Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e20333936393832.roa
File:                     3230302e33352e3135352e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          ovcjuDNxpBPmixQIYwbUxghsdApKhoNB+SEO5CNJ2AE=
Subject key identifier:   83:97:DA:14:D5:47:85:9C:68:05:FF:22:D2:48:E9:47:87:40:E8:60
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       05484FCDBEE9EED4435097DA0A503A93E4EA4F20
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 07 Aug 2025 11:15:01 +0000
ROA not before:           Thu 07 Aug 2025 11:10:01 +0000
ROA not after:            Thu 06 Aug 2026 11:15:01 +0000
asID:                     396982
IP address blocks:        200.35.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:48:4f:cd:be:e9:ee:d4:43:50:97:da:0a:50:3a:93:e4:ea:4f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:10:01 2025 GMT
            Not After : Aug  6 11:15:01 2026 GMT
        Subject: CN=8397DA14D547859C6805FF22D248E9478740E860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:06:86:eb:cb:08:70:4b:3d:00:66:64:a6:
                    4f:d9:d1:5a:06:f8:5d:9a:b7:9e:4d:2f:6c:a3:f3:
                    51:88:00:fd:e8:3e:7a:ff:bd:1c:6d:9c:97:7f:50:
                    9e:dd:2e:bc:94:18:02:5e:ec:ee:c1:1a:54:5f:83:
                    6d:fe:64:d3:46:f8:f1:72:d2:45:df:72:94:78:cc:
                    4c:c1:6d:db:d2:84:ea:a9:40:20:8b:31:6f:e1:43:
                    66:80:64:1e:4b:f5:48:a1:b4:ca:a7:ed:c8:9b:5f:
                    82:da:fb:1b:e9:12:58:fe:d1:cd:45:63:9b:fd:e3:
                    49:52:2f:56:a8:ba:4d:a1:e5:9c:52:57:94:30:ea:
                    42:6e:36:c9:eb:a8:bd:da:a2:75:86:8d:27:a4:62:
                    72:c8:80:81:53:0f:62:c6:6a:41:d5:5f:37:15:5e:
                    cc:d2:82:f1:f8:4d:8e:87:61:fe:80:9c:d5:81:a9:
                    a6:02:bd:43:3c:f8:f3:cc:e5:70:42:41:95:e3:4a:
                    c5:17:00:06:7e:39:49:b9:f3:de:a0:69:96:36:de:
                    5b:e8:e0:f4:4b:f4:68:dc:d7:ca:8d:80:8d:12:33:
                    a7:9d:2d:e5:88:7d:4a:f4:12:42:3f:08:f8:b5:30:
                    d3:47:c2:95:3a:7f:eb:ae:c6:59:39:5f:7e:89:1a:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:97:DA:14:D5:47:85:9C:68:05:FF:22:D2:48:E9:47:87:40:E8:60
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3230302e33352e3135352e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:7f:45:db:2c:96:3b:c3:27:60:d6:7b:67:7a:59:59:2b:84:
         d9:cf:ff:84:a0:38:a9:9d:21:c9:39:55:fe:17:b8:38:44:10:
         76:b9:6b:e2:1a:50:2f:14:2e:97:23:d0:1e:1c:18:33:02:95:
         6d:a9:58:49:06:18:98:42:12:94:c4:dc:e4:91:b9:c9:f0:78:
         45:ab:8f:e5:bc:74:c2:16:7c:3b:d8:ed:13:f4:5b:01:83:be:
         ca:48:60:b7:a0:1d:0c:92:c7:78:60:82:1b:f0:01:3f:0d:84:
         69:55:56:99:f1:f6:35:fd:8c:77:d8:f1:1c:d6:80:0b:e2:01:
         2f:fc:bb:c3:6d:d7:e3:12:8e:f1:12:43:56:54:a1:bf:6c:d1:
         d7:a0:db:0f:fd:9c:66:47:81:fe:0d:b1:2a:a2:de:1f:ef:5d:
         86:79:40:a0:d7:00:53:0d:4a:a8:9f:1f:fe:90:a2:6c:3a:b4:
         88:63:6d:30:9e:1b:36:0e:80:4b:58:0b:36:05:19:44:5e:be:
         c2:a3:25:bb:89:d6:c5:21:f4:55:f5:20:52:50:a0:91:1f:f5:
         5b:ec:f8:ee:dc:09:6b:7c:d9:9d:b8:a6:f7:94:95:72:42:15:
         bd:7a:26:36:39:72:e4:da:6f:e2:f0:e0:a5:e8:c9:0e:f7:9e:
         c7:72:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:44 2025 by rpki-client