Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa
File:                     3230302e31332e31362e302f32302d3234203d3e203139333332.roa (raw, json)
Hash identifier:          ej0SYgYgA2tyHeAZ9TQDyeFcJH3o3lj6YHFfBhxINzc=
Subject key identifier:   50:65:12:F8:C7:A5:22:2C:03:6A:05:EF:1F:28:F6:07:3E:AE:0C:66
Certificate issuer:       /CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
Certificate serial:       4CE55D9202E1C30A29E69DB7A955540F0131276C
Authority key identifier: 95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa
Signing time:             Tue 04 Feb 2025 18:10:55 +0000
ROA not before:           Tue 04 Feb 2025 18:05:55 +0000
ROA not after:            Tue 03 Feb 2026 18:10:55 +0000
asID:                     19332
IP address blocks:        200.13.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:5d:92:02:e1:c3:0a:29:e6:9d:b7:a9:55:54:0f:01:31:27:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=955DB46C4EFAEA760561376C9A5F35873B9F1567
        Validity
            Not Before: Feb  4 18:05:55 2025 GMT
            Not After : Feb  3 18:10:55 2026 GMT
        Subject: CN=506512F8C7A5222C036A05EF1F28F6073EAE0C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:89:3b:d3:d8:e4:65:0e:a7:a4:23:81:f8:
                    dc:ab:7f:f2:0c:aa:e3:d1:7d:b5:81:ff:db:38:19:
                    ab:4e:33:96:5e:22:28:4a:32:26:76:d1:21:9a:cb:
                    1b:99:38:b3:93:bb:71:3d:b1:d1:7d:9c:a4:b8:9f:
                    82:6e:9d:4d:31:3f:8f:52:0f:c1:3b:45:de:5b:55:
                    11:b0:f0:ec:8c:11:ac:04:00:38:78:21:e7:99:68:
                    d8:3b:dc:5b:6d:23:66:4f:fa:85:b7:bb:32:71:17:
                    7a:b8:ec:43:50:ef:f2:27:41:b7:55:26:34:ae:65:
                    57:fb:12:88:8b:84:a3:bc:fa:03:40:77:da:6d:d3:
                    38:8c:7a:ae:22:95:0e:5e:72:33:50:89:35:ec:8b:
                    f0:5e:b6:7c:1e:28:ce:91:28:c5:c4:a4:96:66:47:
                    c8:40:d7:83:24:ae:ab:f9:2c:47:00:1c:a5:54:11:
                    5b:0a:18:c6:4e:8a:ac:4c:5c:68:3b:9f:21:f2:64:
                    5d:f0:ab:2c:ea:b1:4c:25:bb:f4:a0:2e:de:9b:9e:
                    c6:93:76:cd:ca:b8:8d:5f:8e:34:5b:b0:3c:5d:73:
                    4b:ea:84:1e:60:e9:d0:07:ab:96:16:b6:80:a3:7d:
                    1b:09:e5:4c:bd:66:5a:dd:ef:cd:f4:75:a3:45:b9:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:65:12:F8:C7:A5:22:2C:03:6A:05:EF:1F:28:F6:07:3E:AE:0C:66
            X509v3 Authority Key Identifier:
                keyid:95:5D:B4:6C:4E:FA:EA:76:05:61:37:6C:9A:5F:35:87:3B:9F:15:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/955DB46C4EFAEA760561376C9A5F35873B9F1567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A8BD316F7A70022B0DB5C55A10771B026BA0B85A6B3689531C327CD596D606F5/0/3230302e31332e31362e302f32302d3234203d3e203139333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         29:63:5e:3e:1b:a5:cb:48:30:08:96:ef:17:17:2f:ee:e7:a5:
