Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa
File:                     3230302e32382e3138362e302f32342d3234203d3e203136363239.roa (raw, json)
Hash identifier:          CmA50Jc/BoJHZyh1SL/s38bh+dcSl12aPfif2L8+A3o=
Subject key identifier:   80:D9:BD:68:58:1C:34:FE:C5:4B:CE:A5:8A:6F:47:62:9F:90:68:C9
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       03F4574FC26DC87A6B60FF82970EE411823248A5
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa
Signing time:             Tue 04 Feb 2025 18:30:04 +0000
ROA not before:           Tue 04 Feb 2025 18:25:04 +0000
ROA not after:            Tue 03 Feb 2026 18:30:04 +0000
asID:                     16629
IP address blocks:        200.28.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f4:57:4f:c2:6d:c8:7a:6b:60:ff:82:97:0e:e4:11:82:32:48:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:25:04 2025 GMT
            Not After : Feb  3 18:30:04 2026 GMT
        Subject: CN=80D9BD68581C34FEC54BCEA58A6F47629F9068C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:6e:de:7f:1b:3a:c7:d3:d2:d7:5a:fa:95:
                    57:7b:a3:01:6e:3c:a8:4d:88:fc:b9:a6:33:09:86:
                    79:9d:5d:bc:79:94:3a:76:7f:0c:f0:7d:6a:87:4f:
                    37:cf:1f:79:c0:7c:b3:0d:c0:17:52:fd:f1:25:4b:
                    04:fb:c5:42:10:34:58:88:c2:d6:27:b6:10:de:13:
                    ff:43:5f:55:cb:d8:1c:4d:f1:7a:a7:65:45:61:41:
                    d7:9a:04:c0:2d:0b:ac:f3:a7:23:d6:52:5b:8d:82:
                    5a:02:ef:eb:7d:e9:d4:fc:91:ed:cc:22:4e:a2:c9:
                    7b:cb:75:19:17:6f:44:09:60:c6:f2:6b:10:a6:3a:
                    70:04:5e:45:88:6b:a6:46:36:66:82:2d:65:59:e7:
                    0a:bb:d5:c4:09:89:82:0f:8c:5c:21:b7:95:46:4c:
                    9b:a0:3d:c5:74:aa:d8:aa:fd:e5:0e:f8:10:b8:08:
                    9f:c2:2c:3d:df:0e:4b:e9:df:f3:3c:7b:b7:8d:44:
                    df:98:5b:0a:2f:4c:9e:42:6f:32:fe:6e:fd:c5:af:
                    a3:f8:37:d5:7f:cc:0c:76:92:6d:fe:b0:04:24:d1:
                    42:92:b4:8f:fd:6b:5c:5c:e0:31:52:12:09:40:11:
                    d0:7f:e8:b0:2b:84:df:5f:70:01:48:29:71:0c:c3:
                    fe:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D9:BD:68:58:1C:34:FE:C5:4B:CE:A5:8A:6F:47:62:9F:90:68:C9
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e32382e3138362e302f32342d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.28.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:87:6b:60:71:9c:8e:00:2c:96:1c:82:d0:c9:e0:62:8b:23:
         d3:64:4a:93:8e:43:7d:53:67:5b:be:66:a1:c2:4b:46:dc:f9:
         ac:49:7d:c4:bc:a1:15:02:b1:ff:86:aa:5a:50:30:a7:f6:fd:
         62:df:92:a8:32:02:53:5f:42:29:e1:13:cf:f0:21:46:08:05:
         42:49:1e:68:f4:d1:b2:fb:63:3d:47:eb:ad:8d:56:ba:59:88:
         db:16:9d:be:20:8e:a9:73:a6:2c:74:5c:26:00:f6:04:b0:46:
         ec:fd:28:3d:f3:94:16:36:73:91:cd:5f:51:c2:e2:0d:d8:f4:
         3c:35:ba:69:f0:83:02:f7:f3:d8:fb:65:ca:14:a0:12:90:a3:
         8e:e8:50:52:62:37:54:9a:85:99:44:fb:fc:bb:fe:fd:d7:f3:
         4b:7f:a9:40:ae:7c:c1:6b:8e:0d:10:70:0c:f6:2c:47:c2:b9:
         57:3f:63:8e:0a:de:3d:c9:db:f2:33:c4:93:28:fd:d4:e0:ef:
         a1:d0:4c:a4:01:be:96:89:ba:e1:75:c1:58:5b:7d:b6:47:3e:
         64:fd:d4:db:84:c7:e9:49:79:84:f3:69:89:55:39:ef:31:7b:
         72:0b:fe:00:2b:93:95:4d:9c:c5:ec:f9:9c:84:ed:f7:61:85:
         77:aa:b5:61
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUA/RXT8JtyHprYP+Clw7kEYIySKUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAyMDQxODI1MDRaFw0yNjAyMDMxODMwMDRaMDMxMTAvBgNV
BAMTKDgwRDlCRDY4NTgxQzM0RkVDNTRCQ0VBNThBNkY0NzYyOUY5MDY4QzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx0G7efxs6x9PS11r6lVd7owFu
PKhNiPy5pjMJhnmdXbx5lDp2fwzwfWqHTzfPH3nAfLMNwBdS/fElSwT7xUIQNFiI
wtYnthDeE/9DX1XL2BxN8XqnZUVhQdeaBMAtC6zzpyPWUluNgloC7+t96dT8ke3M
Ik6iyXvLdRkXb0QJYMbyaxCmOnAEXkWIa6ZGNmaCLWVZ5wq71cQJiYIPjFwht5VG
TJugPcV0qtiq/eUO+BC4CJ/CLD3fDkvp3/M8e7eNRN+YWwovTJ5CbzL+bv3Fr6P4
N9V/zAx2km3+sAQk0UKStI/9a1xc4DFSEglAEdB/6LArhN9fcAFIKXEMw/5vAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUgNm9aFgcNP7FS86lim9HYp+QaMkwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzIzODJlMzEzODM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgcujAN
BgkqhkiG9w0BAQsFAAOCAQEABIdrYHGcjgAslhyC0MngYosj02RKk45DfVNnW75m
ocJLRtz5rEl9xLyhFQKx/4aqWlAwp/b9Yt+SqDICU19CKeETz/AhRggFQkkeaPTR
svtjPUfrrY1WulmI2xadviCOqXOmLHRcJgD2BLBG7P0oPfOUFjZzkc1fUcLiDdj0
PDW6afCDAvfz2PtlyhSgEpCjjuhQUmI3VJqFmUT7/Lv+/dfzS3+pQK58wWuODRBw
DPYsR8K5Vz9jjgrePcnb8jPEkyj91ODvodBMpAG+lom64XXBWFt9tkc+ZP3U24TH
6Ul5hPNpiVU57zF7cgv+ACuTlU2cxez5nITt92GFd6q1YQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:02 2025 by rpki-client