Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e36342e302f31382d3234203d3e203135333131.roa
File:                     3139302e38322e36342e302f31382d3234203d3e203135333131.roa (raw, json)
Hash identifier:          2glhoxsjMu+/RdC4hHjqBl2NEhoeDGYi8gGEHk7c5S4=
Subject key identifier:   82:47:8F:74:25:26:FB:08:A2:8B:F1:17:5A:26:84:0E:E6:79:59:C0
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       0D756975374EFF3C80A318A57EF0E3E19E955673
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e36342e302f31382d3234203d3e203135333131.roa
Signing time:             Tue 04 Feb 2025 20:01:00 +0000
ROA not before:           Tue 04 Feb 2025 19:56:00 +0000
ROA not after:            Tue 03 Feb 2026 20:01:00 +0000
asID:                     15311
IP address blocks:        190.82.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:75:69:75:37:4e:ff:3c:80:a3:18:a5:7e:f0:e3:e1:9e:95:56:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: Feb  4 19:56:00 2025 GMT
            Not After : Feb  3 20:01:00 2026 GMT
        Subject: CN=82478F742526FB08A28BF1175A26840EE67959C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:f2:09:b8:95:bd:e2:3e:f4:2f:03:48:d8:
                    e8:76:7e:20:66:61:d3:67:10:94:6a:ae:2e:f9:13:
                    25:68:51:70:cb:9c:9a:fc:0f:32:91:f1:02:ce:70:
                    fe:c1:ea:c0:3d:c8:12:a9:f1:61:e8:08:ae:18:10:
                    97:23:ec:38:81:44:c3:df:78:a5:87:e5:34:b4:33:
                    7d:7b:7e:28:dc:ac:d2:6b:66:d9:62:4e:cf:11:78:
                    22:47:4c:b1:f1:cc:d3:09:55:25:07:57:02:04:e8:
                    a5:60:0e:f6:59:d0:52:a8:dd:6c:30:1d:3e:d5:a1:
                    77:cb:5d:28:06:f9:97:81:50:06:75:c2:2c:00:d3:
                    ed:96:be:73:d4:fd:7f:e0:da:7e:29:46:99:c6:31:
                    00:c8:16:43:0c:87:f5:d9:a2:f5:38:48:d7:e2:f5:
                    50:15:51:21:39:78:82:aa:0c:50:27:00:bf:e4:8f:
                    db:1c:15:91:60:77:57:e6:7b:35:d2:07:7c:46:b0:
                    4f:be:94:16:a5:75:66:48:75:cd:cc:c1:2f:02:5e:
                    d2:39:df:02:39:a1:a2:6e:6a:f1:ec:67:8b:8c:36:
                    07:ae:dd:68:0d:96:59:c8:ad:06:17:96:e8:79:0c:
                    54:38:93:7c:cc:d6:8a:0c:6d:ba:90:c2:cd:24:d5:
                    05:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:8F:74:25:26:FB:08:A2:8B:F1:17:5A:26:84:0E:E6:79:59:C0
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3139302e38322e36342e302f31382d3234203d3e203135333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:4c:88:96:ce:ad:ba:ea:e8:8c:7f:70:f2:0e:a6:63:6d:eb:
         eb:cf:de:22:35:a3:18:b4:22:f4:62:cf:1f:86:91:58:e7:3d:
         bf:78:29:ae:0c:04:c7:ba:8b:93:f4:1f:ac:ce:01:20:b8:87:
         9a:cd:40:b2:4d:1d:1e:42:50:91:97:3d:3a:35:1f:49:cb:60:
         f5:a0:ed:e6:39:04:20:63:ac:e6:f5:10:a4:a4:07:0f:ac:ff:
         b2:8b:65:79:64:ad:d9:6a:bb:4b:10:b2:c7:78:40:fa:20:c0:
         23:5d:1d:1a:c5:ee:a4:2e:b3:aa:01:62:e8:c4:3b:01:f4:66:
         82:12:0e:fe:82:43:78:30:db:4c:02:c3:92:89:ce:24:c7:53:
         b7:9d:69:b2:c2:fa:1e:68:f7:81:01:37:8c:2c:d6:56:d8:bd:
         f8:35:7a:2e:75:74:4d:67:78:b0:23:58:df:5c:e3:bd:69:e3:
         1c:8b:4c:b4:02:ad:9a:67:8b:08:26:f9:ec:27:12:a4:c9:d9:
         1a:d4:74:8f:9f:d8:77:06:5f:db:b9:24:9f:c4:ac:ae:e5:65:
         30:5e:af:a6:e2:01:59:3b:3c:34:f7:5c:ca:3d:70:2f:61:fb:
         d3:ef:65:72:69:39:ad:72:82:a3:60:f6:19:29:6d:b4:94:a3:
         9c:e9:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:27:17 2025 by rpki-client