Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa
File:                     3139302e3131342e31342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          l2/gZ8ziuzj/Xodbd+YaTg7e2bubLjT5gKGrNuUdvTY=
Subject key identifier:   DC:59:5D:AD:11:2F:F5:02:4D:FE:44:85:35:3F:43:2B:5F:DA:BB:BC
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       1A7F64D318D5B8C76C3CE44B1D02745DC3111522
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa
Signing time:             Tue 04 Feb 2025 18:42:18 +0000
ROA not before:           Tue 04 Feb 2025 18:37:18 +0000
ROA not after:            Tue 03 Feb 2026 18:42:18 +0000
asID:                     8100
IP address blocks:        190.114.14.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7f:64:d3:18:d5:b8:c7:6c:3c:e4:4b:1d:02:74:5d:c3:11:15:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Feb  4 18:37:18 2025 GMT
            Not After : Feb  3 18:42:18 2026 GMT
        Subject: CN=DC595DAD112FF5024DFE4485353F432B5FDABBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:15:d4:e9:58:e5:52:96:96:e0:a4:f7:0f:c1:
                    5b:2f:5a:75:fa:06:b4:5f:c3:a8:dc:4c:fb:ad:d8:
                    ee:13:f7:df:04:fb:3c:92:34:eb:1f:35:4a:1c:c1:
                    92:cc:85:15:15:c1:52:39:56:b1:e9:61:c4:d0:8c:
                    7a:46:05:c7:38:63:00:aa:24:72:b6:8d:c9:36:c7:
                    f4:ff:26:4a:72:31:ab:a0:87:7d:11:11:76:3c:a2:
                    0b:58:94:4e:1f:0b:74:93:be:dd:50:e7:18:db:90:
                    5c:0b:0b:c1:bc:1f:ba:eb:2a:20:35:f7:83:85:f8:
                    da:00:70:04:b4:4a:7d:21:39:f1:5b:df:90:0c:58:
                    03:08:5d:af:d2:55:df:d3:04:28:d1:a5:a4:82:be:
                    10:55:d3:7d:51:01:88:fd:c9:6c:86:51:71:87:69:
                    00:c2:d4:85:68:50:29:e3:2c:76:0d:48:e6:13:99:
                    46:4b:ea:07:f3:27:1d:4b:72:99:ab:c6:b2:2c:59:
                    7b:c6:7f:a5:ec:ab:dd:16:93:c9:8a:be:17:12:70:
                    04:52:6e:1e:d4:6f:81:9e:c2:a3:6f:90:7f:31:c8:
                    58:40:bb:11:91:ae:b7:01:31:77:3f:76:fb:2c:90:
                    33:14:e5:b5:d2:01:c1:59:e4:8e:b4:2e:72:38:10:
                    bc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:59:5D:AD:11:2F:F5:02:4D:FE:44:85:35:3F:43:2B:5F:DA:BB:BC
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e31342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:0d:da:44:16:8c:2a:8a:ed:a3:04:e9:f5:a6:76:d3:b6:
         01:4e:ac:43:1c:00:e0:ee:ca:48:94:58:8e:a8:f2:d9:c2:ba:
         96:93:00:df:a8:ac:3a:03:d9:3a:2c:f3:ec:3b:bc:f3:ec:95:
         d8:2b:4d:9f:12:44:64:fb:ed:de:eb:c7:8f:2c:af:ad:b3:df:
         5b:8c:b3:d2:b2:aa:69:b9:f7:62:25:16:d4:bc:b8:bb:88:bc:
         6d:e7:7b:c3:3f:62:a5:b9:83:7c:98:c2:25:41:7e:57:0a:c9:
         1f:6f:b5:3b:32:11:48:a0:fc:a1:4b:45:8d:6c:12:78:d8:16:
         38:00:a6:84:ce:54:6f:fe:a5:ed:0e:53:e3:2d:f9:26:77:95:
         1d:8c:d1:7d:40:85:c8:33:bf:e6:f9:fd:4c:54:83:be:b3:70:
         ba:95:13:4a:a7:9f:0d:12:67:98:77:2b:f1:82:46:29:7d:bd:
         43:d0:a7:dc:d9:1a:cc:3c:18:61:08:d4:50:f0:d5:bf:42:d1:
         2e:21:d5:6b:56:5a:89:1f:d6:78:1b:8e:2d:73:8e:de:5a:bd:
         4c:3b:45:a0:9d:ab:24:9b:12:c7:43:83:2b:2f:65:30:cc:cd:
         94:f9:9c:6c:a5:18:81:29:69:39:44:7d:b0:c8:23:52:a8:5d:
         76:36:fd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:48 2025 by rpki-client