Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3139322e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          lJOaOw8jiEfa12Bi7B9MZGenbwXz3naVX9udiRXg5tM=
Subject key identifier:   DC:C5:E1:11:75:4B:E1:46:0D:49:CD:BC:B5:50:06:75:FE:40:B4:67
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       7F0EA2F812A9E60542AAC1ADF8569AA5EBB685D3
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 04 Feb 2025 18:33:14 +0000
ROA not before:           Tue 04 Feb 2025 18:28:14 +0000
ROA not after:            Tue 03 Feb 2026 18:33:14 +0000
asID:                     20454
IP address blocks:        190.112.192.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:0e:a2:f8:12:a9:e6:05:42:aa:c1:ad:f8:56:9a:a5:eb:b6:85:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:14 2025 GMT
            Not After : Feb  3 18:33:14 2026 GMT
        Subject: CN=DCC5E111754BE1460D49CDBCB5500675FE40B467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:b4:6f:e0:a5:d0:0c:c0:74:94:ba:9f:10:
                    21:f8:1a:3d:67:81:ed:44:28:18:66:34:ca:dc:6c:
                    87:56:46:58:88:f4:25:a3:8b:61:c2:54:6a:10:e9:
                    83:40:ba:e0:fa:5a:f3:32:22:d1:9e:8d:e0:17:44:
                    91:db:84:ca:5d:9d:ee:ff:a3:ab:8a:5b:cd:16:4b:
                    1d:05:a4:1b:f3:06:09:cc:ac:8d:b1:93:c3:ef:20:
                    7f:05:c7:be:9e:49:f9:52:a6:60:4c:a9:0c:85:8a:
                    2b:5e:b4:93:1d:0d:a9:b8:f0:f8:3d:4d:3d:7f:96:
                    2e:ff:26:f0:fd:71:36:75:d5:63:0e:19:ae:a1:50:
                    5a:88:1c:70:a0:e3:11:dc:47:d7:ff:a2:05:fa:de:
                    14:fa:36:2f:b6:16:59:62:c9:02:34:71:d0:4e:68:
                    89:eb:38:21:67:ae:2b:41:6a:73:97:6e:0f:08:c8:
                    33:85:04:b8:e4:86:d3:d5:45:83:1b:0f:a2:b3:0f:
                    35:b0:c1:59:1a:c5:96:cd:c6:35:5a:0f:00:c2:09:
                    ad:4e:8f:82:07:d1:66:47:21:79:cf:c5:18:29:f9:
                    07:b6:3f:8e:43:41:fb:fa:fc:51:82:b3:f9:66:1b:
                    bd:8d:20:9a:83:f2:bd:58:1e:04:28:6e:0d:4c:4e:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C5:E1:11:75:4B:E1:46:0D:49:CD:BC:B5:50:06:75:FE:40:B4:67
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:49:ff:11:82:df:94:ca:55:78:cf:47:be:20:90:43:f1:0c:
         a2:2a:96:e5:02:63:89:76:80:b6:ae:7b:51:59:a9:8a:e3:1d:
         aa:db:e3:4c:05:fe:fc:e7:50:79:e1:8f:fb:7f:fc:cd:32:a0:
         30:3b:64:38:15:f8:6a:a1:43:e0:0e:cc:c8:1f:ef:f3:9b:a6:
         d2:d8:ef:fd:e0:cc:0e:28:2c:c5:fb:12:c0:7a:3d:51:ab:17:
         09:c5:b8:4a:a7:01:73:6e:b4:64:72:1e:f2:7c:5e:f7:88:b6:
         99:0c:01:8e:00:d3:80:fc:92:fe:ee:4c:b2:cc:07:dc:be:72:
         b9:8c:63:21:92:a8:47:f0:37:8a:6f:a1:f3:80:00:f9:93:57:
         2d:c7:66:dc:ae:67:2a:d0:3c:bf:61:c3:bb:4e:8c:17:a6:c4:
         26:c6:08:c0:91:d7:2d:6d:9a:24:19:1f:b1:85:62:5f:8d:95:
         33:78:d3:41:49:5a:76:fc:3d:ad:65:c0:e8:68:dc:9e:38:35:
         aa:20:21:45:30:fc:16:e0:b4:91:ec:3b:7d:6d:c5:10:55:74:
         a9:8d:ae:49:9c:c1:f7:a1:14:b2:9f:6d:7f:3d:96:f1:e3:53:
         20:48:7e:b9:15:3b:17:06:60:b0:e6:73:37:66:02:ee:aa:52:
         86:50:19:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:58 2025 by rpki-client