Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3136342e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          7pAXjAzseO2GTtbkYsx5olXC7mPJhcs2lD8r2Q091tk=
Subject key identifier:   84:E3:19:5C:39:AD:F4:2C:D9:7E:74:D0:60:C9:87:77:FF:8A:9E:61
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       707434A6CE26706758E5ABD4E47C820ADE568826
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 04 Feb 2025 19:59:21 +0000
ROA not before:           Tue 04 Feb 2025 19:54:21 +0000
ROA not after:            Tue 03 Feb 2026 19:59:21 +0000
asID:                     22541
IP address blocks:        200.75.164.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:74:34:a6:ce:26:70:67:58:e5:ab:d4:e4:7c:82:0a:de:56:88:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Feb  4 19:54:21 2025 GMT
            Not After : Feb  3 19:59:21 2026 GMT
        Subject: CN=84E3195C39ADF42CD97E74D060C98777FF8A9E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:13:55:06:29:04:07:c2:71:cb:26:7d:33:
                    2a:f4:3b:3c:de:8a:38:26:63:ff:38:41:10:e3:8c:
                    9b:2f:f3:5b:ef:a2:31:85:e9:36:3c:16:7d:b1:14:
                    40:1f:23:99:11:bb:4e:05:e2:52:13:46:88:c0:e4:
                    0c:43:a0:b5:81:9d:bc:3d:db:ae:0b:96:15:74:b4:
                    4d:0f:8f:32:84:79:6a:73:37:4e:bf:c0:64:52:bb:
                    d2:07:8c:88:5a:cd:cc:e4:27:c6:ef:f1:ea:c6:a6:
                    a5:ef:94:8d:83:6a:3b:a5:44:ad:e0:cd:9f:b4:aa:
                    a8:8e:a9:99:c1:30:42:af:5e:8a:81:0a:d7:49:c5:
                    a9:32:32:79:7e:22:00:05:4d:2f:c4:fa:e0:83:8a:
                    e9:cf:98:0e:c5:3a:6f:74:79:fa:f2:d6:36:fa:8c:
                    9e:d6:65:9b:61:41:ce:b8:87:a9:d2:dd:c8:90:53:
                    25:c4:90:ad:82:43:ac:b4:0a:8b:aa:e8:7d:4a:af:
                    24:09:82:bc:28:e9:86:4a:2a:f9:bb:5c:07:97:f4:
                    97:cb:bf:1b:be:3b:a1:0c:55:02:ca:c0:ab:29:9c:
                    2a:ef:39:cf:b3:e9:8c:d6:d3:0b:82:89:7b:20:3d:
                    98:0f:c4:ff:83:39:13:62:2c:b8:05:aa:95:be:a8:
                    3a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:19:5C:39:AD:F4:2C:D9:7E:74:D0:60:C9:87:77:FF:8A:9E:61
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3136342e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:2c:58:b6:47:d6:37:60:bc:a4:c3:a0:4f:7b:8a:5f:c6:
         3f:bb:39:8e:3d:1a:57:b5:34:4f:43:2c:be:5d:5f:4c:a3:e9:
         15:95:72:96:dd:fe:d2:59:e4:95:e8:f4:0a:e9:7b:59:5a:3a:
         5c:be:f5:62:17:fd:b2:e4:fa:dc:07:6f:66:21:ce:e9:2b:49:
