Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
File:                     3230302e36312e3133382e302f32342d3234203d3e203532333633.roa (raw, json)
Hash identifier:          VsPVY4GkqAmUTgCzVm0qlm0hxsc4N1fdGPR3FmWtxJQ=
Subject key identifier:   07:4F:A1:59:6E:DD:08:29:00:34:3D:2E:42:63:D6:06:B4:A8:86:7C
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       0BB07E03331EAE7F0D81E94AE11FF69F77040AA6
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa
Signing time:             Tue 04 Feb 2025 18:23:54 +0000
ROA not before:           Tue 04 Feb 2025 18:18:54 +0000
ROA not after:            Tue 03 Feb 2026 18:23:54 +0000
asID:                     52363
IP address blocks:        200.61.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b0:7e:03:33:1e:ae:7f:0d:81:e9:4a:e1:1f:f6:9f:77:04:0a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:54 2025 GMT
            Not After : Feb  3 18:23:54 2026 GMT
        Subject: CN=074FA1596EDD082900343D2E4263D606B4A8867C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:48:5b:2c:31:17:d1:15:2d:ce:75:e1:c4:9a:
                    68:4f:78:cd:58:fa:2a:3f:2d:8d:ad:ea:39:a4:73:
                    78:5a:d2:a7:2d:b6:1f:f6:8a:23:9e:f3:23:87:a1:
                    78:76:89:56:2d:d6:42:40:8b:d6:49:6c:48:89:81:
                    28:91:08:61:ad:5c:7b:43:d1:b4:db:4f:94:e6:4c:
                    b8:18:77:ba:61:3e:69:c5:b8:8e:c0:a2:4f:8b:98:
                    10:67:39:28:62:d5:02:38:18:0d:31:8e:06:57:34:
                    17:6d:43:5a:67:6c:fe:88:d8:2b:fe:7b:cc:7a:6e:
                    33:55:39:6c:86:81:93:3a:3a:3f:bf:ca:16:31:44:
                    4f:f5:7a:f0:fc:9f:eb:18:05:74:de:21:22:02:d7:
                    bb:8a:23:07:5d:04:a3:b3:59:7e:7d:06:76:b0:fa:
                    c0:86:a2:3d:a3:02:12:e4:fc:a7:ad:15:e9:ef:1e:
                    37:f5:3c:bd:2a:2a:3e:dd:7f:28:81:f5:80:86:54:
                    a4:65:74:ca:38:9f:50:5a:d4:9c:6c:c4:25:1c:84:
                    b4:6d:1c:bb:59:60:20:56:b4:7e:c7:78:9d:e4:8f:
                    83:f0:bf:fc:49:ae:9d:f0:cf:1c:2a:43:83:35:ba:
                    13:84:5e:a9:20:ea:40:a4:89:27:41:40:85:1e:b7:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4F:A1:59:6E:DD:08:29:00:34:3D:2E:42:63:D6:06:B4:A8:86:7C
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e36312e3133382e302f32342d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.61.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7d:71:25:62:12:79:21:07:55:28:31:3f:e3:dd:dd:75:2e:
         63:f1:0f:1b:0a:63:08:ba:8a:38:f9:56:1f:82:61:34:9c:79:
         7f:07:b5:1d:c3:30:5e:42:cc:5a:8d:f9:3f:74:bd:85:3b:c4:
         3f:f0:07:4e:8a:0c:1b:ae:95:00:6e:7a:b6:bb:2a:fd:77:83:
         6c:e6:bf:cf:42:57:dc:64:d2:97:db:8d:98:f3:a7:c3:76:d5:
         6f:df:b6:7f:a1:d6:57:86:ee:bd:96:49:b2:eb:0f:48:31:6b:
         7e:cd:6d:43:73:f3:da:13:36:19:da:a6:5e:c3:99:30:8b:d1:
         a7:56:c0:63:4b:e6:56:a0:a3:a5:62:be:31:7e:21:83:5c:82:
         1f:f3:ee:2d:15:21:fd:da:65:b0:f9:27:99:d9:b2:a6:30:95:
         32:72:d0:c8:81:ec:07:73:fe:89:ab:1e:3c:99:df:54:e2:47:
         17:7c:d6:b8:92:5e:ce:f9:40:5a:3a:8f:1b:38:fa:16:5e:67:
         61:57:8f:7d:49:ef:e5:37:24:48:5a:0a:47:29:e4:ea:e9:43:
         e3:e0:43:26:93:21:38:8b:fc:2a:6b:39:93:d4:dd:11:56:4a:
         16:90:99:4e:51:9a:2a:92:98:ea:b1:0b:80:4a:08:35:a9:64:
         90:6e:83:ad
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUC7B+AzMern8NgelK4R/2n3cECqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNTAyMDQxODE4NTRaFw0yNjAyMDMxODIzNTRaMDMxMTAvBgNV
BAMTKDA3NEZBMTU5NkVERDA4MjkwMDM0M0QyRTQyNjNENjA2QjRBODg2N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvSFssMRfRFS3OdeHEmmhPeM1Y
+io/LY2t6jmkc3ha0qctth/2iiOe8yOHoXh2iVYt1kJAi9ZJbEiJgSiRCGGtXHtD
0bTbT5TmTLgYd7phPmnFuI7Aok+LmBBnOShi1QI4GA0xjgZXNBdtQ1pnbP6I2Cv+
e8x6bjNVOWyGgZM6Oj+/yhYxRE/1evD8n+sYBXTeISIC17uKIwddBKOzWX59Bnaw
+sCGoj2jAhLk/KetFenvHjf1PL0qKj7dfyiB9YCGVKRldMo4n1Ba1JxsxCUchLRt
HLtZYCBWtH7HeJ3kj4Pwv/xJrp3wzxwqQ4M1uhOEXqkg6kCkiSdBQIUet1zRAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUB0+hWW7dCCkAND0uQmPWBrSohnwwHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzYzMTJlMzEzMzM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMg9ijAN
BgkqhkiG9w0BAQsFAAOCAQEAXn1xJWISeSEHVSgxP+Pd3XUuY/EPGwpjCLqKOPlW
H4JhNJx5fwe1HcMwXkLMWo35P3S9hTvEP/AHTooMG66VAG56trsq/XeDbOa/z0JX
3GTSl9uNmPOnw3bVb9+2f6HWV4buvZZJsusPSDFrfs1tQ3Pz2hM2GdqmXsOZMIvR
p1bAY0vmVqCjpWK+MX4hg1yCH/PuLRUh/dplsPknmdmypjCVMnLQyIHsB3P+iase
PJnfVOJHF3zWuJJezvlAWjqPGzj6Fl5nYVePfUnv5TckSFoKRynk6ulD4+BDJpMh
OIv8Kms5k9TdEVZKFpCZTlGaKpKY6rELgEoINalkkG6DrQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:55:35 2025 by rpki-client