Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa
File:                     3139302e3138332e302e302f31362d3234203d3e203230323037.roa (raw, json)
Hash identifier:          YS0Vhs5/otszj02iHrQfSmSlSVvn/K3qFdC4hmPfX44=
Subject key identifier:   3E:95:80:2D:A9:0E:15:2B:69:D7:CE:AA:EF:E4:FB:FD:CC:E7:E7:44
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       3814DDB55D65BA6BB95E99E5D57C5B410F1EDEAA
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 20:00:37 +0000
ROA not before:           Tue 04 Feb 2025 19:55:37 +0000
ROA not after:            Tue 03 Feb 2026 20:00:37 +0000
asID:                     20207
IP address blocks:        190.183.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:14:dd:b5:5d:65:ba:6b:b9:5e:99:e5:d5:7c:5b:41:0f:1e:de:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Feb  4 19:55:37 2025 GMT
            Not After : Feb  3 20:00:37 2026 GMT
        Subject: CN=3E95802DA90E152B69D7CEAAEFE4FBFDCCE7E744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:6c:32:4a:0c:4e:ce:51:b1:1a:bd:70:62:
                    71:1d:38:11:bf:0b:ab:9c:f0:93:bb:bd:b9:0d:0f:
                    97:90:62:f1:bf:40:f4:d9:a3:20:81:c5:ee:34:5d:
                    b4:7e:f1:bc:1a:3d:ea:11:82:6e:17:49:a7:d5:2e:
                    50:bc:9b:20:f6:d8:b8:94:ae:f6:2d:d3:90:70:19:
                    f9:67:94:f0:69:87:02:23:5c:6a:27:bb:a6:1a:66:
                    ed:da:bc:6b:29:ba:90:55:98:38:0a:68:69:29:35:
                    ec:a7:75:9b:96:4f:e7:30:de:cb:16:6d:a4:c3:e4:
                    16:82:11:38:7d:57:e5:26:fb:32:38:db:3e:aa:9b:
                    5f:54:ec:d2:af:f5:9c:01:9c:cc:92:fc:cf:10:00:
                    1d:79:77:d2:c4:84:bc:a5:4b:33:1b:64:fa:d8:a7:
                    5d:98:64:61:06:cb:d1:92:a9:61:21:01:1b:da:eb:
                    6d:4f:97:e2:53:7d:85:58:af:fb:20:44:1c:7f:53:
                    73:a5:98:44:98:0b:37:b3:65:6f:13:62:2a:c2:ec:
                    70:8b:84:f4:39:0d:4f:9c:cd:a2:bc:25:8a:13:bb:
                    db:a9:f1:7a:19:dc:f9:82:89:65:e1:5c:5a:47:74:
                    f7:30:12:03:a4:eb:23:cc:f3:52:34:9f:fd:5a:18:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:80:2D:A9:0E:15:2B:69:D7:CE:AA:EF:E4:FB:FD:CC:E7:E7:44
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c4:9d:f0:33:da:b7:26:56:aa:c7:6d:68:fd:41:03:61:b4:6a:
         7f:af:eb:3a:63:5f:72:d8:af:69:93:c7:8e:49:0c:b9:a2:a8:
         9d:eb:32:dd:90:5f:ff:81:d6:f9:e2:fb:e5:6c:15:c1:9a:33:
         86:be:a1:6c:47:51:03:f4:2e:85:04:f9:fe:13:6f:7b:93:4a:
         5e:18:27:18:b8:d4:6a:61:4d:4d:b1:4f:a0:a1:4b:79:4b:e0:
         91:a7:41:4a:22:33:36:7c:96:5c:95:e9:df:9b:dc:06:0b:bd:
         a9:e6:cf:37:ca:d5:10:2a:a3:8f:4d:7c:52:ec:80:31:15:2e:
         82:a1:d3:92:93:e1:2c:f2:0f:58:fb:40:f9:c9:44:69:fc:14:
         ea:cc:51:52:a4:6c:01:bf:90:0d:e8:49:b4:5c:74:2d:08:7e:
         d8:45:0a:d9:89:19:ba:ac:ae:9b:d6:0f:63:f2:62:48:f3:e1:
         0e:6c:e1:3f:a7:c0:8b:98:cd:78:db:11:d3:5a:80:b6:b8:6f:
         e9:b8:ab:41:c2:d5:06:9f:a2:09:b3:1c:19:8f:f5:a5:ac:a3:
         8d:99:57:6e:4e:22:c7:fe:8d:91:d7:76:fd:08:71:8e:21:fe:
         85:16:56:84:ca:99:0d:5e:1b:69:bb:b1:6d:84:e6:df:f5:f1:
         a6:15:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:11 2025 by rpki-client