         0d:09:51:e7:73:19:14:1c:70:3b:ed:68:86:d1:6d:31:c2:73:
         28:3d:ab:52:a5:b8:3a:a7:14:62:f4:bc:fa:13:4b:7e:1e:1d:
         12:7c:87:60:8c:48:e2:ed:2d:69:04:3e:82:4d:4b:e1:ec:85:
         99:80:99:5e:e1:80:0a:bb:52:26:f2:d8:98:4a:6d:85:1a:95:
         70:d7:8d:70:e6:25:9d:a3:3a:89:8f:54:1a:76:65:62:1e:3d:
         ea:e8:ec:2e:7b:e4:ba:58:7b:4b:5a:ca:e3:73:7e:c8:99:0d:
         55:2c:be:86:80:5f:d0:47:de:28:9b:ad:98:ef:59:1c:dc:3b:
         a9:d2:24:80:d8:63:70:17:3a:8d:cd:ef:53:9a:98:7e:36:d3:
         f0:42:f9:e6:32:a4:31:a0:d0:5a:49:f2:79:d7:fd:79:12:71:
         74:06:7f:95:7f:16:3c:f8:5a:0e:a0:91:5e:4b:31:1d:ab:2a:
         c3:aa:b5:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUcHQ0ps4mcGdY5avU5HyCCt5WiCYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjIwRDFGREJCRDQ1N0NBMEY5Q0NGQzYzQThCODVDOTlB
ODE5QUYzRDAeFw0yNTAyMDQxOTU0MjFaFw0yNjAyMDMxOTU5MjFaMDMxMTAvBgNV
BAMTKDg0RTMxOTVDMzlBREY0MkNEOTdFNzREMDYwQzk4Nzc3RkY4QTlFNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnXRNVBikEB8JxyyZ9Myr0Ozze
ijgmY/84QRDjjJsv81vvojGF6TY8Fn2xFEAfI5kRu04F4lITRojA5AxDoLWBnbw9
264LlhV0tE0PjzKEeWpzN06/wGRSu9IHjIhazczkJ8bv8erGpqXvlI2DajulRK3g
zZ+0qqiOqZnBMEKvXoqBCtdJxakyMnl+IgAFTS/E+uCDiunPmA7FOm90efry1jb6
jJ7WZZthQc64h6nS3ciQUyXEkK2CQ6y0Couq6H1KryQJgrwo6YZKKvm7XAeX9JfL
vxu+O6EMVQLKwKspnCrvOc+z6YzW0wuCiXsgPZgPxP+DORNiLLgFqpW+qDrPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhOMZXDmt9CzZfnTQYMmHd/+KnmEwHwYDVR0j
BBgwFoAUYg0f271FfKD5zPxjqLhcmagZrz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZBMDM5QjlFQUYxM0FERTgxNzg4MkRENEJCRkZBMkJF
MUQ0OTE3NjRCRjkzODNFQ0VFOTA4QkQyM0Y0Q0YwLzAvNjIwRDFGREJCRDQ1N0NB
MEY5Q0NGQzYzQThCODVDOTlBODE5QUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82MjBEMUZEQkJENDU3Q0EwRjlD
Q0ZDNjNBOEI4NUM5OUE4MTlBRjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQTAzOUI5RUFGMTNBREU4MTc4ODJERDRCQkZGQTJCRTFENDkxNzY0
QkY5MzgzRUNFRTkwOEJEMjNGNENGMC8wLzMyMzAzMDJlMzczNTJlMzEzNjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM1MzQzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMhLpDAN
BgkqhkiG9w0BAQsFAAOCAQEARwwsWLZH1jdgvKTDoE97il/GP7s5jj0aV7U0T0Ms
vl1fTKPpFZVylt3+0lnklej0Cul7WVo6XL71Yhf9suT63AdvZiHO6StJDQlR53MZ
FBxwO+1ohtFtMcJzKD2rUqW4OqcUYvS8+hNLfh4dEnyHYIxI4u0taQQ+gk1L4eyF
mYCZXuGACrtSJvLYmEpthRqVcNeNcOYlnaM6iY9UGnZlYh496ujsLnvkulh7S1rK
43N+yJkNVSy+hoBf0EfeKJutmO9ZHNw7qdIkgNhjcBc6jc3vU5qYfjbT8EL55jKk
MaDQWknyedf9eRJxdAZ/lX8WPPhaDqCRXksxHasqw6q10A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:39:21 2025 by rpki-client