Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32312d3234203d3e203237393538.roa
File:                     3230302e35302e3233322e302f32312d3234203d3e203237393538.roa (raw, json)
Hash identifier:          vepL1gv2ubTqAzd2OQR96ekV0KLgpsf+HXxJKtAsoCs=
Subject key identifier:   58:67:3A:83:D9:80:D7:84:0B:98:6C:F4:E4:80:3A:C3:E7:79:56:A6
Certificate issuer:       /CN=41806D94B94505925BCA08B32FC096F1C4BED461
Certificate serial:       5F960C7E46512E56462459CE70C3BBF7BAD94CDF
Authority key identifier: 41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32312d3234203d3e203237393538.roa
Signing time:             Tue 04 Feb 2025 20:04:20 +0000
ROA not before:           Tue 04 Feb 2025 19:59:20 +0000
ROA not after:            Tue 03 Feb 2026 20:04:20 +0000
asID:                     27958
IP address blocks:        200.50.232.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:96:0c:7e:46:51:2e:56:46:24:59:ce:70:c3:bb:f7:ba:d9:4c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41806D94B94505925BCA08B32FC096F1C4BED461
        Validity
            Not Before: Feb  4 19:59:20 2025 GMT
            Not After : Feb  3 20:04:20 2026 GMT
        Subject: CN=58673A83D980D7840B986CF4E4803AC3E77956A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:5e:1c:af:ee:55:b2:f1:19:5a:f2:85:ee:
                    78:fd:29:63:b6:a4:39:18:f4:30:33:f8:da:a1:e6:
                    13:a6:8a:1b:8c:01:2f:50:01:dd:ae:a8:69:4b:53:
                    67:9f:c2:fe:5e:f2:ad:1c:bd:85:cf:ca:8d:b0:d7:
                    e8:95:4f:45:76:b9:97:a8:4a:b0:04:f2:02:e5:ed:
                    a8:b2:50:cb:28:ea:2f:b1:99:86:06:85:40:dc:ae:
                    af:e9:21:dd:89:25:cd:fc:81:35:c1:56:e8:e6:6c:
                    e4:f7:ce:e2:05:0a:d1:15:06:b9:f9:f3:19:59:e7:
                    0c:97:fd:4e:c3:13:77:40:fc:9c:c6:53:c6:42:ad:
                    2c:42:57:07:b4:8d:2e:96:82:5b:75:1f:a5:00:9d:
                    ed:77:25:52:6b:27:99:65:d0:c3:30:80:63:41:d6:
                    72:1a:ce:fa:a2:11:56:54:b9:e2:40:e5:54:f8:64:
                    9c:9e:16:bb:39:0c:6c:c9:72:a0:68:6f:f6:3e:bd:
                    c7:28:30:8b:7a:73:a4:1c:ff:13:fb:94:4f:e2:98:
                    ee:46:94:3d:8c:e8:8f:09:cc:ad:92:6d:87:50:ab:
                    29:18:2b:af:f7:fc:db:1f:53:c0:da:7b:aa:a8:86:
                    f6:2e:b8:ab:d4:07:ff:e5:de:48:80:81:48:77:6b:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:67:3A:83:D9:80:D7:84:0B:98:6C:F4:E4:80:3A:C3:E7:79:56:A6
            X509v3 Authority Key Identifier:
                keyid:41:80:6D:94:B9:45:05:92:5B:CA:08:B3:2F:C0:96:F1:C4:BE:D4:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/41806D94B94505925BCA08B32FC096F1C4BED461.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/41806D94B94505925BCA08B32FC096F1C4BED461.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAD619FBDE243918B761C5DF555989DBB3D99C0931EA34B417CC8C4E67334CE9/0/3230302e35302e3233322e302f32312d3234203d3e203237393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:42:8e:59:73:50:7b:47:0a:e2:4f:a2:59:d0:da:8b:6f:
         10:3b:b9:b1:93:48:e9:4a:9e:17:73:34:ef:fc:61:8d:0d:cb:
         33:74:46:18:74:a4:d7:82:ca:72:07:2a:a9:cd:8d:aa:10:57:
         ef:a9:20:90:6b:21:65:c0:d8:44:3c:11:b6:90:a2:d6:61:33:
         f3:25:69:6c:a6:a9:9c:aa:82:4c:28:a8:41:e4:d2:21:3a:85:
         11:1e:7b:d7:00:fe:d5:f7:25:58:76:b2:77:3d:c8:37:83:d8:
         f3:e2:38:44:da:b8:95:30:29:30:47:58:fa:e7:05:a4:41:05:
         7b:ed:7d:67:1b:21:0d:27:3e:1f:90:33:20:0b:b2:04:de:f3:
         c8:08:ef:fa:12:7b:f7:6e:f3:58:15:81:14:27:6f:6b:c1:ad:
         e8:01:30:85:f1:74:dd:dd:84:f6:6a:e3:02:3f:39:5f:86:19:
         37:01:31:35:38:66:56:b5:0c:8c:e1:8b:62:fb:f3:f7:0f:0f:
         f6:51:c5:f3:be:ec:2c:a5:e7:30:58:ac:88:ae:f7:ae:7f:d5:
         7a:f7:d9:5a:6a:54:a1:e9:b3:67:43:ba:a5:c4:c2:a2:5a:ce:
         9d:bb:a1:24:01:af:45:95:0e:16:9e:b6:c4:52:fd:90:42:b3:
         8f:04:fc:52
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUX5YMfkZRLlZGJFnOcMO797rZTN8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDE4MDZEOTRCOTQ1MDU5MjVCQ0EwOEIzMkZDMDk2RjFD
NEJFRDQ2MTAeFw0yNTAyMDQxOTU5MjBaFw0yNjAyMDMyMDA0MjBaMDMxMTAvBgNV
BAMTKDU4NjczQTgzRDk4MEQ3ODQwQjk4NkNGNEU0ODAzQUMzRTc3OTU2QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuSV4cr+5VsvEZWvKF7nj9KWO2
pDkY9DAz+Nqh5hOmihuMAS9QAd2uqGlLU2efwv5e8q0cvYXPyo2w1+iVT0V2uZeo
SrAE8gLl7aiyUMso6i+xmYYGhUDcrq/pId2JJc38gTXBVujmbOT3zuIFCtEVBrn5
8xlZ5wyX/U7DE3dA/JzGU8ZCrSxCVwe0jS6Wglt1H6UAne13JVJrJ5ll0MMwgGNB
1nIazvqiEVZUueJA5VT4ZJyeFrs5DGzJcqBob/Y+vccoMIt6c6Qc/xP7lE/imO5G
lD2M6I8JzK2SbYdQqykYK6/3/NsfU8Dae6qohvYuuKvUB//l3kiAgUh3a+ZJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUWGc6g9mA14QLmGz05IA6w+d5VqYwHwYDVR0j
BBgwFoAUQYBtlLlFBZJbygizL8CW8cS+1GEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQUQ2MTlGQkRFMjQzOTE4Qjc2MUM1REY1NTU5ODlEQkIz
RDk5QzA5MzFFQTM0QjQxN0NDOEM0RTY3MzM0Q0U5LzAvNDE4MDZEOTRCOTQ1MDU5
MjVCQ0EwOEIzMkZDMDk2RjFDNEJFRDQ2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MTgwNkQ5NEI5NDUwNTkyNUJD
QTA4QjMyRkMwOTZGMUM0QkVENDYxLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUFENjE5RkJERTI0MzkxOEI3NjFDNURGNTU1OTg5REJCM0Q5OUMwOTMx
RUEzNEI0MTdDQzhDNEU2NzMzNENFOS8wLzMyMzAzMDJlMzUzMDJlMzIzMzMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNzM5MzUzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gy6DAN
BgkqhkiG9w0BAQsFAAOCAQEAH/xCjllzUHtHCuJPolnQ2otvEDu5sZNI6UqeF3M0
7/xhjQ3LM3RGGHSk14LKcgcqqc2NqhBX76kgkGshZcDYRDwRtpCi1mEz8yVpbKap
nKqCTCioQeTSITqFER571wD+1fclWHaydz3IN4PY8+I4RNq4lTApMEdY+ucFpEEF
e+19ZxshDSc+H5AzIAuyBN7zyAjv+hJ7927zWBWBFCdva8Gt6AEwhfF03d2E9mrj
Aj85X4YZNwExNThmVrUMjOGLYvvz9w8P9lHF877sLKXnMFisiK73rn/VevfZWmpU
oemzZ0O6pcTColrOnbuhJAGvRZUOFp62xFL9kEKzjwT8Ug==
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:10 2025 by rpki-client