Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa
File:                     3230302e33302e3138392e302f32342d3234203d3e203230323939.roa (raw, json)
Hash identifier:          wb2vhYzu+H3QTRBB7ckT0f6DL6Ag/PoFNhmxmuyyIck=
Subject key identifier:   65:80:B9:4D:E4:34:37:FA:BB:66:DB:D3:EF:DF:7A:94:05:90:10:8A
Certificate issuer:       /CN=FB90888D9D0C05658464274F626D1462AAA70399
Certificate serial:       496FEEC621A601CCA865202AFA5F087BB7120D78
Authority key identifier: FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:38:32 +0000
ROA not before:           Tue 04 Feb 2025 18:33:32 +0000
ROA not after:            Tue 03 Feb 2026 18:38:32 +0000
asID:                     20299
IP address blocks:        200.30.189.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6f:ee:c6:21:a6:01:cc:a8:65:20:2a:fa:5f:08:7b:b7:12:0d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB90888D9D0C05658464274F626D1462AAA70399
        Validity
            Not Before: Feb  4 18:33:32 2025 GMT
            Not After : Feb  3 18:38:32 2026 GMT
        Subject: CN=6580B94DE43437FABB66DBD3EFDF7A940590108A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:86:aa:f1:30:c3:59:97:f5:44:13:73:94:e0:
                    54:21:17:a3:57:41:a6:1d:99:2b:c1:31:af:de:c2:
                    32:a3:61:e2:19:27:e3:1e:ea:43:23:49:0b:fe:7b:
                    cf:f1:2c:6b:b4:31:2e:27:7c:40:76:02:58:b3:cb:
                    4f:da:ff:56:90:b3:d3:7c:7b:7e:23:6f:66:4a:2f:
                    86:8d:bb:6e:c5:6a:6f:74:d2:3d:72:b4:47:6f:20:
                    96:01:80:3c:4f:6d:a4:f1:eb:fa:d6:0a:6f:d3:09:
                    bd:f7:b1:46:e9:e4:40:45:3e:4b:06:61:d2:3c:b4:
                    55:2f:4b:95:e7:ca:ab:dc:fc:43:c4:d9:d9:b9:db:
                    45:15:19:56:46:31:25:b1:19:82:2f:2a:06:65:1b:
                    4c:de:42:5e:8e:61:64:5a:39:cf:4d:9f:c1:28:91:
                    2f:7c:10:00:bc:33:7f:59:83:f1:91:c7:43:40:7d:
                    1d:f4:85:97:52:87:d1:75:30:29:fb:75:a7:09:6a:
                    69:53:5b:3c:15:d6:e7:fb:91:42:93:7f:c1:17:2e:
                    31:7e:03:d1:c3:a4:83:5a:0e:65:63:10:17:c9:46:
                    b0:27:68:d6:c5:df:de:8d:5a:31:d5:f1:16:1d:6b:
                    41:a0:97:6e:f2:f0:3a:59:23:dd:b4:36:fd:95:e6:
                    45:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:80:B9:4D:E4:34:37:FA:BB:66:DB:D3:EF:DF:7A:94:05:90:10:8A
            X509v3 Authority Key Identifier:
                keyid:FB:90:88:8D:9D:0C:05:65:84:64:27:4F:62:6D:14:62:AA:A7:03:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/FB90888D9D0C05658464274F626D1462AAA70399.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FB90888D9D0C05658464274F626D1462AAA70399.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E0C5237EAA1E378E05F33F4BC7C4CC9B6643AB4B34891E382A882779FDF81D7/0/3230302e33302e3138392e302f32342d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:38:e2:49:62:99:dd:fe:17:dd:b3:be:dd:b7:95:a9:61:
