Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
File:                     3230302e31302e3232342e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          F4ws/7DunU3PzjGBYYkCqxF3T0d7AlZ4NvQkK0IsDiI=
Subject key identifier:   2A:84:C8:BD:0B:C3:A9:C3:32:1D:FB:29:11:70:F8:44:09:9C:3A:13
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       4C9387CAEE230388AAEE861E742763C70EDA2776
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 18:29:49 +0000
ROA not before:           Tue 04 Feb 2025 18:24:49 +0000
ROA not after:            Tue 03 Feb 2026 18:29:49 +0000
asID:                     7004
IP address blocks:        200.10.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:93:87:ca:ee:23:03:88:aa:ee:86:1e:74:27:63:c7:0e:da:27:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:49 2025 GMT
            Not After : Feb  3 18:29:49 2026 GMT
        Subject: CN=2A84C8BD0BC3A9C3321DFB291170F844099C3A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b1:e7:2c:fc:c7:31:e7:be:f4:18:89:3a:af:
                    7e:7f:45:85:d0:06:fa:2c:4b:3a:21:96:67:4b:d6:
                    4b:bb:67:ff:3f:92:78:25:2f:4b:6e:8a:df:72:cd:
                    80:f6:41:33:3d:ee:1a:5c:94:5e:44:86:84:88:59:
                    fa:c8:b9:2f:6a:0b:b5:29:42:12:a2:b9:65:a1:5d:
                    d3:33:dc:ba:86:2f:0d:68:49:4b:ad:35:00:b1:75:
                    51:d7:7d:2f:9b:6a:d9:e1:23:9f:e1:9c:7d:27:cb:
                    99:1b:5a:cc:fd:a3:4e:3b:1d:55:7d:93:eb:9b:c3:
                    6f:d9:6f:80:80:17:ff:98:86:f9:3b:56:67:72:e8:
                    30:5f:cc:c6:db:71:49:3b:57:9e:94:f6:97:bb:f9:
                    ae:32:24:d9:cb:23:0d:c1:cd:b8:60:d0:42:60:e3:
                    06:94:b7:62:47:8d:b7:49:2b:a3:96:5a:60:7b:63:
                    2d:f0:59:7a:87:cc:33:63:56:c7:4d:76:52:81:32:
                    88:9b:74:0b:4d:ab:2f:69:47:da:f2:d3:9c:24:39:
                    6a:5d:5d:55:46:05:d3:94:39:73:08:72:ae:94:ee:
                    17:5c:34:9b:17:10:56:ac:bd:91:99:3c:6a:53:56:
                    30:fe:ba:d3:fd:68:b7:db:8b:27:c2:4c:b6:c1:66:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:84:C8:BD:0B:C3:A9:C3:32:1D:FB:29:11:70:F8:44:09:9C:3A:13
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e31302e3232342e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:eb:fb:22:5c:4a:3a:f2:49:b3:38:1e:0a:1f:8d:be:69:51:
         a7:3a:ed:00:18:b1:1b:20:32:36:19:2e:c8:bb:df:92:a0:e7:
         18:77:9e:b6:e2:7d:b3:ea:c4:6f:f1:5d:74:5f:16:45:4f:9a:
         45:f1:b4:5e:e8:61:64:fe:fc:2c:44:59:44:d4:f5:a6:55:c8:
         f3:af:e8:45:66:44:9a:35:91:46:95:78:ea:bd:45:93:be:72:
         2f:0d:b0:09:8e:03:dd:90:d8:99:3d:3e:7a:b3:09:93:68:10:
         a8:a8:29:0d:e1:6d:f0:e7:f3:d3:2a:9d:fb:1d:7f:c5:d5:ad:
         d3:c5:4d:7f:f9:50:a1:cd:f3:b3:0d:c7:e2:e5:ac:11:b5:d8:
         9d:fb:ca:80:ae:97:80:ab:df:ee:09:75:cd:2a:dd:02:8a:ec:
         31:09:a1:59:b2:1b:f0:36:cf:b4:8f:dd:1e:17:bb:6f:28:e7:
         f0:25:62:20:c1:5a:19:38:54:90:5e:5c:9b:af:67:3a:eb:f6:
         ae:36:5a:79:79:91:34:96:b4:a5:35:fc:29:ed:cd:48:42:65:
         7a:69:1b:38:5c:dc:96:5e:af:00:f1:9a:42:37:be:a2:c7:78:
         74:01:b9:3f:f3:14:9b:55:3c:f1:9f:6c:37:79:60:24:2d:01:
         43:16:cc:ab
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUTJOHyu4jA4iq7oYedCdjxw7aJ3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAyMDQxODI0NDlaFw0yNjAyMDMxODI5NDlaMDMxMTAvBgNV
BAMTKDJBODRDOEJEMEJDM0E5QzMzMjFERkIyOTExNzBGODQ0MDk5QzNBMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsecs/Mcx5770GIk6r35/RYXQ
BvosSzohlmdL1ku7Z/8/knglL0tuit9yzYD2QTM97hpclF5EhoSIWfrIuS9qC7Up
QhKiuWWhXdMz3LqGLw1oSUutNQCxdVHXfS+batnhI5/hnH0ny5kbWsz9o047HVV9
k+ubw2/Zb4CAF/+Yhvk7Vmdy6DBfzMbbcUk7V56U9pe7+a4yJNnLIw3Bzbhg0EJg
4waUt2JHjbdJK6OWWmB7Yy3wWXqHzDNjVsdNdlKBMoibdAtNqy9pR9ry05wkOWpd
XVVGBdOUOXMIcq6U7hdcNJsXEFasvZGZPGpTVjD+utP9aLfbiyfCTLbBZmZJAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKoTIvQvDqcMyHfspEXD4RAmcOhMwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzEzMDJlMzIzMjM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzczMDMwMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICuAwDQYJ
KoZIhvcNAQELBQADggEBACHr+yJcSjrySbM4Hgofjb5pUac67QAYsRsgMjYZLsi7
35Kg5xh3nrbifbPqxG/xXXRfFkVPmkXxtF7oYWT+/CxEWUTU9aZVyPOv6EVmRJo1
kUaVeOq9RZO+ci8NsAmOA92Q2Jk9PnqzCZNoEKioKQ3hbfDn89Mqnfsdf8XVrdPF
TX/5UKHN87MNx+LlrBG12J37yoCul4Cr3+4Jdc0q3QKK7DEJoVmyG/A2z7SP3R4X
u28o5/AlYiDBWhk4VJBeXJuvZzrr9q42Wnl5kTSWtKU1/CntzUhCZXppGzhc3JZe
rwDxmkI3vqLHeHQBuT/zFJtVPPGfbDd5YCQtAUMWzKs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:37 2025 by rpki-client