Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32322d3232203d3e20323732303339.roa
File:                     3139302e38392e3137322e302f32322d3232203d3e20323732303339.roa (raw, json)
Hash identifier:          9Dbr7p8PlAQqPTmCxnjOHRjcnpLRMyDQKKLRB8Jrj34=
Subject key identifier:   5E:8B:84:19:5D:C6:3C:A6:55:3C:16:BA:AD:AA:6F:AC:7D:19:CD:F9
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       16F4E23DD317746C202EC6250D125F234F30F441
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32322d3232203d3e20323732303339.roa
Signing time:             Tue 04 Feb 2025 20:02:42 +0000
ROA not before:           Tue 04 Feb 2025 19:57:42 +0000
ROA not after:            Tue 03 Feb 2026 20:02:42 +0000
asID:                     272039
IP address blocks:        190.89.172.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f4:e2:3d:d3:17:74:6c:20:2e:c6:25:0d:12:5f:23:4f:30:f4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Feb  4 19:57:42 2025 GMT
            Not After : Feb  3 20:02:42 2026 GMT
        Subject: CN=5E8B84195DC63CA6553C16BAADAA6FAC7D19CDF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e9:7a:cb:41:d4:1a:87:47:61:7d:50:e0:f4:
                    77:74:9e:ad:73:1c:ad:af:8a:c0:59:06:ac:a4:aa:
                    dc:af:f6:0f:b1:e9:1c:0b:af:ce:36:57:eb:be:25:
                    28:88:ba:02:18:82:4b:3f:e0:a1:83:4d:5d:ad:24:
                    0e:8a:b5:e8:3d:b4:4d:b5:79:77:61:61:e0:8f:e6:
                    f8:da:3a:39:be:da:14:0c:0a:68:b9:da:bf:ef:dc:
                    16:da:d9:75:f7:fe:33:b3:57:23:cd:47:2d:e7:82:
                    a2:19:e7:b7:74:19:14:5e:82:44:14:09:cd:aa:5b:
                    67:da:02:8c:7c:3d:91:e7:f4:f5:6b:7d:6d:5c:45:
                    a3:67:0e:2c:87:a8:01:8a:2b:23:8f:f3:bc:ff:58:
                    88:a4:4e:9e:7b:d4:f3:0b:8b:a5:34:b1:3d:60:61:
                    c7:cf:47:82:76:87:20:92:13:5c:cc:71:b1:fd:76:
                    06:02:26:f1:7f:7e:c0:0d:0e:5a:43:91:99:fd:22:
                    7c:3a:ca:4b:41:66:a3:be:4c:99:67:2f:79:0b:6a:
                    f1:0a:87:bf:ac:4f:8b:c9:6a:6b:f1:38:1d:37:43:
                    d0:99:23:fa:97:21:b3:6c:ee:bd:3a:ed:af:f3:28:
                    3f:0b:0e:72:71:0f:a4:4e:4e:af:10:42:6b:4b:48:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8B:84:19:5D:C6:3C:A6:55:3C:16:BA:AD:AA:6F:AC:7D:19:CD:F9
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137322e302f32322d3232203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:60:17:4e:94:bc:86:13:cb:28:e7:00:11:58:07:35:e0:39:
         60:3c:55:8f:2a:ad:c2:93:6c:80:05:71:46:8a:49:75:f5:a5:
         f5:28:86:2b:e5:34:9d:a7:da:ec:6a:f2:30:cb:06:7d:ec:fb:
         54:5c:a5:70:53:a7:43:cd:43:72:cf:e3:85:ed:de:24:f2:59:
         98:0b:5e:a6:a7:89:ea:f9:20:9c:4f:23:f4:16:ca:a4:02:e2:
         e8:ba:95:aa:90:4a:0d:db:92:0e:f0:5c:7a:96:58:0f:e5:56:
         9e:0d:6b:55:e6:e1:f4:8f:22:b1:22:d7:aa:2e:94:a5:d9:3a:
         28:41:04:ba:20:bf:32:49:df:1b:a0:c6:d4:4e:2a:0f:5a:80:
         7c:32:31:2f:bb:04:e6:90:05:fe:05:0f:e5:de:8b:c3:95:3c:
         dd:78:14:2a:5d:8f:d8:fc:aa:87:3c:1d:27:3f:3f:e3:8d:e7:
         25:d2:17:8e:6d:1d:6a:91:9c:d7:c7:d9:5f:d8:ec:6c:de:c1:
         59:2a:4a:41:7f:09:54:3f:8d:64:b3:9d:89:3c:ec:4f:99:a4:
         51:5d:b6:64:12:08:51:ef:58:60:12:f5:1e:ee:d4:5c:67:0b:
         02:06:7c:d2:ad:65:ce:a0:ae:99:49:a0:13:00:d2:02:9d:92:
         48:8e:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:53:25 2025 by rpki-client