Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132362e302f32342d3234203d3e203237383236.roa
File:                     3230302e31362e3132362e302f32342d3234203d3e203237383236.roa (raw, json)
Hash identifier:          peofwGDqzrFfTl2Md2e5fBtLudDCy+gWc/iu3j7cVYQ=
Subject key identifier:   C3:EC:DA:4F:33:21:80:C0:0E:DE:A2:0E:1F:76:CA:5C:E1:D3:80:E8
Certificate issuer:       /CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
Certificate serial:       358D1079308B76E5629BA0A8DCD1D2C2F311F958
Authority key identifier: B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132362e302f32342d3234203d3e203237383236.roa
Signing time:             Tue 04 Feb 2025 18:26:44 +0000
ROA not before:           Tue 04 Feb 2025 18:21:44 +0000
ROA not after:            Tue 03 Feb 2026 18:26:44 +0000
asID:                     27826
IP address blocks:        200.16.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8d:10:79:30:8b:76:e5:62:9b:a0:a8:dc:d1:d2:c2:f3:11:f9:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5AA5B1E5B800556A5B79F997E1B0C88020C13B9
        Validity
            Not Before: Feb  4 18:21:44 2025 GMT
            Not After : Feb  3 18:26:44 2026 GMT
        Subject: CN=C3ECDA4F332180C00EDEA20E1F76CA5CE1D380E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:58:f0:89:3a:7a:25:ae:84:ef:ba:bf:a1:
                    dc:20:51:5a:0e:ab:2b:1c:f0:c2:7e:5a:98:ed:8d:
                    c5:05:d7:55:25:e7:8c:94:20:b5:f7:21:d0:6f:da:
                    4e:24:1e:3b:24:d6:80:fc:e8:5c:d6:9f:eb:b9:d0:
                    8e:d2:79:5c:5a:03:77:60:ce:9f:4d:04:8c:8c:b3:
                    02:22:48:a8:da:b0:45:d9:3f:41:d0:a3:c8:aa:51:
                    3c:6e:9b:07:e1:85:bb:c4:59:cf:1b:aa:cc:86:a1:
                    60:8f:0b:58:ae:60:17:5c:a3:07:1b:b5:95:29:be:
                    f4:4b:42:20:46:7e:ad:a2:51:81:f6:fd:7f:a8:ad:
                    94:79:da:5f:fc:9c:65:9b:42:8e:6e:68:25:06:84:
                    a8:a0:d4:13:7a:9c:2e:5f:35:0c:73:41:bf:48:a5:
                    a0:39:8a:dd:aa:81:a0:9a:0a:b8:f2:0f:de:ff:2b:
                    af:f5:21:70:bc:26:a3:39:8f:e2:3e:5f:fa:d6:ec:
                    b1:53:e7:eb:bd:01:99:2c:c1:cd:36:7b:98:f8:2f:
                    1c:29:9b:cb:a2:02:9f:4d:73:88:3b:c4:e6:4e:0d:
                    66:e4:9a:16:ff:a8:ab:35:d2:9a:73:45:8a:18:28:
                    97:44:1b:e5:ae:f4:a8:24:11:8d:94:8d:27:9f:64:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EC:DA:4F:33:21:80:C0:0E:DE:A2:0E:1F:76:CA:5C:E1:D3:80:E8
            X509v3 Authority Key Identifier:
                keyid:B5:AA:5B:1E:5B:80:05:56:A5:B7:9F:99:7E:1B:0C:88:02:0C:13:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5AA5B1E5B800556A5B79F997E1B0C88020C13B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C3B87C146B5E5FF576E642A7C7C977FBE99D2AFD4069C50CCFE6A97886549F/0/3230302e31362e3132362e302f32342d3234203d3e203237383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:7f:2a:50:03:27:7f:45:22:1e:50:6b:96:d3:f4:ee:23:29:
