Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233312e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233312e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          0++Hv0TBPkDCAQHuypFtC4pk3VfQK5XjUWIm+0WlsBg=
Subject key identifier:   32:4E:17:9C:C5:C9:A9:30:19:0F:BF:2B:45:20:9D:82:34:86:0C:93
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5C0864342E0B0E5F83859A0DBCBD483DF5D57CB1
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233312e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:11 +0000
ROA not before:           Sun 02 Mar 2025 04:06:11 +0000
ROA not after:            Sun 01 Mar 2026 04:11:11 +0000
asID:                     52369
IP address blocks:        190.184.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:64:34:2e:0b:0e:5f:83:85:9a:0d:bc:bd:48:3d:f5:d5:7c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:11 2025 GMT
            Not After : Mar  1 04:11:11 2026 GMT
        Subject: CN=324E179CC5C9A930190FBF2B45209D8234860C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:22:43:76:82:f8:57:8c:10:e3:4e:13:69:
                    ec:0d:8f:12:ad:e8:d4:01:4b:10:53:ea:e9:42:a7:
                    87:45:2d:81:22:72:8e:5d:f3:54:ab:41:a8:72:ba:
                    e9:da:0e:32:e7:78:77:08:03:00:4b:be:5b:84:99:
                    f4:0a:1e:98:d2:70:74:dd:1e:99:98:02:55:cf:98:
                    b4:85:86:34:f6:da:28:6f:de:c4:18:0a:e4:b8:75:
                    5d:f0:2f:0e:68:c2:51:f0:2e:7d:9c:e0:fa:3a:83:
                    68:7e:5c:bf:bc:3c:43:50:f1:9e:e3:8e:03:77:2b:
                    c6:d7:48:4c:f0:37:7b:f6:5b:10:c8:ca:5c:0b:7d:
                    97:27:09:67:05:d0:86:21:d1:d2:61:fa:e2:8c:36:
                    06:ca:d3:3e:16:c0:23:15:28:40:cc:83:e7:8b:06:
                    77:da:15:46:69:a2:fc:02:a2:4b:bf:1e:d9:0b:b2:
                    8f:8b:1e:ee:8d:12:3b:fa:53:e4:52:4d:11:7e:0d:
                    da:0e:3c:ac:a5:d0:99:be:a4:ab:d8:9a:ca:e5:af:
                    35:0b:dc:e9:62:bd:38:85:e0:93:c4:0e:06:ca:43:
                    dd:f0:8f:27:a7:5c:5e:b9:af:5c:48:e0:b5:ee:ac:
                    18:6d:c0:f9:fc:53:9d:71:f1:4c:a5:a4:ab:b6:69:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4E:17:9C:C5:C9:A9:30:19:0F:BF:2B:45:20:9D:82:34:86:0C:93
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233312e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:38:32:32:12:31:31:75:12:e9:c5:b6:67:5e:8e:1d:0a:3f:
         27:bd:69:06:10:12:a8:69:66:2d:0c:84:3e:97:8a:83:1e:bb:
         75:fd:0c:8a:44:39:09:87:49:49:9b:18:ca:34:ad:cc:df:f9:
         8c:b8:70:18:4e:88:8a:81:58:1e:16:65:23:cf:f6:30:0c:76:
         b8:f1:f3:bd:a9:59:27:05:c9:63:f9:59:af:a1:28:3b:59:b2:
         32:43:ca:fe:eb:05:1d:f4:98:7f:bd:39:df:b8:9e:a5:d3:00:
         20:a5:fe:66:8b:1a:82:ec:3e:61:bf:89:b0:dd:d9:0f:01:46:
         f5:25:bb:69:83:0b:4c:ec:25:54:36:bb:43:e1:97:e3:e7:63:
         cc:79:70:60:ee:96:71:9f:aa:d0:df:b5:f1:80:6c:73:95:71:
         a4:d2:d1:c3:0c:dd:27:95:e2:ed:78:c0:93:40:f3:1f:01:2c:
         2e:be:94:10:49:19:07:2a:1f:5b:49:6e:67:4a:cb:32:b3:f1:
         9b:e5:4f:48:a2:38:f7:b0:b9:5f:83:22:58:e4:aa:5e:c6:45:
         28:7a:0d:33:46:61:ad:83:0d:2c:a8:f1:41:73:58:84:4c:fa:
         80:05:4f:54:8f:77:5b:10:fd:92:da:4e:73:99:d4:66:93:34:
         08:6e:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client