         dd:47:76:f2:8f:8f:f8:9c:b4:55:f5:f3:3c:a4:45:cf:60:b3:
         9a:b3:f2:c0:68:5d:65:ca:70:16:d0:74:c3:4c:e2:a8:21:8c:
         0e:41:55:21:8e:5e:23:38:4e:bb:f1:87:dd:9f:b7:0d:2b:fe:
         d3:6d:73:2d:1f:91:a3:69:69:d9:db:44:bc:98:d1:07:e2:34:
         74:6c:da:50:46:46:c0:68:08:ae:70:d3:03:31:be:cb:30:21:
         87:18:56:dd:cd:6e:54:ee:a2:8d:ec:53:2c:51:a0:c3:56:42:
         4e:f0:89:3c:02:8b:bc:91:86:a6:00:e9:d4:80:7f:27:1e:5d:
         c6:e7:19:c9:d0:0d:b4:50:5a:f0:e5:cb:16:8b:ec:cb:0c:c1:
         1f:e5:f1:13:6a:f0:fc:45:27:2c:10:51:9e:d1:79:b8:c4:b8:
         eb:aa:17:1d:b4:d7:97:e4:31:da:be:04:76:6f:7b:9f:ea:a1:
         d5:b2:bb:3c:b1:a6:a8:fd:35:73:65:aa:2b:0d:5f:0f:0b:41:
         d3:b2:ba:ee:9d:51:0f:06:0b:a6:45:77:2c:9f:6d:31:a8:5b:
         28:72:98:4b:d2:3b:80:2e:92:db:28:0a:82:c7:c2:19:cd:1a:
         12:f0:80:ce
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSW/uxiGmAcyoZSAq+l8Ie7cSDXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI5MDg4OEQ5RDBDMDU2NTg0NjQyNzRGNjI2RDE0NjJB
QUE3MDM5OTAeFw0yNTAyMDQxODMzMzJaFw0yNjAyMDMxODM4MzJaMDMxMTAvBgNV
BAMTKDY1ODBCOTRERTQzNDM3RkFCQjY2REJEM0VGREY3QTk0MDU5MDEwOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3hqrxMMNZl/VEE3OU4FQhF6NX
QaYdmSvBMa/ewjKjYeIZJ+Me6kMjSQv+e8/xLGu0MS4nfEB2Alizy0/a/1aQs9N8
e34jb2ZKL4aNu27Fam900j1ytEdvIJYBgDxPbaTx6/rWCm/TCb33sUbp5EBFPksG
YdI8tFUvS5Xnyqvc/EPE2dm520UVGVZGMSWxGYIvKgZlG0zeQl6OYWRaOc9Nn8Eo
kS98EAC8M39Zg/GRx0NAfR30hZdSh9F1MCn7dacJamlTWzwV1uf7kUKTf8EXLjF+
A9HDpINaDmVjEBfJRrAnaNbF396NWjHV8RYda0Ggl27y8DpZI920Nv2V5kUXAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUZYC5TeQ0N/q7ZtvT7996lAWQEIowHwYDVR0j
BBgwFoAU+5CIjZ0MBWWEZCdPYm0UYqqnA5kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTBDNTIzN0VBQTFFMzc4RTA1RjMzRjRCQzdDNENDOUI2
NjQzQUI0QjM0ODkxRTM4MkE4ODI3NzlGREY4MUQ3LzAvRkI5MDg4OEQ5RDBDMDU2
NTg0NjQyNzRGNjI2RDE0NjJBQUE3MDM5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GQjkwODg4RDlEMEMwNTY1ODQ2
NDI3NEY2MjZEMTQ2MkFBQTcwMzk5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0UwQzUyMzdFQUExRTM3OEUwNUYzM0Y0QkM3QzRDQzlCNjY0M0FCNEIz
NDg5MUUzODJBODgyNzc5RkRGODFENy8wLzMyMzAzMDJlMzMzMDJlMzEzODM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgevTAN
BgkqhkiG9w0BAQsFAAOCAQEAfVI44klimd3+F92zvt23lalh3Ud28o+P+Jy0VfXz
PKRFz2CzmrPywGhdZcpwFtB0w0ziqCGMDkFVIY5eIzhOu/GH3Z+3DSv+021zLR+R
o2lp2dtEvJjRB+I0dGzaUEZGwGgIrnDTAzG+yzAhhxhW3c1uVO6ijexTLFGgw1ZC
TvCJPAKLvJGGpgDp1IB/Jx5dxucZydANtFBa8OXLFovsywzBH+XxE2rw/EUnLBBR
ntF5uMS466oXHbTXl+Qx2r4Edm97n+qh1bK7PLGmqP01c2WqKw1fDwtB07K67p1R
DwYLpkV3LJ9tMahbKHKYS9I7gC6S2ygKgsfCGc0aEvCAzg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:58:22 2025 by rpki-client