Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
File:                     3139302e3138362e302e302f31362d3234203d3e203235363230.roa (raw, json)
Hash identifier:          kp7QL4DlIwe+wLRRcUGwLdod6f0QX6c3vIXMy+MzltU=
Subject key identifier:   92:40:F9:F7:37:BB:F9:6E:FB:26:87:D5:1E:41:FA:82:97:36:93:55
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       40DBAE4E7F4A13322197F6DAA1E16E7A513B9C27
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa
Signing time:             Tue 04 Feb 2025 18:28:03 +0000
ROA not before:           Tue 04 Feb 2025 18:23:03 +0000
ROA not after:            Tue 03 Feb 2026 18:28:03 +0000
asID:                     25620
IP address blocks:        190.186.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:db:ae:4e:7f:4a:13:32:21:97:f6:da:a1:e1:6e:7a:51:3b:9c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: Feb  4 18:23:03 2025 GMT
            Not After : Feb  3 18:28:03 2026 GMT
        Subject: CN=9240F9F737BBF96EFB2687D51E41FA8297369355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:6c:72:be:b9:48:e8:41:77:a2:83:58:49:
                    69:05:20:64:20:01:e7:2a:5c:a2:25:13:46:75:cc:
                    3c:90:65:90:88:ac:5d:a6:81:f5:90:3d:50:f1:6b:
                    c8:da:7b:61:c2:c4:89:8f:82:8f:db:43:c9:fe:50:
                    4b:4c:60:a1:bb:c4:9a:3e:07:f1:12:d1:69:01:c2:
                    b1:bb:dd:75:f5:5b:c6:97:84:2b:28:60:92:83:22:
                    ac:62:15:da:7a:08:2b:dc:89:b1:e1:2e:8b:41:bb:
                    48:2c:1f:13:b0:fa:db:e5:67:07:ca:07:7e:9c:4d:
                    d3:61:00:ef:b0:f1:86:30:bc:f0:1e:dd:83:50:f5:
                    3a:6d:50:7c:08:2a:95:c5:10:dd:6c:05:ff:66:dc:
                    04:4a:bf:cf:6f:e8:57:63:83:66:d5:c2:94:a0:ff:
                    49:41:f5:4b:2c:39:be:a9:a2:58:98:fa:53:f0:0a:
                    1a:25:cc:76:cf:3c:f2:fb:68:c8:ce:65:43:df:12:
                    cb:9e:fe:45:a5:10:92:63:ea:9c:78:33:19:08:c2:
                    1f:b0:a2:02:48:c8:d1:39:a9:79:58:c8:08:b8:16:
                    7f:cb:08:7d:39:4f:55:8b:d1:39:00:35:7a:83:4e:
                    5d:c2:61:f4:50:e6:38:c8:f4:2e:c8:b3:0c:97:23:
                    2c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:F9:F7:37:BB:F9:6E:FB:26:87:D5:1E:41:FA:82:97:36:93:55
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139302e3138362e302e302f31362d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:b4:cf:24:94:59:af:7e:13:c7:15:1c:33:08:39:47:1d:0c:
         88:ea:07:d5:af:cf:1f:5b:13:02:11:ae:fd:a4:3e:91:a2:67:
         fb:86:59:e8:fb:ac:8a:0e:42:14:f0:3c:ba:61:4f:3e:db:4a:
         8d:ee:0d:11:36:74:c3:20:50:a7:35:e9:da:ac:4c:79:57:23:
         67:2f:74:f2:58:2c:fb:e0:6d:d7:22:1b:01:82:8f:12:b2:c6:
         7e:16:ac:77:77:d2:62:40:d2:64:34:54:87:75:06:38:08:52:
         ad:7a:e0:d4:7b:9e:30:8a:9b:b4:6a:9f:34:99:6d:69:dd:2d:
         bc:14:3d:5b:35:04:94:c7:16:c2:2e:76:93:31:16:e6:f2:f1:
         f9:05:e2:92:e7:fe:14:a4:ae:58:92:59:cd:4b:e6:f6:4f:7f:
         d4:21:26:dd:db:28:b8:ca:1f:d3:ec:17:68:70:38:e5:19:0a:
         ce:c0:d7:70:eb:2c:39:58:0e:8b:33:a6:97:7b:86:5e:cc:0e:
         75:bc:bd:85:b0:c3:cf:0c:4e:b7:9f:9b:45:66:b9:4b:df:9e:
         93:cd:64:88:40:26:48:80:55:9a:bb:90:79:ea:e6:3e:9f:bc:
         28:d6:8a:a4:c8:4a:b4:31:06:c4:0c:06:fc:96:18:34:b0:f3:
         28:de:4d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:00 2025 by rpki-client