Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa
File:                     3230302e37352e3132382e302f32302d3234203d3e203131353632.roa (raw, json)
Hash identifier:          nutLPkPlDAPwB2JVnwx6Bev85OlVSvYu8LtaUZXriRY=
Subject key identifier:   08:A2:92:C4:75:BB:AE:BC:69:9C:C3:47:92:F0:37:64:A0:01:34:EB
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       3EAB1AF2FEDDB279EE95FC401046C46EE106F111
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa
Signing time:             Tue 04 Feb 2025 18:00:51 +0000
ROA not before:           Tue 04 Feb 2025 17:55:51 +0000
ROA not after:            Tue 03 Feb 2026 18:00:51 +0000
asID:                     11562
IP address blocks:        200.75.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ab:1a:f2:fe:dd:b2:79:ee:95:fc:40:10:46:c4:6e:e1:06:f1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Feb  4 17:55:51 2025 GMT
            Not After : Feb  3 18:00:51 2026 GMT
        Subject: CN=08A292C475BBAEBC699CC34792F03764A00134EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:80:91:b7:46:22:77:83:03:50:05:21:4f:c2:
                    bb:3c:cf:20:e7:50:61:6f:5c:12:55:c5:cc:9d:20:
                    5d:b9:ee:7b:9d:a5:85:1b:0b:9d:f9:87:f6:18:5c:
                    0c:59:be:62:0e:44:2b:85:bf:73:49:46:c2:b5:aa:
                    a0:84:5a:57:f4:0a:c1:2b:a2:b2:01:4f:2a:bf:e8:
                    2b:70:1c:8c:8f:c4:6e:6a:08:9c:a7:a9:b2:f5:c2:
                    ea:cf:80:26:9d:40:8a:be:68:4e:7d:a4:a0:28:98:
                    93:a9:8b:58:88:f6:85:6a:eb:52:1b:25:b9:95:68:
                    84:94:74:0b:83:05:04:17:22:ed:81:40:05:ef:0f:
                    12:b8:86:0d:c4:19:c0:35:b2:f2:78:46:79:5c:9c:
                    94:37:5f:7d:c0:41:f0:05:14:7c:7a:4e:47:a4:aa:
                    dc:91:9e:00:bd:d0:9c:52:19:a7:19:23:46:41:cb:
                    c0:4f:f4:bb:09:f7:b6:77:ba:56:22:d4:1d:44:84:
                    31:cf:43:1b:71:0c:88:32:81:47:d7:89:2e:b9:63:
                    7b:3b:f3:a7:dd:12:0a:c1:dc:37:13:35:49:f9:3e:
                    e0:8e:75:03:e6:43:0c:1d:ab:d5:52:40:77:c2:f9:
                    57:56:d5:34:be:3c:eb:b9:0b:ac:00:21:5d:90:40:
                    e0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A2:92:C4:75:BB:AE:BC:69:9C:C3:47:92:F0:37:64:A0:01:34:EB
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3230302e37352e3132382e302f32302d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:0f:3a:c3:08:33:f9:1a:cd:56:7d:2c:60:26:cf:4a:3a:
         60:96:33:8f:64:d8:4f:91:db:9b:d1:ae:c8:83:ac:c0:fe:e2:
         61:0d:a2:5e:e7:19:e6:06:01:da:08:ea:68:b4:6e:59:9d:9a:
