Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
File:                     3139322e3138382e35382e302f32342d3234203d3e203237393437.roa (raw, json)
Hash identifier:          dgK4VQDVToTOpq9jN2yYloJFzpwhkUrScrDTUUBhqiw=
Subject key identifier:   7A:48:6E:2B:8B:41:5E:1B:65:CA:5F:32:8A:13:83:A9:3F:A5:CD:58
Certificate issuer:       /CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
Certificate serial:       7EFD96124F36C89810DC72CE58B83B19723C13FD
Authority key identifier: BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa
Signing time:             Tue 04 Feb 2025 20:08:57 +0000
ROA not before:           Tue 04 Feb 2025 20:03:57 +0000
ROA not after:            Tue 03 Feb 2026 20:08:57 +0000
asID:                     27947
IP address blocks:        192.188.58.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:fd:96:12:4f:36:c8:98:10:dc:72:ce:58:b8:3b:19:72:3c:13:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB2B2E89891085EE92514B5D91EFE9F59005C933
        Validity
            Not Before: Feb  4 20:03:57 2025 GMT
            Not After : Feb  3 20:08:57 2026 GMT
        Subject: CN=7A486E2B8B415E1B65CA5F328A1383A93FA5CD58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:79:c7:de:fc:2d:7f:7d:7a:f5:86:db:e9:
                    ad:89:f9:33:b2:4a:40:25:f5:6a:fa:66:eb:74:fc:
                    8b:34:0b:6b:d1:02:56:d1:44:fb:35:c1:1e:89:f2:
                    48:34:46:5e:92:5a:59:78:b9:06:c8:8e:38:e2:8e:
                    65:be:62:f2:c0:03:1e:af:09:c5:29:e8:96:0e:d5:
                    90:bc:35:9e:a0:58:ce:03:77:fe:f3:a6:98:2a:c7:
                    ce:c7:94:b5:4d:09:c3:fa:87:44:5c:a9:e0:aa:32:
                    52:ea:24:f7:75:c9:50:dd:a8:23:44:0a:ea:53:0e:
                    5b:d7:38:c3:7f:ca:54:b8:64:9f:00:68:39:bb:e9:
                    c2:a1:16:91:81:81:a8:ec:2f:a0:6f:36:4d:af:41:
                    57:6b:0e:d1:9b:e0:26:54:f9:ae:1a:9f:6f:36:3d:
                    8c:42:65:eb:6c:55:1d:fe:36:6c:c7:40:35:5e:48:
                    29:cb:65:54:f9:a8:3b:24:fc:3d:79:74:55:17:29:
                    86:33:40:ad:66:05:5f:28:af:93:1b:40:95:fc:bf:
                    c6:21:04:55:7a:8f:46:ea:eb:9f:1f:bf:78:b3:da:
                    9b:49:4a:4c:ae:21:8e:44:c9:68:4b:ff:73:c7:bd:
                    d0:7a:b1:4a:b2:d8:02:ab:d5:e7:a6:29:1f:63:05:
                    09:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:48:6E:2B:8B:41:5E:1B:65:CA:5F:32:8A:13:83:A9:3F:A5:CD:58
            X509v3 Authority Key Identifier:
                keyid:BB:2B:2E:89:89:10:85:EE:92:51:4B:5D:91:EF:E9:F5:90:05:C9:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB2B2E89891085EE92514B5D91EFE9F59005C933.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F8223E41FDFCC8B3F32557B09F7D1D458E59A066FC7368917479D5DA0122974/0/3139322e3138382e35382e302f32342d3234203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:96:e4:3c:c9:1a:01:d5:af:32:f5:89:c4:6a:c2:e2:45:ec:
         e5:4a:83:b9:0d:fc:01:4e:10:f7:3a:82:71:12:4b:16:df:5b:
         7b:b5:b8:0d:d6:9b:86:4e:39:72:58:0b:11:5f:3b:71:ac:df:
         a0:f2:4e:88:e8:f9:a7:4d:d0:42:1c:57:21:c7:71:5c:82:5b:
         a8:fb:bc:f2:a6:b1:d1:24:e3:55:14:cc:6b:f2:c1:74:bd:1e:
         9d:1b:f8:63:4f:b0:af:6d:39:da:82:27:5d:00:36:5e:d8:41:
         3c:56:4f:b2:a1:7c:93:a2:d1:04:a0:30:98:86:bd:73:40:91:
         c0:01:3a:8c:f3:3d:b3:9c:9a:69:cb:c9:db:f8:64:23:51:7f:
         7a:27:bf:1f:e6:d5:8b:c7:98:7b:60:9f:e0:4c:9f:a3:e6:4d:
         8d:0d:e4:c3:85:4d:a6:83:44:50:8a:18:64:5d:6b:0b:7e:31:
         d6:21:73:f5:66:6e:5f:4c:be:e8:7e:2a:52:24:60:d4:65:7d:
         73:52:d6:9f:40:59:3f:de:d1:06:60:02:dd:46:8b:b5:85:10:
         5c:7c:84:d7:a6:ee:75:04:e4:8e:a1:ed:65:9c:19:20:89:c8:
         b0:fd:62:a5:d6:bc:27:a1:1d:cc:69:a9:62:b2:09:a9:b0:82:
         d4:87:45:8b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfv2WEk82yJgQ3HLOWLg7GXI8E/0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkIyQjJFODk4OTEwODVFRTkyNTE0QjVEOTFFRkU5RjU5
MDA1QzkzMzAeFw0yNTAyMDQyMDAzNTdaFw0yNjAyMDMyMDA4NTdaMDMxMTAvBgNV
BAMTKDdBNDg2RTJCOEI0MTVFMUI2NUNBNUYzMjhBMTM4M0E5M0ZBNUNENTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqnnH3vwtf3169Ybb6a2J+TOy
SkAl9Wr6Zut0/Is0C2vRAlbRRPs1wR6J8kg0Rl6SWll4uQbIjjjijmW+YvLAAx6v
CcUp6JYO1ZC8NZ6gWM4Dd/7zppgqx87HlLVNCcP6h0RcqeCqMlLqJPd1yVDdqCNE
CupTDlvXOMN/ylS4ZJ8AaDm76cKhFpGBgajsL6BvNk2vQVdrDtGb4CZU+a4an282
PYxCZetsVR3+NmzHQDVeSCnLZVT5qDsk/D15dFUXKYYzQK1mBV8or5MbQJX8v8Yh
BFV6j0bq658fv3iz2ptJSkyuIY5EyWhL/3PHvdB6sUqy2AKr1eemKR9jBQkHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUekhuK4tBXhtlyl8yihODqT+lzVgwHwYDVR0j
BBgwFoAUuysuiYkQhe6SUUtdke/p9ZAFyTMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjgyMjNFNDFGREZDQzhCM0YzMjU1N0IwOUY3RDFENDU4
RTU5QTA2NkZDNzM2ODkxNzQ3OUQ1REEwMTIyOTc0LzAvQkIyQjJFODk4OTEwODVF
RTkyNTE0QjVEOTFFRkU5RjU5MDA1QzkzMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQjJCMkU4OTg5MTA4NUVFOTI1
MTRCNUQ5MUVGRTlGNTkwMDVDOTMzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY4MjIzRTQxRkRGQ0M4QjNGMzI1NTdCMDlGN0QxRDQ1OEU1OUEwNjZG
QzczNjg5MTc0NzlENURBMDEyMjk3NC8wLzMxMzkzMjJlMzEzODM4MmUzNTM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzM5MzQzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8OjAN
BgkqhkiG9w0BAQsFAAOCAQEAHpbkPMkaAdWvMvWJxGrC4kXs5UqDuQ38AU4Q9zqC
cRJLFt9be7W4Ddabhk45clgLEV87cazfoPJOiOj5p03QQhxXIcdxXIJbqPu88qax
0STjVRTMa/LBdL0enRv4Y0+wr2052oInXQA2XthBPFZPsqF8k6LRBKAwmIa9c0CR
wAE6jPM9s5yaacvJ2/hkI1F/eie/H+bVi8eYe2Cf4Eyfo+ZNjQ3kw4VNpoNEUIoY
ZF1rC34x1iFz9WZuX0y+6H4qUiRg1GV9c1LWn0BZP97RBmAC3UaLtYUQXHyE16bu
dQTkjqHtZZwZIInIsP1ipda8J6EdzGmpYrIJqbCC1IdFiw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:08:58 2025 by rpki-client