Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa
File:                     AS28052.roa (raw, json)
Hash identifier:          0ltfobnKJKsvQvyps1a53HtNwAIceNdrcCbE6IVAowQ=
Subject key identifier:   EB:84:5D:7D:48:D2:5F:A6:7D:DF:60:4F:43:A1:49:FC:AF:79:57:F4
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       3FDE9D74251F1AA4866EBCB42A6CAA76CF7AD03F
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa
Signing time:             Tue 04 Feb 2025 20:06:56 +0000
ROA not before:           Tue 04 Feb 2025 20:01:56 +0000
ROA not after:            Tue 03 Feb 2026 20:06:56 +0000
asID:                     28052
IP address blocks:        200.42.13.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:de:9d:74:25:1f:1a:a4:86:6e:bc:b4:2a:6c:aa:76:cf:7a:d0:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:01:56 2025 GMT
            Not After : Feb  3 20:06:56 2026 GMT
        Subject: CN=EB845D7D48D25FA67DDF604F43A149FCAF7957F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:34:3d:50:1c:26:2c:48:97:e2:ae:82:5d:
                    b2:cc:c5:b8:cc:50:93:c2:14:a5:d8:8a:11:73:a1:
                    99:4d:c6:84:af:9f:c4:8a:03:ec:71:36:79:50:24:
                    6f:83:fe:3e:b1:92:eb:8b:67:d2:5a:f0:70:27:50:
                    b0:3f:c3:0f:aa:c9:66:cd:c9:fe:a6:b0:a6:0d:68:
                    77:3d:5b:b0:bc:91:14:36:e1:0c:d8:a7:66:37:1f:
                    77:01:01:3b:5d:0b:bd:53:6d:ef:c0:d2:36:35:e9:
                    12:32:82:a0:26:eb:6e:ed:06:d4:90:31:78:32:ca:
                    e6:bb:2c:c6:3d:d3:19:22:86:19:c3:01:47:c6:65:
                    a9:04:3f:92:2c:a1:3c:be:77:8f:41:01:58:e7:bd:
                    5f:36:e1:b2:e0:8e:ae:93:34:78:45:ca:79:49:d7:
                    91:55:91:e4:2c:09:b1:1e:24:92:08:13:f7:d6:5f:
                    90:a1:9a:a1:a1:0a:c6:05:5c:39:aa:e0:da:b5:89:
                    40:d4:2a:33:74:26:11:fc:cc:6c:ed:b4:68:53:a5:
                    6d:3b:b3:48:41:20:2f:ac:22:01:ca:56:8a:d0:c1:
                    17:db:28:49:63:9c:f7:4b:b8:b0:f9:f2:c3:60:df:
                    f0:26:db:9c:69:64:97:55:fc:13:16:b4:65:97:8d:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:84:5D:7D:48:D2:5F:A6:7D:DF:60:4F:43:A1:49:FC:AF:79:57:F4
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS28052.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.42.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:2a:c3:05:9a:65:fe:20:ce:2b:a2:96:b9:cb:25:01:0a:
         6d:43:4a:09:4c:30:2a:0a:75:a7:d0:2c:10:1b:c5:fa:7f:da:
         2e:a5:e8:17:c9:a3:72:19:26:24:42:d6:50:ce:1a:21:23:1f:
         50:84:8b:03:da:4d:88:e0:e4:ea:bd:33:21:fc:99:05:85:ed:
         47:fb:ca:26:d7:fc:6e:47:be:db:96:95:97:e5:9e:87:45:77:
         8d:e3:38:e3:f1:e9:74:50:91:6d:0d:cb:e7:41:97:85:89:30:
         e9:44:38:c5:39:a0:50:47:69:66:93:10:27:e1:12:05:95:ab:
         50:4f:97:b1:5e:4d:e0:b7:a0:7f:c5:2c:ee:e3:41:57:18:92:
         5d:d2:eb:ee:e9:4c:5e:18:b7:7c:14:5d:5d:49:3c:e0:c2:e4:
         58:4d:d1:5b:d6:7a:c2:06:a6:de:89:fb:d9:92:ce:ca:8e:3f:
         38:fe:4f:58:5a:2c:de:39:0a:da:e7:12:13:c9:0a:71:89:37:
         ab:1a:36:2b:c1:b9:7d:cc:d1:dc:d7:3f:56:a1:23:39:ef:e5:
         5b:cf:75:47:61:75:af:20:32:df:8c:42:d4:15:7c:1b:e2:69:
         2d:13:74:b3:ec:41:00:f0:a0:55:c3:6c:99:53:e2:b0:2b:06:
         1d:89:71:dd
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUP96ddCUfGqSGbry0Kmyqds960D8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTAyMDQyMDAxNTZaFw0yNjAyMDMyMDA2NTZaMDMxMTAvBgNV
BAMTKEVCODQ1RDdENDhEMjVGQTY3RERGNjA0RjQzQTE0OUZDQUY3OTU3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXjTQ9UBwmLEiX4q6CXbLMxbjM
UJPCFKXYihFzoZlNxoSvn8SKA+xxNnlQJG+D/j6xkuuLZ9Ja8HAnULA/ww+qyWbN
yf6msKYNaHc9W7C8kRQ24QzYp2Y3H3cBATtdC71Tbe/A0jY16RIygqAm627tBtSQ
MXgyyua7LMY90xkihhnDAUfGZakEP5IsoTy+d49BAVjnvV824bLgjq6TNHhFynlJ
15FVkeQsCbEeJJIIE/fWX5ChmqGhCsYFXDmq4Nq1iUDUKjN0JhH8zGzttGhTpW07
s0hBIC+sIgHKVorQwRfbKEljnPdLuLD58sNg3/Am25xpZJdV/BMWtGWXjQ7nAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQU64RdfUjSX6Z932BPQ6FJ/K95V/QwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVMyODA1Mi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgqDTAN
BgkqhkiG9w0BAQsFAAOCAQEAOrQqwwWaZf4gziuilrnLJQEKbUNKCUwwKgp1p9As
EBvF+n/aLqXoF8mjchkmJELWUM4aISMfUISLA9pNiODk6r0zIfyZBYXtR/vKJtf8
bke+25aVl+Weh0V3jeM44/HpdFCRbQ3L50GXhYkw6UQ4xTmgUEdpZpMQJ+ESBZWr
UE+XsV5N4Legf8Us7uNBVxiSXdLr7ulMXhi3fBRdXUk84MLkWE3RW9Z6wgam3on7
2ZLOyo4/OP5PWFos3jkK2ucSE8kKcYk3qxo2K8G5fczR3Nc/VqEjOe/lW891R2F1
ryAy34xC1BV8G+JpLRN0s+xBAPCgVcNsmVPisCsGHYlx3Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:10:37 2025 by rpki-client