Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa
File:                     3230302e37332e31302e302f32342d3234203d3e203237393635.roa (raw, json)
Hash identifier:          IkVey/UVG1ixZez86oanAaoFE3d/s4JLsDXUINd/Fhs=
Subject key identifier:   2D:69:8D:46:8B:78:9D:03:49:AD:71:23:BB:72:58:D7:23:51:70:CA
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       03D45C66D60E2F48975D07CAB83B1315ADBB2C29
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa
Signing time:             Tue 04 Feb 2025 18:23:53 +0000
ROA not before:           Tue 04 Feb 2025 18:18:53 +0000
ROA not after:            Tue 03 Feb 2026 18:23:53 +0000
asID:                     27965
IP address blocks:        200.73.10.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:5c:66:d6:0e:2f:48:97:5d:07:ca:b8:3b:13:15:ad:bb:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:53 2025 GMT
            Not After : Feb  3 18:23:53 2026 GMT
        Subject: CN=2D698D468B789D0349AD7123BB7258D7235170CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4f:4d:44:6f:44:51:1b:91:72:2d:f9:cb:19:
                    af:93:93:c5:53:b1:0b:40:73:7a:1d:5b:f7:c2:b8:
                    67:b6:4d:18:b4:3c:7b:6b:ae:fc:9b:23:bf:64:d5:
                    c7:c7:73:b3:9b:4c:0f:4d:96:fe:57:bb:ba:a2:4a:
                    60:da:50:43:a7:a7:e9:cd:e7:38:23:8d:d9:bf:c0:
                    d2:bc:7d:ae:15:26:ff:fc:69:6a:32:e1:eb:6b:51:
                    e9:a3:67:26:df:e9:dd:f2:16:bc:a0:cb:e6:7f:c2:
                    5b:8d:7e:d8:1a:64:f8:f9:39:91:a3:68:bb:0d:0f:
                    99:02:60:6d:6a:a3:1a:48:7b:4a:c0:44:72:7d:4a:
                    b3:d2:9b:41:ff:cf:4b:04:24:fc:43:af:21:17:8b:
                    29:24:fc:2e:cc:f9:44:22:1b:81:68:a2:f4:01:ca:
                    c4:1b:2b:19:1f:75:88:2b:07:70:e6:2d:1e:35:21:
                    46:8f:1c:74:54:08:47:d3:82:26:b4:de:10:30:29:
                    99:b7:f0:07:29:f8:0f:48:55:0f:c8:c3:98:60:1a:
                    e7:1f:50:3b:00:1b:68:e3:f4:6d:a7:83:d1:95:b1:
                    07:21:2c:05:7a:47:51:4d:e1:68:09:db:99:1a:c0:
                    80:33:7f:14:02:21:a8:48:c2:db:d8:9e:56:79:41:
                    15:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:69:8D:46:8B:78:9D:03:49:AD:71:23:BB:72:58:D7:23:51:70:CA
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3230302e37332e31302e302f32342d3234203d3e203237393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.73.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:19:04:3f:2f:ed:ee:2d:98:d8:d1:09:81:c2:27:cb:4e:80:
         bd:9c:98:c6:c8:d3:1f:67:7a:c5:4b:a6:1e:a4:4a:49:9d:31:
