Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33362e39362e302f31392d3234203d3e2036353033.roa
File:                     3230302e33362e39362e302f31392d3234203d3e2036353033.roa (raw, json)
Hash identifier:          7qbpFG2b4KUmzvK/1lKyJVUDtXx/nylTwt4zPkc0DW8=
Subject key identifier:   A2:15:57:A8:EF:44:86:68:EB:3B:89:08:48:C7:5F:D8:A8:69:E1:37
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       43C050ADB8BBE6EA11CA0232C679C62181C37B7C
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33362e39362e302f31392d3234203d3e2036353033.roa
Signing time:             Tue 04 Feb 2025 18:18:57 +0000
ROA not before:           Tue 04 Feb 2025 18:13:57 +0000
ROA not after:            Tue 03 Feb 2026 18:18:57 +0000
asID:                     6503
IP address blocks:        200.36.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c0:50:ad:b8:bb:e6:ea:11:ca:02:32:c6:79:c6:21:81:c3:7b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Feb  4 18:13:57 2025 GMT
            Not After : Feb  3 18:18:57 2026 GMT
        Subject: CN=A21557A8EF448668EB3B890848C75FD8A869E137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:95:aa:28:0e:c1:cf:4d:f7:44:11:d5:b9:d3:
                    96:e8:4c:94:94:ea:91:c0:e6:d9:a0:72:65:92:78:
                    dc:1e:66:f4:a2:4f:1a:14:64:b5:7c:c3:6d:ec:f7:
                    72:d6:f6:c5:d9:db:71:3d:8c:ad:f9:dd:25:35:71:
                    7d:2e:21:aa:f5:87:49:45:5f:da:d8:45:22:f7:28:
                    9a:53:8b:ce:f9:7e:b8:5b:f2:c2:9c:b9:b6:ae:4b:
                    67:ce:be:e5:bd:a4:ff:c3:be:8d:d3:1c:1e:1f:b0:
                    f5:e1:cc:b3:ba:32:40:66:92:e1:72:07:71:2d:79:
                    7e:b6:b5:5b:de:19:61:f9:d5:06:74:04:be:0f:63:
                    d5:94:c8:00:47:9c:8f:99:de:9f:29:6d:a1:da:ec:
                    ab:21:cb:3c:02:01:e2:67:7a:71:43:e3:8b:38:e0:
                    ab:c4:ed:b0:11:04:41:eb:5a:9e:be:29:25:ad:ad:
                    c8:ea:e7:c0:e6:a0:6f:d4:b0:cb:88:d7:fd:19:be:
                    90:fd:e1:56:d5:21:98:2c:91:12:c1:28:5b:5c:92:
                    06:a6:35:71:99:06:5f:d5:fb:7e:d3:be:43:3d:c3:
                    71:11:93:cf:89:f8:c8:a5:02:3f:de:92:69:2d:21:
                    b9:0b:3d:df:f3:c9:1c:30:5a:49:78:c6:06:a4:fb:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:15:57:A8:EF:44:86:68:EB:3B:89:08:48:C7:5F:D8:A8:69:E1:37
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3230302e33362e39362e302f31392d3234203d3e2036353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:6c:71:6a:56:8a:e0:0e:17:e5:c8:fd:ef:f4:35:65:51:7b:
         c3:60:88:49:41:8e:94:73:63:97:bc:a7:b4:d8:1a:4d:3c:43:
         62:a1:87:60:42:f2:45:37:7f:91:56:b9:a8:47:92:03:71:87:
         55:68:fb:ed:7c:2f:1d:f6:f5:d1:d6:88:92:ff:30:43:50:23:
         05:8e:4e:3a:ca:02:41:8c:e6:9d:98:b4:4e:0b:5f:25:5a:40:
         c4:0d:53:d6:75:a8:af:e5:d2:2c:d6:bb:15:1e:5e:73:93:55:
         04:d8:34:bd:18:ac:a3:9e:70:fc:9c:f0:a4:f8:d2:97:32:1c:
         a2:ff:89:f3:90:8e:fc:90:7e:74:58:27:2f:03:b0:e0:8d:8f:
         e8:c0:a9:39:10:e9:84:e4:36:1d:e0:d5:69:2a:cc:a2:14:52:
         8a:63:f2:5a:48:aa:97:1a:c9:ff:bd:8e:f4:6a:13:88:70:c5:
         9e:9a:69:1f:aa:e3:97:9c:9a:e3:bc:92:08:fb:ea:55:d2:6d:
         22:1a:30:ae:c8:70:f8:f0:cd:d7:18:ad:39:31:43:61:1e:da:
         95:58:35:a3:ed:a8:ed:f3:b4:7d:ae:73:01:c3:16:44:db:7b:
         8d:1c:e4:be:29:00:f2:62:e7:af:47:f4:75:fa:e8:a8:88:64:
         c4:a8:e6:8b
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUQ8BQrbi75uoRygIyxnnGIYHDe3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU3NzUwNzA2MzRGRkRGM0Q4RDFDNzE5OTUyMDkzNTk0
QTU0Qzc2RTAeFw0yNTAyMDQxODEzNTdaFw0yNjAyMDMxODE4NTdaMDMxMTAvBgNV
BAMTKEEyMTU1N0E4RUY0NDg2NjhFQjNCODkwODQ4Qzc1RkQ4QTg2OUUxMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDglaooDsHPTfdEEdW505boTJSU
6pHA5tmgcmWSeNweZvSiTxoUZLV8w23s93LW9sXZ23E9jK353SU1cX0uIar1h0lF
X9rYRSL3KJpTi875frhb8sKcubauS2fOvuW9pP/Dvo3THB4fsPXhzLO6MkBmkuFy
B3EteX62tVveGWH51QZ0BL4PY9WUyABHnI+Z3p8pbaHa7KshyzwCAeJnenFD44s4
4KvE7bARBEHrWp6+KSWtrcjq58DmoG/UsMuI1/0ZvpD94VbVIZgskRLBKFtckgam
NXGZBl/V+37TvkM9w3ERk8+J+MilAj/ekmktIbkLPd/zyRwwWkl4xgak+8I9AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUohVXqO9EhmjrO4kISMdf2Khp4TcwHwYDVR0j
BBgwFoAUpXdQcGNP/fPY0ccZlSCTWUpUx24wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTZCODQ0NTg4OUIxQTE3NzlDMzI0NkZBQ0QwNDYyREIy
RjNEMTRBOTU1RUMyQ0VDM0ZDNTVEQURDRUNENTYxLzAvQTU3NzUwNzA2MzRGRkRG
M0Q4RDFDNzE5OTUyMDkzNTk0QTU0Qzc2RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTc3NTA3MDYzNEZGREYzRDhE
MUM3MTk5NTIwOTM1OTRBNTRDNzZFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkU2Qjg0NDU4ODlCMUExNzc5QzMyNDZGQUNEMDQ2MkRCMkYzRDE0QTk1
NUVDMkNFQzNGQzU1REFEQ0VDRDU2MS8wLzMyMzAzMDJlMzMzNjJlMzkzNjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM2MzUzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyCRgMA0GCSqG
SIb3DQEBCwUAA4IBAQBObHFqVorgDhflyP3v9DVlUXvDYIhJQY6Uc2OXvKe02BpN
PENioYdgQvJFN3+RVrmoR5IDcYdVaPvtfC8d9vXR1oiS/zBDUCMFjk46ygJBjOad
mLROC18lWkDEDVPWdaiv5dIs1rsVHl5zk1UE2DS9GKyjnnD8nPCk+NKXMhyi/4nz
kI78kH50WCcvA7DgjY/owKk5EOmE5DYd4NVpKsyiFFKKY/JaSKqXGsn/vY70ahOI
cMWemmkfquOXnJrjvJII++pV0m0iGjCuyHD48M3XGK05MUNhHtqVWDWj7ajt87R9
rnMBwxZE23uNHOS+KQDyYuevR/R1+uioiGTEqOaL
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:39 2025 by rpki-client