         19:78:62:f1:0e:98:3e:86:5a:3e:a1:33:a5:47:2d:a1:42:a5:
         cf:5e:af:0d:f9:a5:3c:72:bd:05:d6:1c:3b:3c:f4:94:e5:b5:
         6a:f9:47:3b:10:66:ad:29:28:1e:c4:2e:87:0f:a4:7e:c2:85:
         5e:25:4c:41:ec:ea:bd:07:83:08:a2:88:d7:6d:e2:0f:a6:36:
         67:54:43:aa:4b:35:77:93:44:5e:2e:b0:3e:7d:37:ce:41:9e:
         88:d8:6e:5a:4d:6a:7e:94:8a:eb:4a:78:04:69:07:68:4c:5e:
         28:62:9f:0e:e9:b1:bd:1f:fb:f7:a4:11:47:90:83:c2:13:f7:
         eb:a0:d3:75:b0:59:60:6c:3a:16:f5:02:69:fe:c8:2b:d4:44:
         d5:9d:38:3f:30:ae:54:b3:be:ca:d3:af:77:88:5f:18:5a:93:
         56:72:44:17:c7:fb:39:22:fa:d0:89:4b:81:ef:76:2c:af:a0:
         d3:e8:27:a0:4d:ac:85:7a:d0:26:ff:ef:19:d7:ce:1a:28:c8:
         8a:0b:63:37:2a:f6:c8:1b:6e:05:0c:59:84:a5:23:cd:81:7b:
         98:6f:cf:2a:2c:fb:39:72:28:48:2f:e6:95:f9:9d:a2:51:82:
         49:61:43:ce
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNY0QeTCLduVim6Co3NHSwvMR+VgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBQTVCMUU1QjgwMDU1NkE1Qjc5Rjk5N0UxQjBDODgw
MjBDMTNCOTAeFw0yNTAyMDQxODIxNDRaFw0yNjAyMDMxODI2NDRaMDMxMTAvBgNV
BAMTKEMzRUNEQTRGMzMyMTgwQzAwRURFQTIwRTFGNzZDQTVDRTFEMzgwRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4hFjwiTp6Ja6E77q/odwgUVoO
qysc8MJ+WpjtjcUF11Ul54yUILX3IdBv2k4kHjsk1oD86FzWn+u50I7SeVxaA3dg
zp9NBIyMswIiSKjasEXZP0HQo8iqUTxumwfhhbvEWc8bqsyGoWCPC1iuYBdcowcb
tZUpvvRLQiBGfq2iUYH2/X+orZR52l/8nGWbQo5uaCUGhKig1BN6nC5fNQxzQb9I
paA5it2qgaCaCrjyD97/K6/1IXC8JqM5j+I+X/rW7LFT5+u9AZkswc02e5j4Lxwp
m8uiAp9Nc4g7xOZODWbkmhb/qKs10ppzRYoYKJdEG+Wu9KgkEY2UjSefZFSDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUw+zaTzMhgMAO3qIOH3bKXOHTgOgwHwYDVR0j
BBgwFoAUtapbHluABValt5+ZfhsMiAIME7kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNUMzQjg3QzE0NkI1RTVGRjU3NkU2NDJBN0M3Qzk3N0ZC
RTk5RDJBRkQ0MDY5QzUwQ0NGRTZBOTc4ODY1NDlGLzAvQjVBQTVCMUU1QjgwMDU1
NkE1Qjc5Rjk5N0UxQjBDODgwMjBDMTNCOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUFBNUIxRTVCODAwNTU2QTVC
NzlGOTk3RTFCMEM4ODAyMEMxM0I5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVDM0I4N0MxNDZCNUU1RkY1NzZFNjQyQTdDN0M5NzdGQkU5OUQyQUZE
NDA2OUM1MENDRkU2QTk3ODg2NTQ5Ri8wLzMyMzAzMDJlMzEzNjJlMzEzMjM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM4MzIzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgQfjAN
BgkqhkiG9w0BAQsFAAOCAQEAMn8qUAMnf0UiHlBrltP07iMpGXhi8Q6YPoZaPqEz
pUctoUKlz16vDfmlPHK9BdYcOzz0lOW1avlHOxBmrSkoHsQuhw+kfsKFXiVMQezq
vQeDCKKI123iD6Y2Z1RDqks1d5NEXi6wPn03zkGeiNhuWk1qfpSK60p4BGkHaExe
KGKfDumxvR/796QRR5CDwhP366DTdbBZYGw6FvUCaf7IK9RE1Z04PzCuVLO+ytOv
d4hfGFqTVnJEF8f7OSL60IlLge92LK+g0+gnoE2shXrQJv/vGdfOGijIigtjNyr2
yBtuBQxZhKUjzYF7mG/PKiz7OXIoSC/mlfmdolGCSWFDzg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:14 2025 by rpki-client