Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3135342e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          HhNC+zGSw2FJ4V0ZluBF0bRIg8N9dZ6kvIj8Rg5Hp5M=
Subject key identifier:   CE:DE:D8:77:CB:9D:A7:F3:ED:0F:6E:FD:84:34:2E:CB:24:17:92:35
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       16E8082B0DABD79B15DC99C88FD785F13CA6A916
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:29 +0000
ROA not before:           Tue 04 Feb 2025 18:33:29 +0000
ROA not after:            Tue 03 Feb 2026 18:38:29 +0000
asID:                     20299
IP address blocks:        200.30.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e8:08:2b:0d:ab:d7:9b:15:dc:99:c8:8f:d7:85:f1:3c:a6:a9:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:29 2025 GMT
            Not After : Feb  3 18:38:29 2026 GMT
        Subject: CN=CEDED877CB9DA7F3ED0F6EFD84342ECB24179235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:55:04:01:ed:b6:00:b3:0f:9a:01:3c:0a:ce:
                    5e:2b:1f:9b:41:76:63:00:81:fd:39:06:97:08:79:
                    16:c3:f1:fc:f2:64:50:25:b6:04:a6:5e:b8:b8:fa:
                    14:e9:f2:3f:4c:98:b3:dd:f0:76:6f:22:c6:95:e6:
                    83:5b:76:10:db:be:85:64:24:3d:66:89:0e:7f:73:
                    b3:a0:96:df:be:83:20:51:7c:ef:9c:d9:1c:5d:d4:
                    56:10:22:3d:c2:f3:ca:b7:f4:6e:07:f3:e2:ea:45:
                    57:14:c6:25:a6:5d:af:53:ae:37:0d:0d:7d:da:fa:
                    f9:3a:71:55:23:dc:6d:16:d0:ad:21:28:37:3c:53:
                    06:a9:bb:0a:72:2f:0b:c7:01:d3:72:96:80:72:33:
                    33:78:4e:9c:91:a0:e6:55:7e:97:20:b4:ee:26:cc:
                    8c:aa:1a:2f:00:37:17:10:73:13:4b:a9:a7:b8:0a:
                    fe:03:bf:20:69:ae:4d:f2:fd:4f:ce:de:67:c6:3c:
                    46:b2:49:81:15:6d:92:13:bf:8a:2f:bf:e0:ad:4b:
                    75:d2:09:94:95:b5:d1:c3:f5:73:a4:c8:c1:a5:e9:
                    ef:18:86:a9:37:d7:59:51:33:a3:1b:1c:c6:93:85:
                    4f:b0:07:d3:8d:e4:20:88:eb:76:4d:ae:5e:42:4c:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:DE:D8:77:CB:9D:A7:F3:ED:0F:6E:FD:84:34:2E:CB:24:17:92:35
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135342e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0d:cc:6f:10:e4:6f:9d:28:3b:6d:b1:b5:ab:6e:f5:a6:68:
         8f:73:63:90:9a:73:9e:0a:63:04:80:43:a8:b3:3b:6b:9a:77:
         bd:8d:96:83:01:63:a2:6c:a2:e3:e3:2d:1e:36:60:ef:a9:9c:
         c4:70:f4:ad:dc:5e:a6:d1:e3:68:66:96:77:3d:83:b1:bb:3a:
         74:76:b1:82:18:8c:66:2c:fc:32:83:68:eb:a8:b0:fd:5d:c6:
         4c:77:03:a4:1f:c9:d3:56:7f:38:e6:96:7e:4f:38:fb:1e:49:
         ac:01:eb:4a:5c:00:45:26:5e:a5:e5:58:ca:46:1c:7a:c4:a5:
         8d:13:ad:b3:ce:e2:78:29:1c:3a:61:c9:25:92:9a:ea:04:f0:
         ab:90:75:4a:22:81:dd:f4:a6:5f:08:09:05:ec:39:ce:7e:70:
         ed:e3:b2:e6:a4:e1:e9:52:64:b1:83:04:f3:bc:b5:83:2b:7b:
         07:15:36:49:ed:45:b1:1f:c5:b5:cf:7a:83:48:bf:aa:62:ed:
         5d:8d:43:5e:21:df:8f:ad:f6:28:e1:9f:9b:92:88:33:5a:1e:
         d6:1f:96:28:84:4b:15:99:84:2a:55:e1:8a:73:65:e0:37:79:
         ba:8d:8d:b5:d1:dd:55:02:79:85:62:0b:42:bc:34:d8:78:5c:
         ab:b4:a4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:26 2025 by rpki-client