         a4:4e:5d:d8:53:4f:cc:cf:ad:05:88:5f:ba:57:20:83:10:8f:
         38:f8:72:de:d4:65:15:d2:50:11:4b:f6:6f:b0:8d:d9:05:ac:
         22:bf:66:a2:6b:a8:f6:88:ac:fd:e6:8c:b7:d1:bb:74:20:be:
         19:26:ce:92:1e:82:31:44:7f:db:b2:01:b8:f3:e7:b1:32:b0:
         36:cf:8e:db:7a:c5:ae:8a:b6:7f:38:b3:19:95:65:bb:f3:58:
         41:0f:2e:c9:dc:ef:89:7b:50:5b:32:65:50:c8:f4:a0:2c:f1:
         b1:5b:4b:2e:05:5d:ca:af:0b:d0:f9:91:18:a3:1b:26:d6:91:
         e1:2d:e2:1f:da:62:68:76:5b:8e:3b:1b:33:a5:51:42:8a:38:
         06:fb:a2:8b:e5:08:93:da:4a:06:67:64:9c:ce:a4:b0:af:e4:
         ac:c6:e4:1b:37:1a:1d:3d:91:f4:13:87:d5:be:93:52:a4:09:
         7b:3d:a4:f8:46:47:20:25:3a:7e:04:ef:a4:2b:f5:c1:0f:a2:
         01:ef:1a:d4:48:f5:74:22:0c:b5:a6:8c:6a:e7:10:30:d7:6d:
         3c:60:32:81:8b:1a:9d:38:55:4d:d9:64:e5:b2:77:15:45:5d:
         bf:cb:fd:42
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTOVdkgLhwwop5p23qVVUDwExJ2wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTU1REI0NkM0RUZBRUE3NjA1NjEzNzZDOUE1RjM1ODcz
QjlGMTU2NzAeFw0yNTAyMDQxODA1NTVaFw0yNjAyMDMxODEwNTVaMDMxMTAvBgNV
BAMTKDUwNjUxMkY4QzdBNTIyMkMwMzZBMDVFRjFGMjhGNjA3M0VBRTBDNjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yIk709jkZQ6npCOB+Nyrf/IM
quPRfbWB/9s4GatOM5ZeIihKMiZ20SGayxuZOLOTu3E9sdF9nKS4n4JunU0xP49S
D8E7Rd5bVRGw8OyMEawEADh4IeeZaNg73FttI2ZP+oW3uzJxF3q47ENQ7/InQbdV
JjSuZVf7EoiLhKO8+gNAd9pt0ziMeq4ilQ5ecjNQiTXsi/BetnweKM6RKMXEpJZm
R8hA14Mkrqv5LEcAHKVUEVsKGMZOiqxMXGg7nyHyZF3wqyzqsUwlu/SgLt6bnsaT
ds3KuI1fjjRbsDxdc0vqhB5g6dAHq5YWtoCjfRsJ5Uy9Zlrd7830daNFuSMDAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUUGUS+MelIiwDagXvHyj2Bz6uDGYwHwYDVR0j
BBgwFoAUlV20bE766nYFYTdsml81hzufFWcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BOEJEMzE2RjdBNzAwMjJCMERCNUM1NUExMDc3MUIwMjZC
QTBCODVBNkIzNjg5NTMxQzMyN0NENTk2RDYwNkY1LzAvOTU1REI0NkM0RUZBRUE3
NjA1NjEzNzZDOUE1RjM1ODczQjlGMTU2Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NTVEQjQ2QzRFRkFFQTc2MDU2
MTM3NkM5QTVGMzU4NzNCOUYxNTY3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQThCRDMxNkY3QTcwMDIyQjBEQjVDNTVBMTA3NzFCMDI2QkEwQjg1QTZC
MzY4OTUzMUMzMjdDRDU5NkQ2MDZGNS8wLzMyMzAzMDJlMzEzMzJlMzEzNjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMxMzkzMzMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIDRAwDQYJ
KoZIhvcNAQELBQADggEBACljXj4bpctIMAiW7xcXL+7npaROXdhTT8zPrQWIX7pX
IIMQjzj4ct7UZRXSUBFL9m+wjdkFrCK/ZqJrqPaIrP3mjLfRu3QgvhkmzpIegjFE
f9uyAbjz57EysDbPjtt6xa6Ktn84sxmVZbvzWEEPLsnc74l7UFsyZVDI9KAs8bFb
Sy4FXcqvC9D5kRijGybWkeEt4h/aYmh2W447GzOlUUKKOAb7oovlCJPaSgZnZJzO
pLCv5KzG5Bs3Gh09kfQTh9W+k1KkCXs9pPhGRyAlOn4E76Qr9cEPogHvGtRI9XQi
DLWmjGrnEDDXbTxgMoGLGp04VU3ZZOWydxVFXb/L/UI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:14 2025 by rpki-client