Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa
File:                     3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa (raw, json)
Hash identifier:          bYRMuxAHZyL2U9xEvWSh2oVBfV7vTnpN9j541TlCugo=
Subject key identifier:   30:26:C4:A0:36:AF:67:54:8C:5B:6F:14:E3:84:55:02:30:FC:86:61
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       3CBB608ABAD44698E744F5B4C32030656223FB54
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa
Signing time:             Tue 04 Feb 2025 18:18:47 +0000
ROA not before:           Tue 04 Feb 2025 18:13:47 +0000
ROA not after:            Tue 03 Feb 2026 18:18:47 +0000
asID:                     52354
IP address blocks:        190.122.150.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:bb:60:8a:ba:d4:46:98:e7:44:f5:b4:c3:20:30:65:62:23:fb:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Feb  4 18:13:47 2025 GMT
            Not After : Feb  3 18:18:47 2026 GMT
        Subject: CN=3026C4A036AF67548C5B6F14E384550230FC8661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:81:b4:5a:d4:cb:5a:e5:6c:b8:2c:6c:74:56:
                    e2:32:47:4b:24:8a:c2:35:cc:f6:16:1b:4c:df:7f:
                    01:ef:f5:a0:79:80:3a:2f:68:37:1d:d5:53:10:00:
                    86:c9:3b:f0:be:4a:b9:9e:60:5e:27:2d:f8:99:b1:
                    8d:ba:25:5e:63:e3:9f:cc:3b:01:1b:4b:bc:66:89:
                    f1:34:bb:4c:e3:92:d4:44:f1:23:df:7f:0b:30:c5:
                    97:68:85:67:bf:02:cb:2d:85:a1:42:d6:a8:24:ab:
                    ef:16:ba:b9:a8:fb:5e:d5:51:c4:da:59:30:81:53:
                    c6:39:b6:2d:5d:65:91:b3:d6:56:45:02:8c:8f:e2:
                    d3:2f:c0:9a:03:eb:df:e6:6c:b4:68:16:e6:af:f1:
                    2b:15:4a:2e:59:8f:fb:bc:8e:a0:35:01:2e:b6:b7:
                    7f:4e:08:a4:be:d3:fb:00:b8:a7:54:f4:21:80:11:
                    33:38:e5:95:5b:8a:48:d4:85:f4:4d:f5:28:2c:f0:
                    8f:76:d8:57:b0:30:7e:e6:30:e1:88:e9:fc:47:e1:
                    13:e4:3d:87:ac:80:d0:3c:6c:f3:21:2c:4b:46:2e:
                    91:25:5f:d1:2e:6c:e2:09:b1:61:c0:6a:27:59:a2:
                    dc:fc:34:7b:bb:e6:2a:40:c7:3b:64:df:62:de:70:
                    14:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:C4:A0:36:AF:67:54:8C:5B:6F:14:E3:84:55:02:30:FC:86:61
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135302e302f32332d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:06:1d:9e:d1:30:08:57:69:d0:cd:0c:37:43:93:ac:cf:
         f0:ad:e6:b7:8b:fa:f3:75:4d:9d:22:59:6d:39:e7:12:c3:b0:
         19:a6:53:7b:99:83:68:19:98:78:bd:dd:46:14:6a:8b:94:c3:
         6f:3f:0e:64:ec:6e:cd:ff:ed:01:8d:8e:90:d0:46:d4:06:e6:
         41:84:16:0f:39:d3:d0:8b:70:cf:7d:dd:a0:64:0c:17:94:05:
         75:e1:6a:c2:9a:17:5a:d2:21:fc:ff:60:82:29:ee:20:70:94:
         7a:87:34:d9:10:a4:6f:84:19:e2:c2:06:8e:b0:91:e3:ea:81:
         5a:b4:53:38:6d:bc:24:9a:1c:bc:fb:4a:62:dd:55:e6:b6:9a:
         36:18:b8:d7:c8:7a:6a:78:b0:32:a9:f3:35:aa:36:22:26:84:
         e7:5f:e8:fd:a3:d3:d1:97:91:2a:46:cd:19:29:01:0e:b9:6c:
         88:e0:9d:1c:89:a0:1c:f4:ce:3e:4b:96:b0:63:04:ee:e6:d5:
         d1:39:91:68:c4:48:3c:6d:9a:ff:81:80:b8:34:3d:63:a7:9a:
         c0:f0:f2:40:7c:2d:71:49:0f:f2:05:d4:bf:82:71:68:86:66:
         33:bd:b7:ba:62:2d:16:89:70:39:ca:43:41:0b:78:14:36:55:
         2c:ad:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----