Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133392e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3133392e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          zeUjdpdyVCp+Fu5DE1T4WJbGFz0CDOu3wkHarqVQdxo=
Subject key identifier:   35:06:86:E2:35:43:7E:AB:AF:E2:08:15:20:3B:15:E1:BB:7D:54:25
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       0C68B84CC5ADECC9D0659C09C927F73392B45DDA
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133392e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:34 +0000
ROA not before:           Tue 04 Feb 2025 18:33:34 +0000
ROA not after:            Tue 03 Feb 2026 18:38:34 +0000
asID:                     20299
IP address blocks:        200.30.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:68:b8:4c:c5:ad:ec:c9:d0:65:9c:09:c9:27:f7:33:92:b4:5d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:34 2025 GMT
            Not After : Feb  3 18:38:34 2026 GMT
        Subject: CN=350686E235437EABAFE20815203B15E1BB7D5425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:30:cc:7a:4b:3d:9f:d1:aa:a4:16:d0:51:34:
                    9f:72:7c:df:2c:3c:4c:78:a4:37:3a:d0:45:d8:31:
                    db:40:c8:79:db:79:2b:e3:8e:2c:3a:dc:d3:a7:b5:
                    15:90:0b:96:3c:ea:dc:71:cb:50:3c:fa:c6:63:8d:
                    de:99:a5:95:c8:28:4f:17:b1:e1:ca:8d:74:3e:37:
                    76:b8:1b:24:17:66:71:78:6b:5d:96:89:52:94:42:
                    bb:52:32:19:3e:a6:8a:49:58:48:1e:c6:74:90:65:
                    f8:e1:ed:e3:a7:49:67:3e:cc:c9:38:a3:bd:1b:77:
                    2b:d1:64:7f:ca:d5:6e:84:d5:7d:bc:58:ef:dc:bd:
                    64:1c:6b:ae:31:7d:f6:e9:07:fd:a4:b8:2f:03:ff:
                    7e:3b:66:84:52:31:db:ed:e9:63:3a:29:14:c5:56:
                    8c:9e:46:74:53:af:b9:f3:71:fb:bc:7e:7d:da:b1:
                    d0:a0:d9:7c:58:e4:5c:d5:eb:96:2b:80:64:cd:c0:
                    0f:45:e2:a8:52:59:f0:dd:c6:84:5e:7d:15:0e:3e:
                    1b:a6:25:7d:94:bf:33:75:44:89:0c:4b:d9:39:40:
                    4a:64:53:9f:ac:b8:6f:13:13:76:e9:b8:a8:ae:25:
                    af:8c:7c:49:a2:cf:44:70:d5:1e:45:7a:f4:f5:e0:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:06:86:E2:35:43:7E:AB:AF:E2:08:15:20:3B:15:E1:BB:7D:54:25
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3133392e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:98:86:9d:62:7b:c0:cd:9a:8c:c2:1d:1f:01:4f:d7:54:16:
         ca:84:da:50:95:e3:5c:2d:65:0f:5c:a6:3d:03:eb:e6:8b:cb:
         17:4a:7d:9c:b2:0c:ca:df:a4:dc:ea:9d:48:2b:51:7e:0f:c0:
         f6:33:52:6d:f7:d7:88:95:ea:99:d5:76:01:38:21:5d:cb:2d:
         82:da:04:8b:fd:0f:b5:07:8f:4a:35:d2:31:e5:f2:4f:73:c0:
         99:a3:77:26:59:7c:ec:49:e6:10:1a:39:d3:9b:97:e9:09:83:
         5e:ab:1a:f2:52:2b:f7:34:3d:0d:fb:58:4c:75:30:cb:c4:3d:
         26:fc:0e:1a:91:ab:81:de:20:a2:04:cf:05:4b:68:69:99:0d:
         03:a3:ba:f9:b2:6a:21:d7:ea:78:f6:2b:0c:f3:60:43:32:fc:
         af:e1:17:e9:5b:a2:45:c8:e0:2f:9f:32:0c:fa:44:6b:da:71:
         01:25:8c:3d:85:f1:2e:50:4e:05:4e:59:35:ef:39:e9:3c:9b:
         59:79:14:c4:93:47:76:d4:4b:82:f0:53:42:2d:91:af:1e:51:
         f7:9d:99:a3:44:41:ac:29:60:d0:d7:85:62:38:8d:e2:63:ea:
         5c:e0:34:9c:04:3e:2f:ac:b1:5b:d4:7c:64:bb:24:b2:1a:46:
         7f:73:b1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:23 2025 by rpki-client