         c7:a8:54:1b:1a:37:76:8b:ea:42:04:52:38:ce:77:f1:1b:f3:
         d8:d5:c9:cd:69:1c:c1:3e:a3:aa:3d:88:2a:bd:24:59:a1:ce:
         2e:db:f3:d0:6c:42:b1:2e:3e:9a:2f:27:0e:5f:2a:39:e2:0c:
         4d:70:a6:19:2e:3b:81:fe:35:d9:df:b5:24:b0:1f:73:39:35:
         73:d0:bd:ca:19:48:48:68:6d:51:90:7b:29:fb:62:cb:14:f3:
         74:b3:e4:93:25:e6:65:03:3e:79:f9:e9:e4:69:94:cc:05:2a:
         73:95:8e:07:ca:ee:1a:39:db:7d:06:33:0e:da:30:b9:67:f9:
         c5:ba:c4:e1:36:5f:f2:4c:03:3b:72:9c:ba:60:b6:e2:2f:c3:
         0d:52:9f:73:7d:70:d0:45:8d:98:a2:0f:91:e2:fa:de:16:2d:
         6d:e5:07:49:6d:e3:4e:0c:30:09:cc:f1:09:52:74:88:f4:d5:
         ab:9c:07:5f:1c:01:79:8d:d7:65:82:42:9d:34:10:ee:49:85:
         fd:3f:23:ee:58:8b:1c:12:79:a5:38:d8:19:a6:b3:e3:ea:60:
         45:15:74:6e
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUA9RcZtYOL0iXXQfKuDsTFa27LCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJGQkM3MkJDOTJFODg0QTI1RjY1MjFDNkUwMDk2MjdC
MEU3NDYwMjAeFw0yNTAyMDQxODE4NTNaFw0yNjAyMDMxODIzNTNaMDMxMTAvBgNV
BAMTKDJENjk4RDQ2OEI3ODlEMDM0OUFENzEyM0JCNzI1OEQ3MjM1MTcwQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiT01Eb0RRG5FyLfnLGa+Tk8VT
sQtAc3odW/fCuGe2TRi0PHtrrvybI79k1cfHc7ObTA9Nlv5Xu7qiSmDaUEOnp+nN
5zgjjdm/wNK8fa4VJv/8aWoy4etrUemjZybf6d3yFrygy+Z/wluNftgaZPj5OZGj
aLsND5kCYG1qoxpIe0rARHJ9SrPSm0H/z0sEJPxDryEXiykk/C7M+UQiG4FoovQB
ysQbKxkfdYgrB3DmLR41IUaPHHRUCEfTgia03hAwKZm38Acp+A9IVQ/Iw5hgGucf
UDsAG2jj9G2ng9GVsQchLAV6R1FN4WgJ25kawIAzfxQCIahIwtvYnlZ5QRU1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQULWmNRot4nQNJrXEju3JY1yNRcMowHwYDVR0j
BBgwFoAUkvvHK8kuiEol9lIcbgCWJ7DnRgIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMDU0MEFFNzFCRkVCMkEyMDc2QkY3REExOUJBMjk1QTA3
MjI4MDg2MjA3QjUxMEFDMjIwNTZCMzAxRThGNEQ0LzAvOTJGQkM3MkJDOTJFODg0
QTI1RjY1MjFDNkUwMDk2MjdCMEU3NDYwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MkZCQzcyQkM5MkU4ODRBMjVG
NjUyMUM2RTAwOTYyN0IwRTc0NjAyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDA1NDBBRTcxQkZFQjJBMjA3NkJGN0RBMTlCQTI5NUEwNzIyODA4NjIw
N0I1MTBBQzIyMDU2QjMwMUU4RjRENC8wLzMyMzAzMDJlMzczMzJlMzEzMDJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADISQowDQYJ
KoZIhvcNAQELBQADggEBAJIZBD8v7e4tmNjRCYHCJ8tOgL2cmMbI0x9nesVLph6k
SkmdMceoVBsaN3aL6kIEUjjOd/Eb89jVyc1pHME+o6o9iCq9JFmhzi7b89BsQrEu
PpovJw5fKjniDE1wphkuO4H+NdnftSSwH3M5NXPQvcoZSEhobVGQeyn7YssU83Sz
5JMl5mUDPnn56eRplMwFKnOVjgfK7ho5230GMw7aMLln+cW6xOE2X/JMAztynLpg
tuIvww1Sn3N9cNBFjZiiD5Hi+t4WLW3lB0lt404MMAnM8QlSdIj01aucB18cAXmN
12WCQp00EO5Jhf0/I+5YixwSeaU42Bmms+PqYEUVdG4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:37 2025 by rpki-client