Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa
File:                     3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa (raw, json)
Hash identifier:          qdctlIvlOqBCpAfinS8Ln33GRnQFZS21xezFQUEQ4gY=
Subject key identifier:   24:A6:A2:51:C9:11:F9:B1:4B:74:F6:8A:C4:1D:89:C8:CC:DF:60:07
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       3EC28178F39A8980E1EA0661E22A6E6800D60923
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa
Signing time:             Tue 04 Feb 2025 18:38:41 +0000
ROA not before:           Tue 04 Feb 2025 18:33:41 +0000
ROA not after:            Tue 03 Feb 2026 18:38:41 +0000
asID:                     262206
IP address blocks:        200.30.158.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:c2:81:78:f3:9a:89:80:e1:ea:06:61:e2:2a:6e:68:00:d6:09:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:41 2025 GMT
            Not After : Feb  3 18:38:41 2026 GMT
        Subject: CN=24A6A251C911F9B14B74F68AC41D89C8CCDF6007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:45:52:22:40:fc:58:bc:83:6b:27:d5:ff:
                    31:0a:19:a9:0d:5a:78:78:7d:4e:3b:e9:43:a2:5c:
                    46:a5:c2:cc:ef:99:8d:c8:15:53:c3:6f:e7:6e:82:
                    e9:6a:aa:fb:04:90:0b:4c:9d:65:5e:9a:69:a8:52:
                    28:69:32:a5:68:e5:06:e9:57:01:dd:91:fb:78:08:
                    0e:07:81:5e:2b:8f:b0:06:1e:41:ae:02:87:81:6f:
                    92:ad:47:22:30:e5:40:90:4e:73:27:0d:a5:6e:fe:
                    00:72:3a:a4:81:f9:d5:f2:95:96:16:25:54:87:26:
                    f6:96:c0:4e:9d:c3:b5:71:67:1a:29:90:66:b9:a2:
                    61:45:b9:70:18:86:ea:02:9c:c5:db:82:d7:db:2c:
                    6d:81:4f:d1:f2:9b:fc:a1:cd:4b:12:3a:90:38:61:
                    b4:58:9a:88:18:c2:9b:13:b1:06:f4:ae:ec:4a:bb:
                    39:ca:82:4c:ee:68:a1:cd:5b:a7:af:55:0d:3b:a5:
                    80:77:33:9c:b0:33:6e:c0:00:8f:18:0b:1c:54:34:
                    e5:28:53:41:4d:9e:d1:18:f4:da:57:ee:87:2b:14:
                    32:42:cd:2a:49:d8:54:9d:0e:67:f3:e6:43:84:cf:
                    8f:33:fc:fa:6a:ee:50:f9:eb:e3:80:14:08:b5:3b:
                    6c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A6:A2:51:C9:11:F9:B1:4B:74:F6:8A:C4:1D:89:C8:CC:DF:60:07
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3135382e302f32342d3234203d3e20323632323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:5c:06:b2:c0:4d:78:e1:cb:f2:34:0c:45:02:e2:21:53:
         03:43:81:4a:98:67:3c:49:35:02:96:9b:76:9b:48:a6:ca:d7:
         bf:30:53:ce:04:bc:43:f0:c2:d3:95:24:fe:36:9d:1b:f3:1b:
         c3:7a:bc:af:f9:41:ab:f0:5a:68:23:76:b0:92:2a:c8:30:83:
         8f:d1:4f:33:c2:8d:6c:21:11:21:7b:76:5a:91:1c:e3:c3:59:
         21:b4:0c:d1:41:ed:35:d2:73:09:5a:55:b5:b1:e2:4d:a5:8e:
         59:8a:ae:a7:d8:34:91:6d:4e:1f:59:81:ec:36:25:9c:9e:83:
         28:79:b9:c7:85:49:71:6b:61:8a:ab:99:5f:9a:70:29:b5:63:
         69:17:e6:b4:5d:aa:cc:16:cd:05:91:78:cf:a1:c7:6d:71:60:
         98:5e:3d:36:9a:27:e4:b0:a8:5a:78:a5:2a:0a:49:63:8e:8c:
         9b:0f:46:3b:ce:e5:92:89:ff:54:fe:e7:c7:ba:73:a6:8a:a4:
         71:91:d1:87:5a:05:e3:e2:6c:9f:ec:3f:59:11:0b:a4:e5:e1:
         17:59:8e:92:68:56:95:0d:4a:d1:5c:4b:66:1f:5f:b8:4f:6c:
         2a:6a:4c:7c:8f:0a:d8:f9:33:57:d0:25:2c:ea:3b:99:41:98:
         67:6b:83:39
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPsKBePOaiYDh6gZh4ipuaADWCSMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNTAyMDQxODMzNDFaFw0yNjAyMDMxODM4NDFaMDMxMTAvBgNV
BAMTKDI0QTZBMjUxQzkxMUY5QjE0Qjc0RjY4QUM0MUQ4OUM4Q0NERjYwMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAhUVSIkD8WLyDayfV/zEKGakN
Wnh4fU476UOiXEalwszvmY3IFVPDb+dugulqqvsEkAtMnWVemmmoUihpMqVo5Qbp
VwHdkft4CA4HgV4rj7AGHkGuAoeBb5KtRyIw5UCQTnMnDaVu/gByOqSB+dXylZYW
JVSHJvaWwE6dw7VxZxopkGa5omFFuXAYhuoCnMXbgtfbLG2BT9Hym/yhzUsSOpA4
YbRYmogYwpsTsQb0ruxKuznKgkzuaKHNW6evVQ07pYB3M5ywM27AAI8YCxxUNOUo
U0FNntEY9NpX7ocrFDJCzSpJ2FSdDmfz5kOEz48z/Ppq7lD56+OAFAi1O2y1AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUJKaiUckR+bFLdPaKxB2JyMzfYAcwHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyB6e
MA0GCSqGSIb3DQEBCwUAA4IBAQBYS1wGssBNeOHL8jQMRQLiIVMDQ4FKmGc8STUC
lpt2m0imyte/MFPOBLxD8MLTlST+Np0b8xvDeryv+UGr8FpoI3awkirIMIOP0U8z
wo1sIREhe3ZakRzjw1khtAzRQe010nMJWlW1seJNpY5Ziq6n2DSRbU4fWYHsNiWc
noMoebnHhUlxa2GKq5lfmnAptWNpF+a0XarMFs0FkXjPocdtcWCYXj02mifksKha
eKUqCkljjoybD0Y7zuWSif9U/ufHunOmiqRxkdGHWgXj4myf7D9ZEQuk5eEXWY6S
aFaVDUrRXEtmH1+4T2wqakx8jwrY+TNX0CUs6juZQZhna4M5
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:46 2025 by rpki-client