Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa
File:                     3230302e35302e34322e302f32342d3234203d3e2037303034.roa (raw, json)
Hash identifier:          0Us98Sytct152iQewFX/iSvZJ3tlfhgufGXrtERk3yA=
Subject key identifier:   25:A1:04:1C:D1:31:D2:AE:86:ED:F5:B6:F1:1F:A5:6C:AA:8B:85:7E
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       0D3DC10549BC2CD8EAA11D108E2EE7B6D24D10D1
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa
Signing time:             Tue 04 Feb 2025 18:29:57 +0000
ROA not before:           Tue 04 Feb 2025 18:24:57 +0000
ROA not after:            Tue 03 Feb 2026 18:29:57 +0000
asID:                     7004
IP address blocks:        200.50.42.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3d:c1:05:49:bc:2c:d8:ea:a1:1d:10:8e:2e:e7:b6:d2:4d:10:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:57 2025 GMT
            Not After : Feb  3 18:29:57 2026 GMT
        Subject: CN=25A1041CD131D2AE86EDF5B6F11FA56CAA8B857E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:01:26:ce:1f:2e:2e:44:3b:03:ef:fb:0c:
                    fb:fc:8b:19:4c:84:e9:63:2d:4c:84:fd:41:17:f0:
                    37:79:63:3b:3a:2a:45:71:7f:a3:9e:46:a0:7d:a6:
                    6a:d4:c1:35:80:94:60:19:74:b2:9f:14:a2:c6:6b:
                    e5:78:10:13:c1:a7:4a:7b:9b:06:73:4a:46:2e:33:
                    de:52:32:2b:2f:c3:55:a2:08:cc:42:06:4c:30:68:
                    c1:9c:9b:22:7f:d9:91:19:82:15:29:e3:a1:d8:d7:
                    cd:86:27:2b:b0:85:14:45:0c:16:65:6e:d4:74:f3:
                    97:22:a6:69:8e:6c:7c:e4:99:f8:75:20:7b:cf:fa:
                    5e:6e:30:cc:82:dc:14:de:d7:b5:a8:94:e6:00:0e:
                    c6:76:84:30:d9:a2:ac:bc:46:38:d5:80:c5:6e:3d:
                    28:7a:46:ae:22:51:f9:b9:79:0d:87:8d:89:90:e2:
                    e0:3c:e3:17:c4:95:77:d0:bc:6b:a3:d0:5e:f8:8e:
                    21:5a:29:b0:7a:a5:f3:92:04:22:8d:c0:39:1b:01:
                    21:a3:6d:1f:c6:64:25:a9:15:88:76:fd:6a:db:48:
                    42:e4:6d:a4:34:d0:0a:a2:17:5f:1e:b9:39:c9:33:
                    b3:52:c7:f5:09:06:f8:6e:4c:ef:66:51:71:eb:30:
                    e5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A1:04:1C:D1:31:D2:AE:86:ED:F5:B6:F1:1F:A5:6C:AA:8B:85:7E
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e34322e302f32342d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:89:ba:80:77:31:bd:0d:f3:71:21:a4:99:f7:da:4d:d7:35:
         7b:90:34:4d:71:84:50:b5:cf:f6:2f:8f:00:83:46:9d:c1:c0:
         7d:17:a0:57:e9:3c:16:9f:bd:9c:ae:61:5a:b0:c4:18:34:ce:
         22:f2:66:e6:55:ae:51:6e:9f:a1:62:22:c8:2e:81:1c:ef:10:
         d2:d6:8a:81:87:04:e6:67:50:d7:c5:68:68:f6:40:df:dd:0d:
         fb:7e:77:22:8d:30:8e:4a:ad:d9:30:9f:70:f2:7f:31:ad:d0:
         78:d0:4b:68:3f:de:a6:c5:59:72:0c:33:ae:c9:bc:4a:31:41:
         e7:11:6e:7b:8e:20:dd:20:30:f3:c0:f1:16:2c:ae:3d:2c:b3:
         94:a6:5a:a9:6e:8a:14:16:80:77:fb:78:91:7a:d2:e8:ff:67:
         3c:37:ed:e1:2c:d4:b9:74:58:1c:8b:a3:23:a9:b3:a3:47:57:
         61:73:b4:69:db:d7:94:cc:a2:54:2f:0d:0a:ee:01:8c:ef:62:
         58:80:b2:98:d5:f7:00:36:09:ac:2b:96:e0:b8:81:f6:e4:94:
         17:d5:3f:39:69:97:72:02:d1:ee:af:b3:31:b8:b6:95:d3:54:
         82:6a:d6:84:1e:c4:69:c5:11:50:df:35:65:5c:43:fb:6f:49:
         2c:8e:47:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:03 2025 by rpki-client