Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3139302e342e36342e302f32302d3230203d3e203237373435.roa
File:                     3139302e342e36342e302f32302d3230203d3e203237373435.roa (raw, json)
Hash identifier:          S9KNNo51F26V1kAve6ruXAVOvVExqF3k+73uIJkV1i0=
Subject key identifier:   26:E7:17:EC:14:68:A0:DA:BA:57:39:D4:18:83:9C:A6:71:9F:86:F3
Certificate issuer:       /CN=15DB6B388486161B93957759E07BEB14CE6D932F
Certificate serial:       6AC3B65397F259E879DF32B17E8135BC4EB449F6
Authority key identifier: 15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3139302e342e36342e302f32302d3230203d3e203237373435.roa
Signing time:             Tue 04 Feb 2025 18:32:50 +0000
ROA not before:           Tue 04 Feb 2025 18:27:50 +0000
ROA not after:            Tue 03 Feb 2026 18:32:50 +0000
asID:                     27745
IP address blocks:        190.4.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c3:b6:53:97:f2:59:e8:79:df:32:b1:7e:81:35:bc:4e:b4:49:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DB6B388486161B93957759E07BEB14CE6D932F
        Validity
            Not Before: Feb  4 18:27:50 2025 GMT
            Not After : Feb  3 18:32:50 2026 GMT
        Subject: CN=26E717EC1468A0DABA5739D418839CA6719F86F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:a2:b9:5c:fd:75:e9:b8:67:90:7b:e5:a4:
                    d4:20:78:ae:82:0c:4b:df:c0:3d:a4:74:85:f3:fa:
                    c4:b6:f6:96:8c:f3:25:da:a0:42:d7:f5:d1:78:95:
                    37:bc:a3:72:f9:ab:c8:09:61:b4:67:5b:11:c5:8e:
                    33:6c:0e:47:5d:13:08:f6:ad:2e:3b:e0:f4:7e:91:
                    51:3f:bf:fa:7b:6b:a0:66:49:79:11:ac:0d:eb:a2:
                    9f:fb:3a:1e:e3:de:08:4b:f0:39:28:59:26:43:d4:
                    1f:3b:d6:c3:4a:9b:1b:26:4a:99:98:3b:5f:2b:2e:
                    ba:11:c8:ba:7c:aa:6d:82:9d:45:b9:38:a4:3c:51:
                    31:68:59:87:52:31:3d:9a:4f:05:ac:34:76:11:93:
                    fd:f6:29:19:3e:31:00:57:42:b5:17:03:26:d9:3c:
                    3a:9d:21:1a:fb:97:2b:ec:74:c8:6e:cb:6d:4d:20:
                    81:09:50:d9:bd:a6:48:65:a4:59:88:dd:aa:4c:af:
                    ed:ee:d8:35:2f:f4:4a:ad:7f:27:64:be:8e:0c:e9:
                    63:e2:01:9b:e1:4e:64:ef:1a:7c:55:40:d7:1a:c1:
                    5a:32:34:f3:3e:52:69:46:5c:d9:0f:89:02:6f:91:
                    9d:71:9a:20:1e:a8:eb:16:1f:ef:ed:13:0a:b4:a4:
                    29:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E7:17:EC:14:68:A0:DA:BA:57:39:D4:18:83:9C:A6:71:9F:86:F3
            X509v3 Authority Key Identifier:
                keyid:15:DB:6B:38:84:86:16:1B:93:95:77:59:E0:7B:EB:14:CE:6D:93:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/15DB6B388486161B93957759E07BEB14CE6D932F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DB6B388486161B93957759E07BEB14CE6D932F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A8DFEFC267C90FA673EB149935ED7F0100A2DF47ED9FBD4570456D1D71E7525/0/3139302e342e36342e302f32302d3230203d3e203237373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:bc:d9:7b:ba:57:ad:eb:50:07:32:4d:25:b1:0d:7c:b8:13:
         a4:dc:43:52:f6:9c:08:a7:21:fa:db:3d:33:60:f9:85:97:87:
         2f:2f:74:a0:46:1f:6f:56:f4:09:eb:a2:4f:16:f6:9b:5a:35:
         65:02:2a:d9:16:8c:73:3e:a4:b2:74:67:af:37:6b:53:c5:5a:
         fd:12:5a:5c:ec:5a:3e:12:b3:73:7d:e6:e5:37:75:dd:52:a7:
         2c:ce:3e:cb:e8:d9:a3:53:c9:6e:a0:eb:3d:ca:91:9b:5e:c9:
         84:02:cf:cb:da:55:1a:6b:3c:49:e5:fa:33:26:08:28:7d:bc:
         b0:36:33:25:2b:52:0b:72:83:a8:8a:08:52:8e:d0:6c:e3:07:
         88:79:55:6b:ad:ab:5c:c0:b4:92:a1:66:7d:d0:da:30:ba:e8:
         7a:77:f5:98:99:7c:f1:8c:41:f8:ee:1b:89:f5:70:2c:c6:62:
         c6:f6:b5:3a:0c:76:24:50:6c:ef:0f:86:52:03:7d:16:cb:16:
         e5:aa:bd:37:78:ed:81:4e:5b:84:5f:85:42:d0:20:16:36:4f:
         bd:b8:40:16:6b:83:6b:ca:89:87:08:20:f6:e5:90:cb:a2:6f:
         b5:74:98:d6:a8:f1:9a:1e:29:7b:35:d3:73:5c:89:0f:d7:1f:
         b3:ea:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----