Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33332e3139322e302f32312d3234203d3e2036353033.roa
File:                     3230302e33332e3139322e302f32312d3234203d3e2036353033.roa (raw, json)
Hash identifier:          fYWOh7nHl47UExIZkvOJ2x2QDe1t374CLDE059iMJes=
Subject key identifier:   9A:34:F9:CB:85:B9:F2:21:A8:47:39:50:49:17:BE:18:26:39:23:89
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       0F730A49CE34DDE9CC97E8580F03ECEEB20305DD
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33332e3139322e302f32312d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:48 +0000
ROA not before:           Tue 04 Feb 2025 18:13:48 +0000
ROA not after:            Tue 03 Feb 2026 18:18:48 +0000
asID:                     6503
IP address blocks:        200.33.192.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:73:0a:49:ce:34:dd:e9:cc:97:e8:58:0f:03:ec:ee:b2:03:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:48 2025 GMT
            Not After : Feb  3 18:18:48 2026 GMT
        Subject: CN=9A34F9CB85B9F221A84739504917BE1826392389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7e:d4:4b:aa:43:8e:de:c4:fc:ee:ef:71:4a:
                    74:30:fa:ac:c9:fa:41:33:b5:16:89:22:21:bc:1b:
                    68:36:bd:9f:93:d5:ff:be:47:0c:37:24:a4:f4:b7:
                    78:cf:09:bc:38:ea:34:3d:e5:a6:eb:a4:ce:e5:19:
                    ee:f3:5b:79:ab:b8:09:63:7d:8c:b3:11:fe:60:06:
                    90:70:8b:d8:0e:ed:d0:e7:d7:b8:5c:f1:0a:f3:b9:
                    3c:56:3f:da:45:dc:53:55:a3:33:6a:01:96:c3:28:
                    73:09:be:1a:10:84:1e:68:98:d0:01:1e:d2:c6:18:
                    91:ef:1c:8a:66:b7:49:0d:1d:2d:f3:99:23:1a:16:
                    35:da:c4:82:35:38:88:87:a7:d5:5f:d6:8b:cb:62:
                    4f:f4:f6:56:fc:10:83:1d:2a:a6:36:b3:02:10:d6:
                    81:39:62:76:f9:ca:3b:a8:0b:88:b2:c3:4d:c7:e1:
                    1b:fd:86:1b:f2:0e:16:22:60:64:7f:22:96:96:d5:
                    5f:aa:a5:61:f2:13:4c:99:16:d1:5b:a0:eb:3c:96:
                    d3:65:f6:0f:d3:b2:64:7e:00:61:6e:d5:ed:47:c0:
                    8a:35:4c:a4:8b:dc:4b:79:33:d6:72:5f:d2:8a:57:
                    4d:33:10:cc:20:77:96:49:8f:1e:dd:3d:3e:8b:0f:
                    0c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:F9:CB:85:B9:F2:21:A8:47:39:50:49:17:BE:18:26:39:23:89
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33332e3139322e302f32312d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:6d:65:91:92:6e:d3:34:f5:3f:43:37:d9:24:52:0b:40:4a:
         0b:62:37:67:71:3c:c5:d0:7a:18:11:2e:61:3d:9f:19:db:13:
         b8:4c:c9:8b:77:6d:76:25:8b:1a:7a:35:3f:71:25:bd:f5:56:
         41:c9:49:5e:2e:a4:f2:de:45:33:7e:db:63:3e:a1:00:fc:d2:
         91:1a:ce:15:0a:b5:5e:20:95:59:27:33:a6:19:18:8e:94:40:
         55:f1:86:a6:40:ff:ed:f5:51:10:cc:ec:98:e7:65:4a:cc:57:
         6f:45:eb:c1:57:5a:7b:c6:a5:ce:46:ed:53:e3:ba:75:92:79:
         52:49:82:7a:07:8b:8c:d2:fe:53:6d:ea:f5:85:80:d1:0b:19:
         66:23:08:53:b7:ea:7d:1c:7c:04:e4:34:b7:c0:3d:05:c7:24:
         07:10:e1:31:e6:e6:0d:49:bb:da:e5:4f:59:32:3a:bc:9d:6f:
         21:66:63:72:de:ea:c5:76:91:d3:be:24:18:03:5b:80:30:8d:
         6f:91:ed:22:0b:b9:ad:25:9b:c8:91:0b:1d:27:1a:70:19:4d:
         6b:2b:e3:e1:43:da:ff:23:5c:4e:46:c8:75:48:fc:ca:7b:29:
         2d:86:05:b1:73:22:b1:6a:57:78:c4:0f:e7:4c:f4:e1:d4:c3:
         f7:7f:22:4b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUD3MKSc403enMl+hYDwPs7rIDBd0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNDhaFw0yNjAyMDMxODE4NDhaMDMxMTAvBgNV
BAMTKDlBMzRGOUNCODVCOUYyMjFBODQ3Mzk1MDQ5MTdCRTE4MjYzOTIzODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmftRLqkOO3sT87u9xSnQw+qzJ
+kEztRaJIiG8G2g2vZ+T1f++Rww3JKT0t3jPCbw46jQ95abrpM7lGe7zW3mruAlj
fYyzEf5gBpBwi9gO7dDn17hc8QrzuTxWP9pF3FNVozNqAZbDKHMJvhoQhB5omNAB
HtLGGJHvHIpmt0kNHS3zmSMaFjXaxII1OIiHp9Vf1ovLYk/09lb8EIMdKqY2swIQ
1oE5Ynb5yjuoC4iyw03H4Rv9hhvyDhYiYGR/IpaW1V+qpWHyE0yZFtFboOs8ltNl
9g/TsmR+AGFu1e1HwIo1TKSL3Et5M9ZyX9KKV00zEMwgd5ZJjx7dPT6LDwztAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmjT5y4W58iGoRzlQSRe+GCY5I4kwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMyMzAzMDJlMzMzMzJlMzEzOTMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzYzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPIIcAwDQYJ
KoZIhvcNAQELBQADggEBAGZtZZGSbtM09T9DN9kkUgtASgtiN2dxPMXQehgRLmE9
nxnbE7hMyYt3bXYlixp6NT9xJb31VkHJSV4upPLeRTN+22M+oQD80pEazhUKtV4g
lVknM6YZGI6UQFXxhqZA/+31URDM7JjnZUrMV29F68FXWnvGpc5G7VPjunWSeVJJ
gnoHi4zS/lNt6vWFgNELGWYjCFO36n0cfATkNLfAPQXHJAcQ4THm5g1Ju9rlT1ky
OrydbyFmY3Le6sV2kdO+JBgDW4AwjW+R7SILua0lm8iRCx0nGnAZTWsr4+FD2v8j
XE5GyHVI/Mp7KS2GBbFzIrFqV3jED+dM9OHUw/d/Iks=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:26 2025 by rpki-client