Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e39332e3132382e302f31392d3234203d3e203139343239.roa
File:                     3139302e39332e3132382e302f31392d3234203d3e203139343239.roa (raw, json)
Hash identifier:          bsYahP2WNgxwo307fcmdIOD97hWOiD4rGjOWXYelTpE=
Subject key identifier:   40:B7:06:23:FA:82:15:8E:A0:5B:C4:65:78:9E:99:61:86:13:37:ED
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       545A07C1DB15EC33EA76D9FB67CEBB3323E343B3
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e39332e3132382e302f31392d3234203d3e203139343239.roa
Signing time:             Tue 04 Feb 2025 18:17:53 +0000
ROA not before:           Tue 04 Feb 2025 18:12:53 +0000
ROA not after:            Tue 03 Feb 2026 18:17:53 +0000
asID:                     19429
IP address blocks:        190.93.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5a:07:c1:db:15:ec:33:ea:76:d9:fb:67:ce:bb:33:23:e3:43:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Feb  4 18:12:53 2025 GMT
            Not After : Feb  3 18:17:53 2026 GMT
        Subject: CN=40B70623FA82158EA05BC465789E9961861337ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:27:c2:c9:64:08:85:b9:5e:80:1f:c9:5f:
                    8b:df:ce:a9:b7:12:22:51:aa:46:3a:2b:94:ce:f8:
                    56:de:8c:18:7d:ae:e8:86:c0:d7:96:f5:0b:01:c2:
                    5a:1f:52:bd:94:80:1b:80:3d:6f:6f:08:1b:f4:03:
                    2b:f0:6e:84:67:aa:f9:1e:e9:33:7c:f3:39:ae:39:
                    d2:5f:99:de:72:28:3f:0f:39:5d:74:3f:c3:8c:5a:
                    e1:ad:d8:60:7f:53:cd:7d:74:13:69:e4:d5:0e:ec:
                    59:e9:05:c6:ab:db:e4:0e:e7:5d:29:c6:c7:8b:eb:
                    44:0e:b0:62:71:a4:80:52:6d:53:9d:27:97:8e:15:
                    76:0f:21:b6:86:32:ba:e8:18:08:53:f0:61:e3:c2:
                    73:6d:ad:2a:74:d1:1a:08:87:1c:b8:c2:30:37:a3:
                    49:34:45:ae:9b:da:9f:95:8b:5e:89:71:09:fb:c1:
                    96:d5:ab:74:44:8e:73:8a:e0:b1:26:ed:aa:a8:86:
                    7d:a1:ff:af:be:f0:4a:1f:69:b3:36:ef:35:3f:3f:
                    f7:48:28:0c:7a:f7:ab:93:ce:37:a2:b9:98:5d:82:
                    58:34:ea:af:71:b5:ba:05:6c:9d:bf:36:c0:a3:fb:
                    24:f3:a2:86:78:40:46:9d:a6:bf:77:a2:17:27:88:
                    92:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B7:06:23:FA:82:15:8E:A0:5B:C4:65:78:9E:99:61:86:13:37:ED
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3139302e39332e3132382e302f31392d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:22:3b:a7:17:6a:f1:e5:79:45:89:37:90:1b:82:ff:ff:34:
         4f:05:41:8d:a5:98:27:70:d6:85:9d:bd:0d:75:d9:cd:f8:9a:
         40:7f:ba:57:93:86:ed:58:39:7e:d2:8d:e9:1d:00:ea:2e:5a:
         94:a6:ca:e9:f2:cd:93:e8:68:7e:31:1e:66:07:8e:73:b3:f5:
         71:08:12:91:98:20:09:08:2b:b0:5b:96:f8:aa:2c:cd:21:1a:
         1a:0a:7d:65:88:46:2f:fa:d9:6d:7b:94:79:69:f7:13:58:98:
         b0:59:4a:8a:50:8f:6a:31:7c:5c:53:c0:c7:ed:c5:b0:bc:39:
         5f:9a:66:f8:0b:ee:32:34:40:45:15:89:16:63:00:1e:33:1c:
         59:b5:31:b1:7d:13:af:e8:99:a1:c6:ec:08:5b:54:da:57:4d:
         d3:c7:c6:3e:2f:eb:45:21:24:bb:f0:6e:a8:ba:85:8e:2c:89:
         c7:e1:be:a9:c2:00:48:37:38:a3:84:2a:3d:cd:c7:13:17:72:
         65:18:54:6b:76:8e:28:5e:af:33:9a:88:69:68:12:86:91:11:
         2c:13:cc:f8:86:b6:b4:d4:0e:84:ef:27:37:49:37:40:2f:40:
         ca:d4:34:8d:a6:9f:a0:92:d5:28:0d:3f:10:c8:c1:29:13:b3:
         bd:fe:52:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:08 2025 by rpki-client