Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa
File:                     3230302e32352e302e302f31372d3234203d3e2037313935.roa (raw, json)
Hash identifier:          yhePXGhtq5l4lTxqHgT9RXnbfptN2kP5XYl6ZdP84xQ=
Subject key identifier:   E5:89:42:08:F2:39:0F:07:B4:B9:8D:E6:F6:EA:32:27:75:FB:93:AE
Certificate issuer:       /CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
Certificate serial:       02006EB99B31D7D42237DB1747F0F5B08A4453D2
Authority key identifier: 92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa
Signing time:             Tue 04 Feb 2025 18:30:28 +0000
ROA not before:           Tue 04 Feb 2025 18:25:28 +0000
ROA not after:            Tue 03 Feb 2026 18:30:28 +0000
asID:                     7195
IP address blocks:        200.25.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:00:6e:b9:9b:31:d7:d4:22:37:db:17:47:f0:f5:b0:8a:44:53:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92BE853516A6D3590F2C9ED4B6B94696C415F88F
        Validity
            Not Before: Feb  4 18:25:28 2025 GMT
            Not After : Feb  3 18:30:28 2026 GMT
        Subject: CN=E5894208F2390F07B4B98DE6F6EA322775FB93AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:a9:38:76:4b:50:4b:98:2d:f3:69:b4:70:
                    b6:b2:0c:54:e5:ed:79:7b:20:8a:e8:2a:63:2b:dc:
                    56:98:b4:4b:69:2e:40:bc:b5:b9:00:37:d2:73:bc:
                    fc:f8:ab:b8:1f:8a:0a:5f:68:6c:3f:0e:c1:f9:43:
                    45:e9:1a:1f:b7:e8:dc:5d:5b:38:b2:f2:38:4a:51:
                    28:b9:da:d6:e7:c3:04:a0:fb:63:c9:d9:0f:9d:be:
                    7e:c2:20:f0:01:30:d1:e1:dd:eb:30:16:b4:7d:ee:
                    a0:f2:88:62:3a:50:c4:58:86:c8:24:c2:bf:b3:60:
                    22:41:53:fe:f9:68:9c:8f:f4:f1:7d:19:da:d8:c3:
                    34:c8:ef:9e:60:08:da:9b:e1:41:c6:0e:f5:ca:6e:
                    de:31:68:6d:fd:62:ef:94:86:2d:49:ad:5e:b1:62:
                    c5:30:be:a2:a9:91:cc:a3:c4:d9:85:9b:ac:a7:e7:
                    a3:f7:de:08:35:95:5c:39:74:fe:50:a7:a1:d2:09:
                    a9:2e:16:99:1d:b5:b9:33:ec:1a:af:17:aa:c1:21:
                    91:04:a3:b8:1d:67:31:83:57:71:18:e9:06:37:d7:
                    64:30:9f:05:8c:9e:61:92:38:16:88:c4:17:14:f4:
                    4e:0e:71:ca:c9:61:f5:ca:10:80:f8:1b:be:eb:81:
                    e6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:89:42:08:F2:39:0F:07:B4:B9:8D:E6:F6:EA:32:27:75:FB:93:AE
            X509v3 Authority Key Identifier:
                keyid:92:BE:85:35:16:A6:D3:59:0F:2C:9E:D4:B6:B9:46:96:C4:15:F8:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92BE853516A6D3590F2C9ED4B6B94696C415F88F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C768DF00CC928A0FDEDEE1BA53CB9C4626E5E105076EEEB6BA24BE17A36B14F2/0/3230302e32352e302e302f31372d3234203d3e2037313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.25.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:05:2e:c7:32:6f:00:dc:34:b0:9a:f8:38:8f:f0:41:e6:
         34:c5:b8:d5:c8:85:74:d7:f1:14:29:54:bb:cd:26:6b:6b:cc:
         ca:77:fd:6b:62:ee:4c:60:b6:a3:80:34:65:36:0a:bc:b5:c5:
         ea:8d:32:99:fb:50:5a:93:b0:e4:e4:5d:9c:78:b7:54:e5:5d:
         bf:a9:20:62:bc:ee:11:e6:0d:e5:5a:c9:46:34:08:73:be:a5:
         f2:69:f3:ba:81:d0:d7:31:f2:6b:5d:1e:94:13:94:ba:78:df:
         ce:e7:11:71:e9:1b:4a:8b:d0:db:dc:40:2b:e8:5c:d9:a3:d7:
         03:63:6f:e3:fa:6a:98:99:da:88:c7:82:a8:58:71:38:26:56:
         0f:0a:a8:20:bf:48:66:9a:ec:a7:34:6c:e9:6e:11:9a:e7:26:
         2c:cb:9c:e6:37:55:7f:02:92:92:d4:a7:30:6a:19:8a:87:4d:
         f0:37:7c:10:34:f8:16:c0:78:29:84:a9:d4:39:0d:37:fd:d8:
         d0:bb:7d:3b:bf:e4:0b:ed:d1:58:f6:4a:64:58:f2:da:0e:90:
         3c:b7:c8:07:4a:5a:c5:72:36:25:23:b8:ad:df:29:58:96:02:
         a0:83:ae:6a:a4:8c:74:f2:e0:27:9f:49:2f:4b:ba:7e:bb:a6:
         9b:d0:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----