Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130302e302f32332d3234203d3e20323633363939.roa
File:                     3139302e3131342e3130302e302f32332d3234203d3e20323633363939.roa (raw, json)
Hash identifier:          MjgJYRhpw4GJiIGQm3DZOmKGUL64GuzPlFWM1Yuzq+c=
Subject key identifier:   99:ED:05:18:2E:52:BF:8F:0C:44:AE:A9:86:98:FB:9C:8B:65:AE:00
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       0C5E03B62265BA8C640079D8609CF275A4D8FD95
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130302e302f32332d3234203d3e20323633363939.roa
Signing time:             Tue 04 Feb 2025 20:08:05 +0000
ROA not before:           Tue 04 Feb 2025 20:03:05 +0000
ROA not after:            Tue 03 Feb 2026 20:08:05 +0000
asID:                     263699
IP address blocks:        190.114.100.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:5e:03:b6:22:65:ba:8c:64:00:79:d8:60:9c:f2:75:a4:d8:fd:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:05 2025 GMT
            Not After : Feb  3 20:08:05 2026 GMT
        Subject: CN=99ED05182E52BF8F0C44AEA98698FB9C8B65AE00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1e:31:95:3a:26:3f:db:b2:ba:05:ec:0b:16:
                    e0:c9:76:e9:6f:47:ae:c8:a0:5b:a9:b3:fe:a8:3d:
                    54:ab:e4:e1:58:d8:5d:f6:15:5e:f1:bb:8a:d7:e4:
                    33:aa:97:24:c2:6e:a2:04:4b:25:33:08:76:c1:5c:
                    75:05:94:eb:b9:69:e1:94:89:15:51:6c:80:1c:01:
                    d2:39:19:be:86:70:85:02:83:aa:c1:47:12:5b:ab:
                    04:e6:90:52:fa:8f:ac:83:4b:ac:0c:b8:40:a5:03:
                    d3:6f:c7:fd:48:c5:98:1f:09:98:36:b3:9a:66:08:
                    3e:91:14:13:0f:a6:b8:4c:c2:2f:af:ca:2d:3f:67:
                    61:c3:95:39:01:e2:fb:19:46:22:39:0c:0a:0c:bb:
                    77:67:fb:a2:62:97:7d:d2:32:82:0a:b5:d5:01:ed:
                    e6:37:77:0a:07:87:06:7b:9e:b2:37:05:13:64:89:
                    7b:14:bd:a9:15:12:03:1e:1a:81:42:e5:22:22:99:
                    a2:50:1a:7e:30:10:1c:f4:b0:ae:92:db:27:6b:eb:
                    59:56:60:de:de:04:b8:3a:44:9e:e2:85:8d:3a:17:
                    53:54:29:3e:82:07:2a:13:52:fc:39:5f:da:2b:46:
                    84:f5:d3:8a:38:23:52:a9:7d:93:bd:55:fe:50:c6:
                    ba:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:ED:05:18:2E:52:BF:8F:0C:44:AE:A9:86:98:FB:9C:8B:65:AE:00
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131342e3130302e302f32332d3234203d3e20323633363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:2c:28:25:e0:bc:94:72:3f:9b:fe:f0:5a:1c:1d:3e:fb:
         17:dc:40:7c:9b:1a:49:22:11:e5:db:3b:3d:97:14:d5:e3:bd:
         74:09:66:11:58:7d:04:a9:d7:55:d5:82:c0:89:45:89:54:36:
         0b:1d:7f:6e:e5:43:9b:36:41:72:c2:b1:98:d0:30:95:04:f1:
         36:5c:37:8a:23:9e:98:21:ae:48:c9:4b:df:d0:0a:27:b6:f2:
         f8:3c:30:4d:0a:33:82:cb:fc:c4:ce:d5:4a:b1:63:f7:55:81:
         0f:d5:72:cd:24:5a:23:12:a7:a9:b1:47:e8:b6:b1:57:c8:d6:
         26:60:d3:10:d1:35:0b:01:18:d0:6e:dc:19:b6:4b:b7:42:87:
         fa:99:d1:dd:5a:62:c0:98:0d:a3:1b:0f:74:e3:7a:24:0b:c8:
         0c:dc:5c:f9:b7:01:9b:12:de:a9:3a:30:f4:aa:69:c2:2d:29:
         99:02:46:93:fc:c6:72:60:c8:28:24:a8:15:79:f0:ec:e9:c1:
         ed:65:5b:76:fb:da:bb:a9:49:d4:20:89:f0:fc:36:19:da:11:
         65:9c:37:a9:1d:fc:6f:ed:c6:16:0a:b0:a5:09:b7:96:ca:d5:
         14:da:88:4e:22:15:13:07:b6:a4:ef:fc:04:9c:4a:83:3d:c8:
         3e:9b:4f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:01 2025 by rpki-client