Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa
File:                     3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          TlCUP9ia1DJBkQJO1gxhr6QeRgQSPcm0KSme7ZIiCq4=
Subject key identifier:   FB:36:E1:B1:B2:C5:EA:09:30:80:76:7A:DE:33:B4:8E:5C:4A:3B:AF
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       018CE78E8890F5F5E1FA48700B24DC383770DF91
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa
Signing time:             Tue 04 Feb 2025 18:41:43 +0000
ROA not before:           Tue 04 Feb 2025 18:36:43 +0000
ROA not after:            Tue 03 Feb 2026 18:41:43 +0000
asID:                     271904
IP address blocks:        190.216.237.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:e7:8e:88:90:f5:f5:e1:fa:48:70:0b:24:dc:38:37:70:df:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:43 2025 GMT
            Not After : Feb  3 18:41:43 2026 GMT
        Subject: CN=FB36E1B1B2C5EA093080767ADE33B48E5C4A3BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:9f:90:24:be:a8:ed:d4:bf:5e:be:ef:77:
                    fc:d8:02:5d:7a:38:a4:c9:d8:47:c6:30:d4:5c:f6:
                    9c:75:fe:b1:c8:74:0d:17:71:97:9e:10:34:5f:c4:
                    a2:df:7f:10:1a:59:15:d6:29:29:c4:26:c0:86:f3:
                    78:ef:8c:34:d1:ae:4f:14:fd:38:3c:6d:3c:77:72:
                    fa:c3:ab:bf:73:e8:bf:b2:a3:22:7c:a6:d2:dd:6f:
                    71:a4:8b:7e:79:cc:ac:d1:49:b3:a4:9f:35:29:6c:
                    90:56:87:f4:04:03:13:9f:87:f9:3d:97:f9:4c:ce:
                    60:b7:36:fc:c5:47:43:10:55:9f:f5:0b:fd:7e:49:
                    bd:0b:90:cc:80:b7:4c:4a:fc:27:8b:bb:9a:43:49:
                    64:02:55:49:01:7d:02:a8:bb:b7:5a:52:fe:cb:05:
                    37:0e:f9:5f:77:13:2f:09:eb:ba:e3:ea:e0:cd:5e:
                    30:eb:38:8f:73:7d:5c:fe:18:a7:45:ee:90:e3:df:
                    53:f5:e5:da:69:00:a7:20:2d:85:2c:a4:3c:33:ee:
                    e7:47:cd:71:f1:3e:3f:36:9f:ed:e7:b9:46:e6:a1:
                    f5:f9:dc:96:d2:27:51:42:60:6d:51:c6:c8:1a:73:
                    1a:43:26:04:21:2e:71:7a:7e:eb:b0:59:2a:21:70:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:36:E1:B1:B2:C5:EA:09:30:80:76:7A:DE:33:B4:8E:5C:4A:3B:AF
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3233372e302f32342d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ac:23:c7:c2:6c:2e:68:74:2d:32:59:dd:88:42:c8:54:4d:
         3b:5b:41:41:d8:bc:9e:9c:13:06:c1:8b:f2:3e:02:89:53:7c:
         16:d2:98:87:3d:dd:ee:fb:47:ac:e5:13:fd:db:b4:9b:4e:13:
         57:07:20:ac:44:d6:5b:7a:83:6e:2b:c5:ab:7a:43:01:6a:0b:
         68:06:35:01:8a:35:74:cf:d7:52:6d:60:e7:8a:35:6e:0c:df:
         be:93:7b:43:fd:c0:7f:5b:c3:23:45:8e:87:19:07:9a:9e:46:
         28:b0:68:d6:4c:f4:9b:c9:e9:bf:d0:ed:12:23:b2:82:f3:aa:
         af:cd:f6:0f:fc:76:db:a2:d3:02:fd:46:d7:a1:1a:0f:a5:5e:
         9a:82:d5:3e:2f:f2:a2:43:e5:cb:0b:c6:c4:19:8f:2d:79:85:
         f1:2b:30:f9:a3:a0:73:f9:a1:5f:70:9d:18:4f:c6:5a:d0:31:
         b4:15:76:b0:f2:b7:de:18:76:72:78:fc:77:fd:01:56:99:86:
         07:94:b3:87:4d:1d:ae:e4:03:f3:da:36:6d:19:66:d8:f0:6d:
         62:13:aa:99:71:11:62:a5:19:94:d0:f0:8e:83:7e:48:58:79:
         29:62:63:5c:8f:4e:71:49:75:3a:89:13:81:12:28:78:40:4d:
         b4:b0:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:50 2025 by rpki-client