Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e2037343138.roa
File:                     3230302e35302e33322e302f31392d3234203d3e2037343138.roa (raw, json)
Hash identifier:          YHWDEuLgmhUC4K+Wo7IgQpigfc2+/CqnWSCQIgaaTUU=
Subject key identifier:   C1:37:E7:8D:85:03:2A:0D:BD:C0:B4:7A:28:BE:52:70:B9:9A:27:2A
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       45445808BC5B829A561F5C176E160C3363FA6B5C
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e2037343138.roa
Signing time:             Tue 05 Mar 2024 17:52:10 +0000
ROA not before:           Tue 05 Mar 2024 17:47:10 +0000
ROA not after:            Tue 04 Mar 2025 17:52:10 +0000
asID:                     7418
IP address blocks:        200.50.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:44:58:08:bc:5b:82:9a:56:1f:5c:17:6e:16:0c:33:63:fa:6b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:10 2024 GMT
            Not After : Mar  4 17:52:10 2025 GMT
        Subject: CN=C137E78D85032A0DBDC0B47A28BE5270B99A272A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:7c:3f:79:a3:89:62:d8:ad:9c:62:69:57:
                    1d:00:7e:b7:85:41:7d:e2:cd:0c:74:f6:ca:0c:57:
                    f4:26:64:7b:1e:0a:56:a6:de:59:c6:7d:59:90:77:
                    d1:a4:f8:73:94:3f:46:aa:41:8d:ca:78:65:b4:0b:
                    2e:96:f1:41:d5:5a:49:fb:8d:e0:ef:7b:b4:d9:38:
                    fa:3e:2f:4f:71:a9:7a:96:06:57:2d:fb:86:90:c2:
                    94:b9:da:f8:ee:cc:d4:75:7e:47:2d:4d:9d:49:ac:
                    8d:15:16:2b:53:5b:e3:bf:04:19:25:e8:7c:29:f7:
                    cf:36:d3:6f:51:3d:3d:ff:9c:92:c9:b3:d6:ce:52:
                    02:47:20:6a:6b:85:74:13:ff:b2:ec:8f:bb:be:29:
                    cf:98:22:82:47:bb:02:e5:74:f9:84:21:88:7a:a2:
                    f7:58:a4:f3:48:26:d4:ea:5a:a3:3c:b6:fb:2c:2d:
                    b9:15:e5:68:fc:80:93:ca:b5:8c:79:e2:97:10:e3:
                    a1:7c:d7:04:f3:88:55:1a:65:66:64:7d:94:d8:2d:
                    7e:43:7c:2a:f0:ad:a2:ee:3c:c7:7e:62:b6:74:52:
                    2b:64:5b:7e:1e:6b:10:a7:12:3f:98:f4:8d:4f:fe:
                    76:00:55:2d:f6:7f:92:30:04:46:4a:ca:7c:d4:32:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:37:E7:8D:85:03:2A:0D:BD:C0:B4:7A:28:BE:52:70:B9:9A:27:2A
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e35302e33322e302f31392d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.50.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:43:7b:91:7b:ab:bf:25:96:f9:8d:2a:d3:9a:01:5d:db:bd:
         5f:f7:97:ff:b0:df:82:fd:d0:ec:67:07:c6:63:e4:ad:43:19:
         b7:03:4d:69:9e:f6:8f:59:58:a7:1d:b1:10:28:78:e2:ee:43:
         7f:c5:46:e4:fd:a0:f6:ea:b8:62:ff:d9:b1:ab:1e:a7:5d:c3:
         3e:c5:a3:42:c7:34:42:0c:17:e0:21:23:43:5b:d0:61:34:ef:
         16:cb:b8:31:be:4f:12:81:77:2b:d5:7b:20:d5:86:88:b0:d3:
         99:0a:01:12:b3:fc:99:76:7d:12:28:6c:39:97:8b:02:90:ce:
         ca:be:cb:b8:56:cb:23:3c:a1:8c:fe:60:4b:c3:f4:0b:a5:93:
         6b:73:17:81:25:cd:90:fc:e0:00:26:6b:ed:3e:e8:f1:4f:3a:
         ca:16:47:f6:39:38:f6:cc:4f:34:65:4c:6f:7e:95:cb:e0:02:
         a3:62:37:35:91:7e:02:f1:98:de:de:45:2d:f9:a7:d8:34:9d:
         68:8d:08:a8:1d:b1:cd:5b:e6:48:12:46:1b:a8:76:c0:e5:86:
         38:00:2a:8d:05:96:03:a9:c2:e5:d0:52:ed:22:66:29:5f:cd:
         1d:7a:2d:ab:ab:85:4d:d1:4e:c2:95:ea:d8:df:cd:50:cf:f2:
         f8:71:62:48
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIURURYCLxbgppWH1wXbhYMM2P6a1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNDAzMDUxNzQ3MTBaFw0yNTAzMDQxNzUyMTBaMDMxMTAvBgNV
BAMTKEMxMzdFNzhEODUwMzJBMERCREMwQjQ3QTI4QkU1MjcwQjk5QTI3MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7IHw/eaOJYtitnGJpVx0AfreF
QX3izQx09soMV/QmZHseClam3lnGfVmQd9Gk+HOUP0aqQY3KeGW0Cy6W8UHVWkn7
jeDve7TZOPo+L09xqXqWBlct+4aQwpS52vjuzNR1fkctTZ1JrI0VFitTW+O/BBkl
6Hwp9882029RPT3/nJLJs9bOUgJHIGprhXQT/7Lsj7u+Kc+YIoJHuwLldPmEIYh6
ovdYpPNIJtTqWqM8tvssLbkV5Wj8gJPKtYx54pcQ46F81wTziFUaZWZkfZTYLX5D
fCrwraLuPMd+YrZ0UitkW34eaxCnEj+Y9I1P/nYAVS32f5IwBEZKynzUMpcrAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUwTfnjYUDKg29wLR6KL5ScLmaJyowHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzUzMDJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFyDIgMA0GCSqG
SIb3DQEBCwUAA4IBAQAiQ3uRe6u/JZb5jSrTmgFd271f95f/sN+C/dDsZwfGY+St
Qxm3A01pnvaPWVinHbEQKHji7kN/xUbk/aD26rhi/9mxqx6nXcM+xaNCxzRCDBfg
ISNDW9BhNO8Wy7gxvk8SgXcr1Xsg1YaIsNOZCgESs/yZdn0SKGw5l4sCkM7Kvsu4
VssjPKGM/mBLw/QLpZNrcxeBJc2Q/OAAJmvtPujxTzrKFkf2OTj2zE80ZUxvfpXL
4AKjYjc1kX4C8Zje3kUt+afYNJ1ojQioHbHNW+ZIEkYbqHbA5YY4ACqNBZYDqcLl
0FLtImYpX80dei2rq4VN0U7ClerY381Qz/L4cWJI
-----END CERTIFICATE-----