         02:6d:10:b8:4e:cf:51:da:53:c1:68:0c:49:34:3e:1a:f6:20:
         84:14:b4:d2:2b:1e:d7:38:c1:92:22:06:2d:56:32:65:91:04:
         ca:69:34:ea:d6:a1:16:cb:93:b2:19:2c:78:cb:ea:15:46:af:
         44:47:55:66:98:7d:1f:e1:fb:c5:17:10:9c:3e:ef:f5:6d:23:
         91:01:d1:f9:7b:fa:ca:66:c9:6b:da:af:b0:a6:1d:e4:98:3a:
         90:0f:51:b6:f8:73:4f:19:0e:b0:38:8e:98:9a:42:7e:d3:92:
         df:c0:56:2b:1e:83:4f:27:f9:eb:ec:2c:83:65:e5:6b:77:84:
         8f:34:b3:ec:a6:d0:25:a6:20:9f:a8:eb:07:94:22:8b:7f:5a:
         cb:da:f2:94:53:75:37:06:25:62:73:ce:28:01:9a:f8:c5:40:
         a8:8d:87:e5:38:e8:fc:29:0c:23:58:52:3d:95:47:36:2d:11:
         dc:7f:36:2b:fc:aa:78:94:cc:5c:f9:9b:29:0f:a3:4e:69:9a:
         91:6f:55:a9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPqsa8v7dsnnulfxAEEbEbuEG8REwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQ2QTdBNjEwNjdDQURENjU5MjkxOTFGMzU1NjAyMkJE
MUQyRTA5QTAeFw0yNTAyMDQxNzU1NTFaFw0yNjAyMDMxODAwNTFaMDMxMTAvBgNV
BAMTKDA4QTI5MkM0NzVCQkFFQkM2OTlDQzM0NzkyRjAzNzY0QTAwMTM0RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgJG3RiJ3gwNQBSFPwrs8zyDn
UGFvXBJVxcydIF257nudpYUbC535h/YYXAxZvmIORCuFv3NJRsK1qqCEWlf0CsEr
orIBTyq/6CtwHIyPxG5qCJynqbL1wurPgCadQIq+aE59pKAomJOpi1iI9oVq61Ib
JbmVaISUdAuDBQQXIu2BQAXvDxK4hg3EGcA1svJ4RnlcnJQ3X33AQfAFFHx6Tkek
qtyRngC90JxSGacZI0ZBy8BP9LsJ97Z3ulYi1B1EhDHPQxtxDIgygUfXiS65Y3s7
86fdEgrB3DcTNUn5PuCOdQPmQwwdq9VSQHfC+VdW1TS+POu5C6wAIV2QQOCZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUCKKSxHW7rrxpnMNHkvA3ZKABNOswHwYDVR0j
BBgwFoAUjWp6YQZ8rdZZKRkfNVYCK9HS4JowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjEzQkVBQzhDMjVCMEFERDRCQzI0MUJCNkE1REJDOTA3
MzgzQTQ1OEQxM0UxMjdFRTUxMzcwNDRCQUI1ODJBLzAvOEQ2QTdBNjEwNjdDQURE
NjU5MjkxOTFGMzU1NjAyMkJEMUQyRTA5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDZBN0E2MTA2N0NBREQ2NTky
OTE5MUYzNTU2MDIyQkQxRDJFMDlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTIxM0JFQUM4QzI1QjBBREQ0QkMyNDFCQjZBNURCQzkwNzM4M0E0NThE
MTNFMTI3RUU1MTM3MDQ0QkFCNTgyQS8wLzMyMzAzMDJlMzczNTJlMzEzMjM4MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzEzMTM1MzYzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMhLgDAN
BgkqhkiG9w0BAQsFAAOCAQEAr1sPOsMIM/kazVZ9LGAmz0o6YJYzj2TYT5Hbm9Gu
yIOswP7iYQ2iXucZ5gYB2gjqaLRuWZ2aAm0QuE7PUdpTwWgMSTQ+GvYghBS00ise
1zjBkiIGLVYyZZEEymk06tahFsuTshkseMvqFUavREdVZph9H+H7xRcQnD7v9W0j
kQHR+Xv6ymbJa9qvsKYd5Jg6kA9RtvhzTxkOsDiOmJpCftOS38BWKx6DTyf56+ws
g2Xla3eEjzSz7KbQJaYgn6jrB5Qii39ay9rylFN1NwYlYnPOKAGa+MVAqI2H5Tjo
/CkMI1hSPZVHNi0R3H82K/yqeJTMXPmbKQ+jTmmakW9VqQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:09 2025 by rpki-client