Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa
File:                     3139302e39302e3139322e302f31382d3234203d3e203138363738.roa (raw, json)
Hash identifier:          yCK8Jw7EzFkTvHUUJfEcvtJYAR08fUiS663QewA/dJg=
Subject key identifier:   38:5D:71:25:97:86:34:ED:EE:FD:09:45:21:37:BD:20:C9:A1:1F:C5
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       432F6CC95A60176D56605AA1E73A566F1FE6A2D8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa
Signing time:             Mon 10 Mar 2025 01:50:00 +0000
ROA not before:           Mon 10 Mar 2025 01:45:00 +0000
ROA not after:            Mon 09 Mar 2026 01:50:00 +0000
asID:                     18678
IP address blocks:        190.90.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2f:6c:c9:5a:60:17:6d:56:60:5a:a1:e7:3a:56:6f:1f:e6:a2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar 10 01:45:00 2025 GMT
            Not After : Mar  9 01:50:00 2026 GMT
        Subject: CN=385D7125978634EDEEFD09452137BD20C9A11FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f4:87:28:59:4e:9b:8a:cf:0b:9c:92:1d:e7:
                    c7:37:c9:be:2f:1a:82:77:61:bd:d6:51:43:65:62:
                    7f:2c:30:53:79:41:4f:1d:48:44:cf:77:72:d5:2f:
                    52:77:2a:bb:ff:09:89:c0:78:48:0d:44:b5:f3:3e:
                    c7:32:ee:49:70:28:e9:08:39:fd:3d:47:d9:63:aa:
                    27:c5:82:5e:2b:b6:97:4d:54:1c:ef:f5:a9:72:92:
                    85:9c:b8:41:a0:05:0a:fa:b0:f1:d5:a3:8d:af:23:
                    29:fa:b6:19:13:7a:f8:87:2e:85:96:a7:98:cc:0d:
                    df:6b:51:06:9d:62:22:8d:54:6b:2d:17:58:d9:f0:
                    f1:27:bc:41:a7:ef:f3:29:ee:32:0e:4a:83:5e:ce:
                    74:90:97:41:ab:41:87:05:54:36:ba:88:82:9f:16:
                    23:11:07:e4:af:f3:cc:2e:76:d9:a7:c4:50:94:96:
                    cc:c9:90:db:99:79:d1:43:6a:94:ba:1a:d0:62:fe:
                    d0:2e:4f:f0:27:47:05:8d:36:92:16:8a:59:19:0f:
                    8e:b7:8a:da:01:b1:63:e8:c5:4b:51:6f:db:ec:d0:
                    ef:5a:f0:41:36:8a:20:9b:0e:fe:25:b7:53:fe:f3:
                    3b:ec:8f:8c:01:a7:fb:32:fc:47:f8:75:bd:45:ef:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5D:71:25:97:86:34:ED:EE:FD:09:45:21:37:BD:20:C9:A1:1F:C5
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3139322e302f31382d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:2b:d9:e6:2c:c1:1d:7a:71:bf:1c:7a:0a:3e:e2:1c:6b:ed:
         ad:3d:d6:d4:c2:37:35:87:79:10:86:10:fe:10:29:29:fe:28:
         ae:e9:43:2d:31:9e:83:b9:73:93:4f:b0:68:24:94:57:3b:cf:
         94:32:e7:6b:3a:80:73:a3:72:6b:32:56:dc:53:b3:2d:ca:76:
         a3:2c:c8:a6:37:a4:74:0a:4a:d1:d4:32:74:24:52:25:2e:e5:
         fe:3a:09:e1:31:b2:71:65:9b:77:2b:a4:48:63:4b:ab:9c:34:
         04:54:39:c2:ce:ee:a3:c5:ef:e9:21:52:b6:b8:15:40:b9:c3:
         27:f5:6e:06:67:b5:00:0c:1c:e5:6b:fb:00:1e:2d:39:2a:65:
         68:35:b4:2c:d9:0a:d9:e3:6b:e3:38:0e:a4:a0:ef:8e:87:e3:
         9b:86:7c:b0:69:60:b3:aa:44:34:c7:ca:36:9e:07:99:a0:8c:
         a5:21:e8:bf:62:fa:b5:91:10:d3:9d:15:98:34:54:4a:78:c5:
         6b:04:94:d2:91:99:5b:ae:c8:0c:c7:66:2c:61:2f:d4:86:3e:
         8c:56:65:77:45:ec:37:f7:c1:96:88:33:93:2d:d7:70:1f:e7:
         cd:10:d3:ca:d9:a9:70:9d:9e:f8:63:b8:3a:1c:d2:a2:79:a7:
         90:38:d4:e2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUQy9syVpgF21WYFqh5zpWbx/motgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAzMTAwMTQ1MDBaFw0yNjAzMDkwMTUwMDBaMDMxMTAvBgNV
BAMTKDM4NUQ3MTI1OTc4NjM0RURFRUZEMDk0NTIxMzdCRDIwQzlBMTFGQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT9IcoWU6bis8LnJId58c3yb4v
GoJ3Yb3WUUNlYn8sMFN5QU8dSETPd3LVL1J3Krv/CYnAeEgNRLXzPscy7klwKOkI
Of09R9ljqifFgl4rtpdNVBzv9alykoWcuEGgBQr6sPHVo42vIyn6thkTeviHLoWW
p5jMDd9rUQadYiKNVGstF1jZ8PEnvEGn7/Mp7jIOSoNeznSQl0GrQYcFVDa6iIKf
FiMRB+Sv88wudtmnxFCUlszJkNuZedFDapS6GtBi/tAuT/AnRwWNNpIWilkZD463
itoBsWPoxUtRb9vs0O9a8EE2iiCbDv4lt1P+8zvsj4wBp/sy/Ef4db1F75zHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUOF1xJZeGNO3u/QlFITe9IMmhH8UwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzOTMyMmUz
MDJmMzEzODJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBr5awDAN
BgkqhkiG9w0BAQsFAAOCAQEAJSvZ5izBHXpxvxx6Cj7iHGvtrT3W1MI3NYd5EIYQ
/hApKf4orulDLTGeg7lzk0+waCSUVzvPlDLnazqAc6NyazJW3FOzLcp2oyzIpjek
dApK0dQydCRSJS7l/joJ4TGycWWbdyukSGNLq5w0BFQ5ws7uo8Xv6SFStrgVQLnD
J/VuBme1AAwc5Wv7AB4tOSplaDW0LNkK2eNr4zgOpKDvjofjm4Z8sGlgs6pENMfK
Np4HmaCMpSHov2L6tZEQ050VmDRUSnjFawSU0pGZW67IDMdmLGEv1IY+jFZld0Xs
N/fBlogzky3XcB/nzRDTytmpcJ2e+GO4OhzSonmnkDjU4g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:25:30 2025 by rpki-client