Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
File:                     3230302e39312e302e302f31392d3234203d3e2037303034.roa (raw, json)
Hash identifier:          hdRx9PjOcPrOvFeOKTdnsRM2PSJcJkson8HbgFS9C60=
Subject key identifier:   2B:17:9D:6A:B5:7D:3A:26:97:89:C5:1A:FC:B5:05:E8:7E:AB:3E:45
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       594BAEF64FB9EDC7B7487A7E89A3A3E44356D1F2
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa
Signing time:             Wed 22 Jan 2025 20:30:00 +0000
ROA not before:           Wed 22 Jan 2025 20:25:00 +0000
ROA not after:            Wed 21 Jan 2026 20:30:00 +0000
asID:                     7004
IP address blocks:        200.91.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:4b:ae:f6:4f:b9:ed:c7:b7:48:7a:7e:89:a3:a3:e4:43:56:d1:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Jan 22 20:25:00 2025 GMT
            Not After : Jan 21 20:30:00 2026 GMT
        Subject: CN=2B179D6AB57D3A269789C51AFCB505E87EAB3E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:55:ff:46:6c:93:7a:f2:00:89:d0:b2:f6:
                    82:8d:c5:ee:aa:44:36:70:54:ed:4d:09:46:cb:c1:
                    3e:8f:b2:de:19:9a:b0:87:34:86:f6:33:8a:d5:b7:
                    92:65:10:83:5c:ff:8a:a0:7d:df:5d:7d:7a:19:7a:
                    af:ab:d4:88:31:64:97:7c:22:e1:0f:d1:e5:5b:b1:
                    30:ea:3d:e4:a9:9b:b0:91:a9:8c:be:ac:d7:92:03:
                    2e:a3:50:e2:53:5d:f1:13:95:22:15:04:b3:73:4f:
                    56:18:af:cc:c0:60:8d:60:7f:90:3d:5f:6d:e5:ed:
                    f1:06:44:e2:24:90:5e:1a:a3:1b:87:7f:0e:f6:d3:
                    3c:d3:7a:2c:31:30:49:ae:9a:4e:3e:56:21:06:71:
                    0b:5c:80:ad:49:53:64:75:10:30:0e:3a:43:03:fa:
                    06:04:c7:ef:3f:00:79:62:fa:76:2f:18:e7:56:09:
                    34:8c:e2:85:53:f2:94:77:44:bd:ff:f2:86:fa:52:
                    9e:a1:99:55:70:8d:36:20:63:87:66:f5:8f:80:81:
                    ab:43:5f:38:fa:98:e1:ed:56:eb:91:e2:cc:95:a9:
                    1a:d1:65:99:90:b7:e2:2f:dd:0c:33:c2:2f:5b:11:
                    f1:95:f5:6c:59:6c:57:44:96:1f:ff:25:84:08:b1:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:17:9D:6A:B5:7D:3A:26:97:89:C5:1A:FC:B5:05:E8:7E:AB:3E:45
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230302e39312e302e302f31392d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.91.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:67:6f:06:84:f8:5b:0f:16:ef:41:38:5e:02:e9:8c:71:21:
         c3:15:0d:ea:30:30:11:a8:48:ee:3b:b8:73:40:3e:f9:4d:93:
         e0:12:21:1d:3d:e4:f6:a9:82:2e:85:8f:12:60:32:a1:e0:d6:
         d0:16:76:d9:54:6e:8a:68:9d:a4:63:f6:4d:fd:f2:f9:7f:a3:
         e0:ef:55:de:1e:ea:72:b4:d6:48:08:cf:21:c4:d7:d7:d6:84:
         82:94:11:4c:f5:5a:f4:73:c7:09:ee:7c:75:00:2e:52:3d:df:
         31:38:26:a0:81:23:98:3d:cf:9e:13:8b:d8:e4:ba:e0:9a:2f:
         12:c2:cc:5d:9d:16:f7:85:8f:93:02:95:c9:a1:a6:47:92:9e:
         ca:fc:8b:70:87:99:78:8b:df:bc:46:c0:a3:c3:d6:be:66:c7:
         13:ef:6e:34:3c:76:31:52:4c:16:c0:a2:9e:c5:1b:3a:dd:52:
         57:39:a3:49:af:82:25:b3:6d:e0:9c:8a:bc:92:9f:ff:e4:d3:
         8c:bb:07:28:bb:5b:a3:a7:6d:80:db:34:21:f4:14:fa:d8:af:
         7d:e0:e4:9c:d5:94:5b:d4:7a:a3:8d:f6:5e:33:08:92:2b:60:
         70:3b:77:b6:b7:df:0c:c4:a0:22:85:6b:95:4b:5f:a7:63:99:
         c9:2a:c8:33
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUWUuu9k+57ce3SHp+iaOj5ENW0fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAxMjIyMDI1MDBaFw0yNjAxMjEyMDMwMDBaMDMxMTAvBgNV
BAMTKDJCMTc5RDZBQjU3RDNBMjY5Nzg5QzUxQUZDQjUwNUU4N0VBQjNFNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPFX/RmyTevIAidCy9oKNxe6q
RDZwVO1NCUbLwT6Pst4ZmrCHNIb2M4rVt5JlEINc/4qgfd9dfXoZeq+r1IgxZJd8
IuEP0eVbsTDqPeSpm7CRqYy+rNeSAy6jUOJTXfETlSIVBLNzT1YYr8zAYI1gf5A9
X23l7fEGROIkkF4aoxuHfw720zzTeiwxMEmumk4+ViEGcQtcgK1JU2R1EDAOOkMD
+gYEx+8/AHli+nYvGOdWCTSM4oVT8pR3RL3/8ob6Up6hmVVwjTYgY4dm9Y+AgatD
Xzj6mOHtVuuR4syVqRrRZZmQt+Iv3Qwzwi9bEfGV9WxZbFdElh//JYQIsbMlAgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUKxedarV9OiaXicUa/LUF6H6rPkUwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMyMzAzMDJlMzkzMTJlMzAyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzNzMwMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBchbADANBgkqhkiG
9w0BAQsFAAOCAQEAJWdvBoT4Ww8W70E4XgLpjHEhwxUN6jAwEahI7ju4c0A++U2T
4BIhHT3k9qmCLoWPEmAyoeDW0BZ22VRuimidpGP2Tf3y+X+j4O9V3h7qcrTWSAjP
IcTX19aEgpQRTPVa9HPHCe58dQAuUj3fMTgmoIEjmD3PnhOL2OS64JovEsLMXZ0W
94WPkwKVyaGmR5KeyvyLcIeZeIvfvEbAo8PWvmbHE+9uNDx2MVJMFsCinsUbOt1S
VzmjSa+CJbNt4JyKvJKf/+TTjLsHKLtbo6dtgNs0IfQU+tivfeDknNWUW9R6o432
XjMIkitgcDt3trffDMSgIoVrlUtfp2OZySrIMw==
-----END CERTIFICATE-----