Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa
File:                     3230302e332e302e302f32342d3234203d3e20323633313832.roa (raw, json)
Hash identifier:          Cx0UgPk339d5b711vTHRS/Q4ciAJTYadwT2CJacAfgw=
Subject key identifier:   65:6F:7A:E6:6A:22:D7:AE:F1:60:DB:EA:85:01:38:98:EE:3B:0F:14
Certificate issuer:       /CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
Certificate serial:       7293B71A42D3FDC9E663E4906C1FF5E6D99913E0
Authority key identifier: 50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa
Signing time:             Thu 20 Feb 2025 17:10:27 +0000
ROA not before:           Thu 20 Feb 2025 17:05:27 +0000
ROA not after:            Thu 19 Feb 2026 17:10:27 +0000
asID:                     263182
IP address blocks:        200.3.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:93:b7:1a:42:d3:fd:c9:e6:63:e4:90:6c:1f:f5:e6:d9:99:13:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506320FB69AC1025178FC25AE58C93B0BA04A7B4
        Validity
            Not Before: Feb 20 17:05:27 2025 GMT
            Not After : Feb 19 17:10:27 2026 GMT
        Subject: CN=656F7AE66A22D7AEF160DBEA85013898EE3B0F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e1:32:fa:e1:44:16:6f:7d:f6:21:56:ff:74:
                    32:8a:b9:ee:c6:d9:8c:f5:cd:ea:cb:18:d7:ab:fd:
                    0e:e7:cd:25:33:ba:6c:77:f9:56:ba:2a:b4:4c:dc:
                    aa:af:86:49:78:5f:9b:9a:82:00:00:70:01:38:37:
                    cc:8d:91:47:02:65:da:4a:06:e3:25:16:5a:dc:df:
                    a9:e7:4f:4e:60:b6:0d:fa:6f:b2:9e:da:1d:74:a2:
                    82:57:22:99:9c:61:ca:31:2f:38:72:1f:f5:8e:c5:
                    62:c2:4a:a7:b5:23:e4:19:14:53:7b:49:3a:82:1d:
                    23:9c:fa:d1:d5:db:48:9c:72:0b:da:9c:9f:8f:62:
                    bc:ba:ab:c4:ed:ca:c6:db:43:3d:90:61:80:bd:a0:
                    35:d3:61:41:ac:fe:b0:91:ac:7f:5f:65:7b:62:ab:
                    60:34:3b:91:5c:43:df:68:be:5d:22:91:df:82:ab:
                    68:ba:c6:68:78:b1:70:1c:6b:7b:16:5f:53:95:29:
                    9c:36:8b:b9:ba:24:01:d7:b0:21:d0:46:2f:b9:ad:
                    da:f8:50:42:76:5e:2d:1d:25:aa:90:68:2d:2f:94:
                    4b:2e:08:d7:a9:68:c4:04:c1:f9:b4:c4:e2:f9:af:
                    26:f1:05:b3:68:cc:f4:76:d7:93:81:27:2f:50:86:
                    5f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6F:7A:E6:6A:22:D7:AE:F1:60:DB:EA:85:01:38:98:EE:3B:0F:14
            X509v3 Authority Key Identifier:
                keyid:50:63:20:FB:69:AC:10:25:17:8F:C2:5A:E5:8C:93:B0:BA:04:A7:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/506320FB69AC1025178FC25AE58C93B0BA04A7B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B5CA50EE6F8DB61C9EFFD72F30B7B2AF171D2EE674F6A991FAA770707B27F9C/0/3230302e332e302e302f32342d3234203d3e20323633313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:46:ee:61:6b:a9:2d:21:44:d6:29:9b:d2:12:45:05:6f:4a:
