Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3232342e302f31392d3234203d3e2037343138.roa
File:                     3230302e39302e3232342e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          e7k9zKV7L3kMd3nPYwt7jMXTGSLKEux6qtzFkeR6nT0=
Subject key identifier:   AC:42:C5:3F:51:87:E0:B4:1A:DD:FD:22:5D:04:08:F7:CD:1E:F9:7B
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       562AEBC6415EBC77A2EA6811BE3F6B97628F94DE
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3232342e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:58 +0000
ROA not before:           Tue 04 Feb 2025 18:24:58 +0000
ROA not after:            Tue 03 Feb 2026 18:29:58 +0000
asID:                     7418
IP address blocks:        200.90.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:2a:eb:c6:41:5e:bc:77:a2:ea:68:11:be:3f:6b:97:62:8f:94:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:58 2025 GMT
            Not After : Feb  3 18:29:58 2026 GMT
        Subject: CN=AC42C53F5187E0B41ADDFD225D0408F7CD1EF97B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c2:99:1e:38:17:66:27:c0:ba:4a:1f:d0:29:
                    13:04:6c:b3:0d:b1:ac:58:57:3d:2e:44:f4:ab:27:
                    51:c8:1e:2c:0d:96:61:79:e4:20:77:e8:2d:77:93:
                    9d:54:69:3c:09:6c:a4:68:c7:24:61:c6:af:41:95:
                    a3:3a:51:31:3a:2b:7a:73:ef:89:88:45:5e:15:0d:
                    82:d7:d7:81:6a:36:02:b7:7f:4f:d3:6c:15:da:c4:
                    ee:b7:9f:24:44:bf:39:b6:3c:32:19:28:ff:48:cb:
                    b5:5c:9a:95:bd:a8:ef:85:9c:14:0c:43:89:48:cf:
                    5e:4b:f2:18:00:77:f7:61:c7:9a:42:c4:23:7d:19:
                    ab:8f:ff:82:e4:83:56:74:f9:da:fe:8d:3f:aa:40:
                    1a:a8:8c:dc:30:18:ce:e1:03:c8:27:12:79:e9:d6:
                    be:f6:6e:38:3b:90:7f:27:68:e1:a3:ad:98:cd:de:
                    d8:c9:1a:89:a1:98:b3:5d:09:b6:fd:d8:ee:9f:1d:
                    19:51:9e:fa:66:ab:c7:41:a2:2a:63:c2:32:b2:78:
                    58:31:04:33:3a:c5:ca:07:9b:d6:5f:13:a1:1c:7b:
                    61:df:81:2d:8a:a1:d0:98:de:12:71:36:09:e9:4b:
                    a0:27:17:06:7c:0b:ae:60:5f:61:02:4e:27:5c:48:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:C5:3F:51:87:E0:B4:1A:DD:FD:22:5D:04:08:F7:CD:1E:F9:7B
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39302e3232342e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:cd:3f:05:0d:fa:c5:f8:e6:bc:2c:42:c6:dc:b7:e0:65:37:
         d4:92:f6:ad:6b:db:ed:f8:4c:90:b0:dc:5a:cf:0b:9a:2c:95:
         38:67:95:c3:bb:71:3a:6c:a1:9f:e2:60:93:39:9c:07:06:f2:
         cc:fb:46:03:d1:64:91:4b:94:9a:61:58:fd:8d:5b:0a:53:1e:
         93:d4:23:f6:45:fd:46:10:ec:c9:a6:ef:b1:c5:56:ee:5e:91:
         20:78:9c:81:f5:31:76:7b:99:65:7a:99:41:c0:7b:fb:d0:b1:
         56:ca:ba:8b:83:3f:cf:91:50:af:08:a5:86:f0:1b:df:06:74:
         23:cc:ef:da:24:d5:6d:bf:d1:c9:2c:c6:cf:3a:64:16:81:a9:
         26:7d:bc:ed:72:f5:a8:ae:12:4b:4c:74:49:6b:4e:d3:ac:a5:
         98:04:5e:47:da:63:83:a5:be:33:45:9e:d3:33:e7:88:4a:57:
         f7:2d:af:9f:5f:a6:47:da:fd:59:03:27:8d:9f:6d:31:95:6e:
         ce:d8:cc:9d:b0:8f:fd:4a:73:f7:16:15:14:91:ab:40:6c:8b:
         55:78:fc:ab:53:4e:70:2e:03:55:7f:fd:4d:e8:4e:44:d4:90:
         3e:4e:44:6f:ca:65:e0:ec:11:d6:3f:66:2e:43:32:6e:7d:70:
         0e:52:84:c8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUVirrxkFevHei6mgRvj9rl2KPlN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAyMDQxODI0NThaFw0yNjAyMDMxODI5NThaMDMxMTAvBgNV
BAMTKEFDNDJDNTNGNTE4N0UwQjQxQURERkQyMjVEMDQwOEY3Q0QxRUY5N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvwpkeOBdmJ8C6Sh/QKRMEbLMN
saxYVz0uRPSrJ1HIHiwNlmF55CB36C13k51UaTwJbKRoxyRhxq9BlaM6UTE6K3pz
74mIRV4VDYLX14FqNgK3f0/TbBXaxO63nyREvzm2PDIZKP9Iy7VcmpW9qO+FnBQM
Q4lIz15L8hgAd/dhx5pCxCN9GauP/4Lkg1Z0+dr+jT+qQBqojNwwGM7hA8gnEnnp
1r72bjg7kH8naOGjrZjN3tjJGomhmLNdCbb92O6fHRlRnvpmq8dBoipjwjKyeFgx
BDM6xcoHm9ZfE6Ece2HfgS2KodCY3hJxNgnpS6AnFwZ8C65gX2ECTidcSJsBAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrELFP1GH4LQa3f0iXQQI980e+XswHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMDJlMzIzMjM0MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzczNDMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXIWuAwDQYJ
KoZIhvcNAQELBQADggEBACrNPwUN+sX45rwsQsbct+BlN9SS9q1r2+34TJCw3FrP
C5oslThnlcO7cTpsoZ/iYJM5nAcG8sz7RgPRZJFLlJphWP2NWwpTHpPUI/ZF/UYQ
7Mmm77HFVu5ekSB4nIH1MXZ7mWV6mUHAe/vQsVbKuouDP8+RUK8IpYbwG98GdCPM
79ok1W2/0cksxs86ZBaBqSZ9vO1y9aiuEktMdElrTtOspZgEXkfaY4OlvjNFntMz
54hKV/ctr59fpkfa/VkDJ42fbTGVbs7YzJ2wj/1Kc/cWFRSRq0Bsi1V4/KtTTnAu
A1V//U3oTkTUkD5ORG/KZeDsEdY/Zi5DMm59cA5ShMg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:05 2025 by rpki-client