Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa
File:                     3230312e3232332e302e302f31372d3234203d3e203136363239.roa (raw, json)
Hash identifier:          dQ5/Ofz+y2tc4lAD/R8HQIkH10TUTvWU5xKovDSuYZg=
Subject key identifier:   8F:01:38:D0:18:13:59:26:21:E7:5A:1B:1A:C1:BF:2D:F9:6C:B5:E8
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       5BDA99894C93177424BF78BB4E8028448F1446F9
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa
Signing time:             Tue 05 Mar 2024 17:52:08 +0000
ROA not before:           Tue 05 Mar 2024 17:47:08 +0000
ROA not after:            Tue 04 Mar 2025 17:52:08 +0000
asID:                     16629
IP address blocks:        201.223.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:da:99:89:4c:93:17:74:24:bf:78:bb:4e:80:28:44:8f:14:46:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Mar  5 17:47:08 2024 GMT
            Not After : Mar  4 17:52:08 2025 GMT
        Subject: CN=8F0138D01813592621E75A1B1AC1BF2DF96CB5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:28:45:30:af:79:93:18:ba:63:58:75:66:59:
                    6f:c6:f1:52:78:15:13:a6:a3:70:9e:8f:c7:29:38:
                    13:39:4c:07:41:1d:fd:52:ca:86:2b:ea:5d:3f:ed:
                    3e:ba:04:49:91:14:8f:db:7c:4c:f9:6d:fa:9c:d1:
                    af:8e:c2:49:71:09:29:1d:c5:af:cb:4d:42:0f:f5:
                    3c:41:55:5a:b8:5a:0a:3a:9b:e4:8b:8c:cf:98:be:
                    4f:55:70:06:f5:7b:1a:a8:16:a4:cc:7f:98:bb:da:
                    d1:16:1f:3c:fe:4f:cc:a3:81:bc:9c:f0:13:89:6c:
                    2e:6e:a8:9a:dd:71:ec:b8:68:51:27:d6:9a:86:82:
                    d9:c6:ff:54:ed:ef:9f:81:04:07:75:d6:d5:0b:25:
                    18:66:d9:15:04:9b:93:b9:a0:a7:69:2a:d5:e4:33:
                    b7:53:b7:b7:c8:bd:dd:f1:a7:3b:6e:ec:11:c2:f4:
                    ef:22:82:cc:cc:2d:ac:20:7e:db:15:f9:16:72:78:
                    56:25:ba:bb:b6:fe:7e:e4:df:4f:7b:99:b5:95:b3:
                    16:e5:59:f1:9e:aa:45:c6:c4:b4:97:40:45:d9:a8:
                    64:e1:15:b6:da:9d:59:59:2d:b9:bc:70:69:84:70:
                    5d:67:04:55:57:81:f6:f3:e6:35:f9:95:0d:ad:42:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:01:38:D0:18:13:59:26:21:E7:5A:1B:1A:C1:BF:2D:F9:6C:B5:E8
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3230312e3232332e302e302f31372d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.223.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:6c:ab:0d:22:68:e8:c4:77:c7:96:68:ad:2e:fc:cf:5d:
         0e:21:9f:d2:3e:36:2d:7e:93:88:3a:13:fd:00:ea:be:5d:47:
         cd:ad:3c:49:cd:18:e5:8b:0b:08:d2:1c:3c:e2:d9:54:7f:d5:
         ea:5c:5e:65:18:41:4d:e5:e5:6b:73:ee:af:2c:70:48:80:88:
         11:c0:6e:eb:de:ec:18:ca:36:7f:b5:d5:0d:6f:f8:ce:31:bb:
         2a:3b:de:c4:96:0d:79:bc:e0:74:3c:da:99:7a:ec:e4:20:dd:
         cc:68:f6:84:c7:44:92:80:11:b3:d5:ca:46:f6:dd:dc:c1:bf:
         3c:a2:32:80:f1:1f:b4:a0:e4:e3:f7:54:89:ad:02:97:b3:39:
         b7:47:97:9c:26:55:d1:42:10:22:49:45:82:b8:83:ca:14:5b:
         70:10:01:87:ae:9b:82:88:59:d6:15:a8:5c:de:78:93:05:8d:
         e4:4c:59:26:81:27:2e:a3:fb:7f:1c:d6:77:ed:ab:b0:1d:75:
         6b:3d:e8:87:df:47:c1:36:a4:b7:6f:15:8a:07:8b:4c:d0:6c:
         64:18:78:14:ac:ca:4d:99:13:ef:76:a8:42:c9:c9:c7:64:83:
         1a:52:42:8d:9c:58:05:b6:0d:06:b3:ed:05:55:a0:22:17:2e:
         a3:1e:2e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----