         48:90:0a:2f:5c:84:f2:1f:b6:d9:8d:3a:10:4c:50:8e:4f:ae:
         71:7f:a9:f4:df:4c:d1:b2:a5:d7:15:e3:96:e9:55:4a:5c:fb:
         d5:45:13:40:6e:de:68:24:67:4a:a4:a2:79:dc:13:78:2f:07:
         80:ea:40:d0:1d:3a:67:59:2b:4b:13:e2:12:1f:f2:92:c3:cb:
         51:cf:ad:a7:45:73:3c:5b:c3:6a:bb:4c:17:d6:cb:31:cc:bc:
         3e:e6:dd:ba:f2:e5:57:e1:25:5e:36:30:31:01:f3:91:61:4d:
         92:05:6c:79:4e:00:f9:b0:6f:95:68:df:c2:95:be:13:ca:a5:
         f6:41:f6:15:d1:a6:f0:e5:b5:12:5b:70:40:37:93:2d:35:43:
         0d:79:e6:48:65:be:26:3f:35:b7:36:68:44:74:3d:16:38:4b:
         d2:90:63:05:d9:8d:22:78:75:93:6d:41:d8:42:9e:8b:55:b0:
         68:f6:82:e8:f9:4c:e2:c5:57:96:8a:62:96:bc:07:e9:4d:d7:
         30:6f:1d:df:4c:b3:5a:72:25:37:60:12:18:72:e4:a9:e6:cf:
         ff:10:03:e6:14:79:b6:ce:2a:2f:35:f7:0f:c7:90:6f:c3:e1:
         fa:de:3f:e5
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUcpO3GkLT/cnmY+SQbB/15tmZE+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA2MzIwRkI2OUFDMTAyNTE3OEZDMjVBRTU4QzkzQjBC
QTA0QTdCNDAeFw0yNTAyMjAxNzA1MjdaFw0yNjAyMTkxNzEwMjdaMDMxMTAvBgNV
BAMTKDY1NkY3QUU2NkEyMkQ3QUVGMTYwREJFQTg1MDEzODk4RUUzQjBGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT4TL64UQWb332IVb/dDKKue7G
2Yz1zerLGNer/Q7nzSUzumx3+Va6KrRM3Kqvhkl4X5uaggAAcAE4N8yNkUcCZdpK
BuMlFlrc36nnT05gtg36b7Ke2h10ooJXIpmcYcoxLzhyH/WOxWLCSqe1I+QZFFN7
STqCHSOc+tHV20iccgvanJ+PYry6q8TtysbbQz2QYYC9oDXTYUGs/rCRrH9fZXti
q2A0O5FcQ99ovl0ikd+Cq2i6xmh4sXAca3sWX1OVKZw2i7m6JAHXsCHQRi+5rdr4
UEJ2Xi0dJaqQaC0vlEsuCNepaMQEwfm0xOL5rybxBbNozPR215OBJy9Qhl8pAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUZW965moi167xYNvqhQE4mO47DxQwHwYDVR0j
BBgwFoAUUGMg+2msECUXj8Ja5YyTsLoEp7QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QjVDQTUwRUU2RjhEQjYxQzlFRkZENzJGMzBCN0IyQUYx
NzFEMkVFNjc0RjZBOTkxRkFBNzcwNzA3QjI3RjlDLzAvNTA2MzIwRkI2OUFDMTAy
NTE3OEZDMjVBRTU4QzkzQjBCQTA0QTdCNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81MDYzMjBGQjY5QUMxMDI1MTc4
RkMyNUFFNThDOTNCMEJBMDRBN0I0LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0I1Q0E1MEVFNkY4REI2MUM5RUZGRDcyRjMwQjdCMkFGMTcxRDJFRTY3
NEY2QTk5MUZBQTc3MDcwN0IyN0Y5Qy8wLzMyMzAzMDJlMzMyZTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNjMzMzEzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyAMAMA0GCSqG
SIb3DQEBCwUAA4IBAQAxRu5ha6ktIUTWKZvSEkUFb0pIkAovXITyH7bZjToQTFCO
T65xf6n030zRsqXXFeOW6VVKXPvVRRNAbt5oJGdKpKJ53BN4LweA6kDQHTpnWStL
E+ISH/KSw8tRz62nRXM8W8Nqu0wX1ssxzLw+5t268uVX4SVeNjAxAfORYU2SBWx5
TgD5sG+VaN/Clb4TyqX2QfYV0abw5bUSW3BAN5MtNUMNeeZIZb4mPzW3NmhEdD0W
OEvSkGMF2Y0ieHWTbUHYQp6LVbBo9oLo+UzixVeWimKWvAfpTdcwbx3fTLNaciU3
YBIYcuSp5s//EAPmFHm2ziovNfcPx5Bvw+H63j/l
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:13 2025 by rpki-client