Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa
File:                     3139302e39312e33322e302f32302d3234203d3e203237363531.roa (raw, json)
Hash identifier:          R7FGY059a1hAE4ACKR5PVXj4iD7a1CuymXi3bVr7ZXw=
Subject key identifier:   C9:A4:7D:AD:0B:0C:4F:58:A7:3D:27:39:94:E8:EE:1F:16:2E:91:EE
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       5F6EA148DE043DC7C09C346FDD527A4BD2AC6F2F
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa
Signing time:             Fri 28 Mar 2025 20:13:14 +0000
ROA not before:           Fri 28 Mar 2025 20:08:14 +0000
ROA not after:            Fri 27 Mar 2026 20:13:14 +0000
asID:                     27651
IP address blocks:        190.91.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:6e:a1:48:de:04:3d:c7:c0:9c:34:6f:dd:52:7a:4b:d2:ac:6f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar 28 20:08:14 2025 GMT
            Not After : Mar 27 20:13:14 2026 GMT
        Subject: CN=C9A47DAD0B0C4F58A73D273994E8EE1F162E91EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0a:a6:69:a0:d3:c5:3b:92:f0:e5:94:0a:f9:
                    9a:56:e4:f9:c8:41:67:19:67:cc:34:e7:11:58:fc:
                    21:51:e7:e0:fb:dc:c3:e7:ad:fe:28:03:c7:08:10:
                    75:38:1d:89:8a:fe:65:1a:24:f0:83:73:c6:8b:31:
                    3a:8a:fd:38:ee:dc:ab:d7:a5:a1:63:84:68:19:fd:
                    fa:47:31:8c:53:30:6a:80:ac:15:1c:d5:84:ea:e0:
                    b0:ec:d0:bf:62:32:a0:e5:e3:c6:4f:6d:a5:7d:54:
                    80:50:43:50:37:48:47:59:28:ec:65:e1:db:82:9c:
                    6a:f0:89:26:ef:51:41:98:92:87:56:5c:80:7f:ba:
                    96:42:0b:3f:65:6d:64:35:53:86:f6:40:d4:5e:62:
                    7c:7e:44:61:49:07:9f:00:9e:7b:7a:16:3e:1c:5b:
                    22:d2:d0:db:88:29:eb:81:d5:3d:e0:74:4c:bd:3d:
                    dd:48:ef:f3:a8:18:0d:23:59:9f:93:6f:6c:3f:87:
                    7c:ec:95:ef:1f:f6:1b:3e:40:ae:fa:f0:31:de:f4:
                    bd:61:42:cc:b5:e6:17:53:88:8c:13:bf:af:df:55:
                    9b:fb:8d:de:a5:7f:21:54:18:9c:ad:27:89:b7:2f:
                    8a:1d:d3:8d:61:24:79:c2:5f:05:e2:ef:ef:92:de:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A4:7D:AD:0B:0C:4F:58:A7:3D:27:39:94:E8:EE:1F:16:2E:91:EE
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e33322e302f32302d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:48:d9:d0:07:27:68:12:35:e9:c1:93:e2:6e:ba:54:d2:89:
         af:c3:e4:b3:2d:4c:ce:1b:2e:bd:0f:88:5f:ac:87:32:ef:97:
         69:ad:8d:79:d9:43:bb:de:60:79:75:33:fd:15:91:dd:66:98:
         05:55:bc:82:3d:94:cb:fc:5e:5f:53:db:bf:59:fa:3b:62:39:
         99:ba:98:0d:ea:fe:9e:71:a3:54:9e:78:73:99:99:d1:ff:eb:
         e9:59:38:60:4a:78:71:2d:07:75:e1:b9:c3:91:e1:bb:08:a8:
         ff:4e:3c:6e:d3:d4:de:9b:a4:26:c5:19:75:90:2b:87:9f:35:
         c6:ad:12:bf:b0:df:a3:5a:6a:c4:ad:85:96:5a:76:4f:2b:2f:
         8f:43:d1:1d:6f:38:15:8e:fd:1a:78:9e:c0:1c:0c:19:13:66:
         23:a2:d1:e5:4c:d5:c4:30:18:09:b8:b7:36:a4:66:43:73:ea:
         52:a3:38:9c:a0:c3:b9:9a:a3:2d:9f:2c:82:65:81:d3:ac:66:
         b9:23:f0:e5:3f:73:d4:b4:28:d7:42:1c:9b:aa:c1:10:54:6c:
         da:a7:48:af:c1:ac:5e:78:bb:b5:8d:b4:4e:f3:11:9c:3c:26:
         d7:c3:57:02:dc:d4:a6:fe:bb:ca:69:10:8f:52:67:d7:1e:9c:
         d5:16:6a:58
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUX26hSN4EPcfAnDRv3VJ6S9Ksby8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNTAzMjgyMDA4MTRaFw0yNjAzMjcyMDEzMTRaMDMxMTAvBgNV
BAMTKEM5QTQ3REFEMEIwQzRGNThBNzNEMjczOTk0RThFRTFGMTYyRTkxRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CqZpoNPFO5Lw5ZQK+ZpW5PnI
QWcZZ8w05xFY/CFR5+D73MPnrf4oA8cIEHU4HYmK/mUaJPCDc8aLMTqK/Tju3KvX
paFjhGgZ/fpHMYxTMGqArBUc1YTq4LDs0L9iMqDl48ZPbaV9VIBQQ1A3SEdZKOxl
4duCnGrwiSbvUUGYkodWXIB/upZCCz9lbWQ1U4b2QNReYnx+RGFJB58Annt6Fj4c
WyLS0NuIKeuB1T3gdEy9Pd1I7/OoGA0jWZ+Tb2w/h3zsle8f9hs+QK768DHe9L1h
Qsy15hdTiIwTv6/fVZv7jd6lfyFUGJytJ4m3L4od041hJHnCXwXi7++S3h5xAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUyaR9rQsMT1inPSc5lOjuHxYuke4wHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzkzMDJlMzkzMTJlMzMzMjJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczNjM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+WyAwDQYJ
KoZIhvcNAQELBQADggEBAFVI2dAHJ2gSNenBk+JuulTSia/D5LMtTM4bLr0PiF+s
hzLvl2mtjXnZQ7veYHl1M/0Vkd1mmAVVvII9lMv8Xl9T279Z+jtiOZm6mA3q/p5x
o1SeeHOZmdH/6+lZOGBKeHEtB3XhucOR4bsIqP9OPG7T1N6bpCbFGXWQK4efNcat
Er+w36NaasSthZZadk8rL49D0R1vOBWO/Rp4nsAcDBkTZiOi0eVM1cQwGAm4tzak
ZkNz6lKjOJygw7maoy2fLIJlgdOsZrkj8OU/c9S0KNdCHJuqwRBUbNqnSK/BrF54
u7WNtE7zEZw8JtfDVwLc1Kb+u8ppEI9SZ9cenNUWalg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client