Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133322e302f32342d3234203d3e203237373432.roa
File:                     3230302e33302e3133322e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          98xo+qw3Xhnl6Lny7FVFIttuKygLjvdL+8MCgqp1jFI=
Subject key identifier:   AF:6A:EF:5D:77:BC:2C:16:25:51:6E:F2:09:FB:D8:78:E6:C2:85:59
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       622FDC85B4BEA492C7C1102A9118499B904C46EC
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133322e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 18:38:40 +0000
ROA not before:           Tue 04 Feb 2025 18:33:40 +0000
ROA not after:            Tue 03 Feb 2026 18:38:40 +0000
asID:                     27742
IP address blocks:        200.30.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2f:dc:85:b4:be:a4:92:c7:c1:10:2a:91:18:49:9b:90:4c:46:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:40 2025 GMT
            Not After : Feb  3 18:38:40 2026 GMT
        Subject: CN=AF6AEF5D77BC2C1625516EF209FBD878E6C28559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:99:2c:4c:be:74:91:7a:3e:e3:0f:9b:3a:
                    b7:50:87:a9:bc:02:8c:66:b5:63:ac:16:af:23:f7:
                    ee:ba:74:df:db:b4:bc:b7:bb:ef:7a:b0:e5:d0:d1:
                    cf:be:3c:5d:3c:9a:35:f5:03:a9:a9:cc:78:f6:ec:
                    e9:c2:a8:8b:d0:9d:7e:4a:df:35:9d:cf:31:95:f0:
                    9f:20:83:93:81:11:83:2a:70:3c:f0:6f:3c:64:90:
                    04:dc:d8:00:dd:57:3f:ac:1e:92:6f:a5:77:d4:31:
                    85:ad:ad:d2:ae:77:1c:0e:d3:d3:76:d3:d9:21:c9:
                    74:ee:c8:14:9c:e7:35:ff:f6:7b:e2:ff:ad:4f:38:
                    b8:d4:1c:bf:39:c4:aa:fc:31:aa:8e:4d:36:d2:4d:
                    9f:fc:59:24:81:f2:5f:6f:c4:98:0d:d0:68:60:08:
                    12:a8:bb:0b:fe:42:cc:be:38:7f:9a:ce:f0:d5:98:
                    b8:5c:5f:bb:dd:04:ff:8f:8b:4b:ef:1a:d3:6d:75:
                    58:05:81:9d:64:c2:b4:4a:8a:1e:cd:48:a2:24:eb:
                    c5:0a:da:5b:1a:5b:64:ac:b8:37:e8:d8:e1:88:ca:
                    fd:61:ba:a6:c6:58:f6:c5:0d:78:6a:73:1c:c3:95:
                    51:d4:8c:f5:35:49:19:1a:eb:78:f4:ef:8e:d6:93:
                    c5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6A:EF:5D:77:BC:2C:16:25:51:6E:F2:09:FB:D8:78:E6:C2:85:59
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133322e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:66:5f:9a:17:ea:1a:d1:0f:34:9a:b8:ef:df:23:ac:86:
         71:3c:6e:3f:d6:c2:65:24:e4:26:31:54:41:d4:93:8f:cd:3b:
         c7:2a:60:0a:0f:4e:30:fe:67:5b:97:c4:a2:48:e9:83:f9:4b:
         5c:1a:e7:03:db:75:11:df:d9:db:e0:64:14:27:e4:bf:9e:89:
         0a:99:b0:d2:8e:a6:5b:55:c7:2f:00:8c:2e:04:31:12:ea:63:
         75:64:cf:3f:84:67:e9:b8:87:1a:2c:fd:a2:cd:93:08:a9:73:
         41:7b:12:e9:ab:c1:e1:07:d6:26:2a:1c:89:7c:0d:d2:e5:96:
         86:d2:ef:19:61:18:f7:84:10:16:f5:9e:0b:78:54:ff:10:64:
         e7:5e:08:03:7f:62:11:9a:23:bf:ad:49:a7:22:72:a6:e6:2b:
         f6:20:48:b0:9b:c9:09:ca:47:e2:8f:08:50:00:70:4d:c6:68:
         d5:46:dc:f2:8d:5c:3c:09:48:aa:2f:4c:ab:80:e5:3b:31:d7:
         d3:3e:8d:ee:82:3b:c8:14:c7:c4:b4:00:95:db:5a:e7:7a:44:
         5b:3b:a8:be:53:26:71:5f:eb:aa:3b:02:3c:bc:1d:c4:45:81:
         f6:c8:9c:2d:18:75:00:da:d9:2b:75:8f:4d:76:08:75:8c:b2:
         d4:ec:c2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:30 2025 by rpki-client