Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
File:                     3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa (raw, json)
Hash identifier:          EVM+dmGnIO3ZDnfd1yZnm5NPWLuUzCwVAKnmrW0UIMk=
Subject key identifier:   0E:7A:3D:B6:23:FA:67:9E:47:95:79:B8:F0:B4:F3:22:C4:9C:44:5E
Certificate issuer:       /CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
Certificate serial:       451A72E27E6D765399F913B3504C2BA92CCA937E
Authority key identifier: BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa
Signing time:             Tue 04 Feb 2025 18:26:29 +0000
ROA not before:           Tue 04 Feb 2025 18:21:29 +0000
ROA not after:            Tue 03 Feb 2026 18:26:29 +0000
asID:                     52300
IP address blocks:        190.110.176.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1a:72:e2:7e:6d:76:53:99:f9:13:b3:50:4c:2b:a9:2c:ca:93:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5
        Validity
            Not Before: Feb  4 18:21:29 2025 GMT
            Not After : Feb  3 18:26:29 2026 GMT
        Subject: CN=0E7A3DB623FA679E479579B8F0B4F322C49C445E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:47:08:6b:00:98:f3:c9:e8:01:d1:23:6a:
                    f7:df:f4:a9:71:e9:92:74:f9:ee:67:eb:d1:4b:15:
                    80:96:ff:b0:ae:ff:82:e8:19:7e:8b:a9:6d:8a:22:
                    80:8e:35:4b:25:5f:64:c1:74:c9:81:c6:f8:94:29:
                    80:ca:07:38:8f:43:c5:8d:0e:72:1c:1f:e5:ad:7c:
                    61:d5:2d:eb:9a:ac:ed:30:01:0d:e2:99:c5:89:7b:
                    30:44:e2:0e:47:e6:85:aa:5b:ec:a9:a5:18:8a:24:
                    5a:f3:4d:15:b4:f0:75:3b:e9:9f:0d:8d:24:83:d3:
                    a1:01:fc:78:9e:2f:12:10:d4:18:eb:d2:70:0b:57:
                    27:ab:60:04:d7:a2:4a:35:11:9e:53:34:d9:4c:9b:
                    09:94:25:ba:03:de:2a:e3:ba:b4:09:0c:63:5b:65:
                    3c:66:4b:45:9b:e5:7f:e9:06:62:31:70:a0:dd:06:
                    70:eb:95:39:a9:00:8a:70:72:4e:d0:41:ed:ef:fc:
                    7f:f4:05:53:41:52:d3:33:17:a4:28:2a:01:0b:a5:
                    06:d2:f9:be:53:73:62:a0:46:4d:e5:98:a3:8d:1d:
                    d2:4f:47:be:3f:05:25:54:db:8f:4a:06:de:2e:6e:
                    03:c5:d3:ff:1e:a6:e2:81:3c:04:1f:36:a2:fb:71:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:7A:3D:B6:23:FA:67:9E:47:95:79:B8:F0:B4:F3:22:C4:9C:44:5E
            X509v3 Authority Key Identifier:
                keyid:BE:38:E3:4A:9E:F6:02:24:5B:47:57:B8:F3:B6:BB:46:75:E6:B9:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE38E34A9EF602245B4757B8F3B6BB4675E6B9E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C113A941608DAA3F0C400E07AB5F2BA6912F082E356EE984F42774D6DA1960F/0/3139302e3131302e3137362e302f32312d3234203d3e203532333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:1e:9a:77:48:b1:00:52:cf:dc:bf:30:79:17:e8:85:5a:f2:
         d7:fb:b9:86:82:d0:eb:82:70:1c:48:3f:dd:6b:97:75:40:7c:
         5a:09:f1:3a:cf:de:f5:32:d8:b3:fc:77:63:f9:e1:62:a0:e8:
         39:f3:66:99:1d:e0:57:4d:0d:5b:55:f8:d1:c4:49:12:1b:7c:
         33:3a:e3:7e:d4:fb:c5:87:ed:c4:fa:2c:3d:90:f0:96:3c:c4:
         71:15:f4:bf:cb:6b:1d:1f:2e:e7:38:a2:a0:76:f8:81:f1:7b:
         bb:45:d8:a2:40:7a:cf:0c:ff:51:a6:ad:19:54:fe:a6:bb:d9:
         14:32:fa:dc:57:c9:82:0f:0b:bf:d1:70:33:48:f1:f0:d9:61:
         82:58:88:6a:c1:10:72:4c:ac:76:72:0a:be:c8:2d:d0:c8:7c:
         0d:ef:ab:8c:52:e3:fc:30:c4:05:d8:84:e5:87:cc:c7:95:0b:
         f6:50:2f:93:76:6a:cc:8a:d9:a5:91:85:a7:69:ea:14:65:15:
         31:7c:d7:cf:18:36:56:b8:97:ea:0b:dd:c5:f3:06:fc:69:11:
         43:0a:ac:db:40:de:21:78:ce:56:b9:17:3a:53:db:56:d7:9f:
         67:a0:68:4d:23:e1:44:43:47:90:eb:33:3b:90:e1:29:b2:d9:
         93:ea:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:09 2025 by rpki-client