
                keyid:41:02:86:DB:57:C8:E1:10:37:CA:1F:A1:53:98:D4:77:DB:32:FD:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/410286DB57C8E11037CA1FA15398D477DB32FDE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7A12CF20E374E4AAB736E53F3E8A43E9959249A54D69D2E34CCDD717DA8806EE/0/3230302e32342e31322e302f32322d3234203d3e20323632323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:b4:b2:37:b5:b9:e5:2c:d6:53:5c:2a:79:11:94:1f:17:89:
         93:f6:2f:a0:fb:0b:1b:d1:da:89:2e:d0:66:7c:03:c0:79:f8:
         7c:25:5f:68:53:ea:a3:91:64:df:55:4d:98:ff:34:56:14:8c:
         62:6c:54:9e:99:d9:cb:c6:cb:e9:cc:e4:2d:21:b2:6b:94:b0:
         95:70:90:88:16:98:fa:b5:00:78:13:37:04:04:4c:8c:0e:87:
         29:37:a9:70:5f:0d:34:cc:ca:a0:dd:dd:6e:ef:6d:55:85:f1:
         9e:dd:3a:76:cd:b0:14:58:3b:11:7c:87:ba:81:54:77:ff:14:
         09:26:5d:62:e3:af:de:eb:50:cb:a4:f5:ea:db:10:ea:0c:af:
         ff:a6:ac:08:22:58:72:7d:60:7d:bc:eb:5e:6e:03:69:29:19:
         15:be:62:37:0f:27:af:8c:dc:39:e7:b0:b6:71:f3:b8:8d:6f:
         1a:56:c5:a1:d0:c2:bb:bb:96:42:dc:b0:be:1b:b8:13:06:1a:
         95:d6:34:37:70:b5:2f:f8:05:35:10:82:36:43:c6:b3:eb:1d:
         98:a3:11:aa:02:3d:99:e0:e9:d9:1a:2a:42:bd:ae:2c:40:bd:
         f8:e0:69:b1:16:d9:05:a5:b4:c1:38:82:0d:2f:52:43:18:57:
         d3:24:99:b3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQiVdNe1zVkDLzlLSTB0rtRDj8KEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEwMjg2REI1N0M4RTExMDM3Q0ExRkExNTM5OEQ0NzdE
QjMyRkRFOTAeFw0yNTAyMDQxODQwMzdaFw0yNjAyMDMxODQ1MzdaMDMxMTAvBgNV
BAMTKEY2Q0QxNkY2Q0QxOEIxMzBCRDU3NDdBNDczOUUxODBEODAxODk1NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyfJL4SgKAX59Yqem8Go7eOGI
ghSj+OGFR+VS6TJwqH34UCUBpJyDCTzhwmq9pLWBP+3kKvnWSPsmhzvHsKe6WcsO
8tkUHmT5m5X8ve58xv6uUshQH/JNv3jeGxG82WcxbWG/hUEZTdPCN36i7g8jgelk
F62lJHSXgP/r6u6XPuAfKRlLAi/I+FsGDreivwkeR77GtgNJJ/QUsN5DV9spJ+IY
jZ3QL7Ww+xrTSo32e444OlYT2WEaKSDIofw/rvkMj3u3+IJ/zBrgBZh/shwQCWub
r6oQrXrrP1GvBXEpSrcvJuF4ziYq3hgtKsrWN2kNkp2arru9rNjIUn1WwGZ/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU9s0W9s0YsTC9V0ekc54YDYAYlWEwHwYDVR0j
BBgwFoAUQQKG21fI4RA3yh+hU5jUd9sy/ekwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QTEyQ0YyMEUzNzRFNEFBQjczNkU1M0YzRThBNDNFOTk1
OTI0OUE1NEQ2OUQyRTM0Q0NERDcxN0RBODgwNkVFLzAvNDEwMjg2REI1N0M4RTEx
MDM3Q0ExRkExNTM5OEQ0NzdEQjMyRkRFOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTAyODZEQjU3QzhFMTEwMzdD
QTFGQTE1Mzk4RDQ3N0RCMzJGREU5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0ExMkNGMjBFMzc0RTRBQUI3MzZFNTNGM0U4QTQzRTk5NTkyNDlBNTRE
NjlEMkUzNENDREQ3MTdEQTg4MDZFRS8wLzMyMzAzMDJlMzIzNDJlMzEzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMjMyMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsgYDDAN
BgkqhkiG9w0BAQsFAAOCAQEADbSyN7W55SzWU1wqeRGUHxeJk/YvoPsLG9HaiS7Q
ZnwDwHn4fCVfaFPqo5Fk31VNmP80VhSMYmxUnpnZy8bL6czkLSGya5SwlXCQiBaY
+rUAeBM3BARMjA6HKTepcF8NNMzKoN3dbu9tVYXxnt06ds2wFFg7EXyHuoFUd/8U
CSZdYuOv3utQy6T16tsQ6gyv/6asCCJYcn1gfbzrXm4DaSkZFb5iNw8nr4zcOeew
tnHzuI1vGlbFodDCu7uWQtywvhu4EwYaldY0N3C1L/gFNRCCNkPGs+sdmKMRqgI9
meDp2RoqQr2uLEC9+OBpsRbZBaW0wTiCDS9SQxhX0ySZsw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:44 2025 by rpki-client