Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36352e302f32342d3234203d3e203237383337.roa
File:                     3139302e39302e36352e302f32342d3234203d3e203237383337.roa (raw, json)
Hash identifier:          8CozJ7xlUADbcR6ghcSFnv02yNjZTTSHMvaFZfDsczM=
Subject key identifier:   BE:E3:84:D6:99:DA:8D:9D:8D:CC:81:B0:5C:B6:07:02:F2:CE:67:97
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6A8ED0BDED41549294A750687EB35E076857EB49
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36352e302f32342d3234203d3e203237383337.roa
Signing time:             Tue 04 Feb 2025 18:17:16 +0000
ROA not before:           Tue 04 Feb 2025 18:12:16 +0000
ROA not after:            Tue 03 Feb 2026 18:17:16 +0000
asID:                     27837
IP address blocks:        190.90.65.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:d0:bd:ed:41:54:92:94:a7:50:68:7e:b3:5e:07:68:57:eb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:16 2025 GMT
            Not After : Feb  3 18:17:16 2026 GMT
        Subject: CN=BEE384D699DA8D9D8DCC81B05CB60702F2CE6797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:79:b6:28:5d:f1:6a:fd:63:01:fb:8d:d1:
                    3e:b0:37:d1:54:fa:a2:71:3c:30:df:18:ae:23:b0:
                    14:14:f2:aa:fa:17:16:17:e1:49:ef:66:0d:02:11:
                    83:c3:6c:6f:b6:f4:f8:1c:91:90:58:28:3f:8f:3d:
                    d7:75:ec:57:ae:73:f7:c1:3a:32:aa:3f:e3:39:c8:
                    8d:fb:c7:98:49:3d:8b:31:12:f2:89:ff:88:a0:ef:
                    44:9d:a4:a4:25:cc:ad:8e:0a:ef:b7:72:28:df:4d:
                    dd:1d:33:b6:f6:8f:6c:3b:97:52:9c:c8:1c:fd:96:
                    dd:36:21:4f:90:76:5c:32:07:0a:25:e7:a2:01:7a:
                    89:02:1e:6d:9f:3e:66:9d:32:7b:7a:ee:14:0f:c7:
                    bb:76:98:09:09:bb:67:cf:16:a7:0d:25:66:19:52:
                    94:00:28:ce:ec:e0:da:09:03:2c:99:0e:15:6c:66:
                    c3:aa:31:4c:0c:e8:5f:57:ef:96:e7:67:3c:94:57:
                    61:85:ba:fb:0d:56:85:c9:48:fb:54:95:ef:95:52:
                    bc:07:c5:43:d2:6c:bc:d0:81:5b:85:1b:48:e3:3a:
                    71:3f:5d:fc:ed:1f:31:5e:83:7c:cd:a7:38:de:d6:
                    dd:69:d6:b9:96:e0:66:74:76:66:c8:c3:69:75:ae:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E3:84:D6:99:DA:8D:9D:8D:CC:81:B0:5C:B6:07:02:F2:CE:67:97
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36352e302f32342d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:82:fe:0a:15:c7:90:be:b4:be:26:0f:bd:60:ea:4e:91:49:
         dc:87:1a:98:72:9c:81:a1:0b:16:3c:c8:85:38:07:19:7b:b4:
         09:94:54:8b:08:98:aa:45:83:87:08:b8:7f:38:2a:1f:d5:3a:
         39:69:55:1a:37:f8:19:c9:fd:84:d9:3e:c1:0f:81:43:80:04:
         4c:54:2a:50:fc:8c:03:9b:1f:d1:9a:a6:34:60:2c:0f:23:72:
         f6:5d:f4:1c:f3:bc:fe:95:80:65:d6:42:f4:a4:13:e6:19:54:
         27:c7:7a:cd:9a:e1:9b:6d:99:16:b4:f0:f8:02:12:81:85:3e:
         e0:61:0c:0b:bd:6b:16:a1:85:83:60:76:85:49:53:1d:b3:15:
         8e:2a:b3:d7:16:e3:77:24:24:63:21:a1:be:75:2d:98:f0:ef:
         8f:da:98:c7:45:26:7e:32:71:cf:fd:2c:5c:d5:e5:18:bd:8d:
         45:96:82:95:c8:5b:23:c9:d8:df:bc:76:a6:32:9a:c8:57:95:
         8a:3d:f2:f2:f0:75:51:05:df:fd:89:80:fd:c3:2b:9d:d7:02:
         da:f8:23:1c:64:92:2e:19:57:c3:d0:d9:49:42:18:5f:ba:d3:
         f5:3f:bb:5c:86:8c:d9:9c:d0:ab:27:83:b3:bb:fd:ec:57:de:
         59:29:62:67
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUao7Qve1BVJKUp1BofrNeB2hX60kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMTZaFw0yNjAyMDMxODE3MTZaMDMxMTAvBgNV
BAMTKEJFRTM4NEQ2OTlEQThEOUQ4RENDODFCMDVDQjYwNzAyRjJDRTY3OTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5Xm2KF3xav1jAfuN0T6wN9FU
+qJxPDDfGK4jsBQU8qr6FxYX4UnvZg0CEYPDbG+29PgckZBYKD+PPdd17Feuc/fB
OjKqP+M5yI37x5hJPYsxEvKJ/4ig70SdpKQlzK2OCu+3cijfTd0dM7b2j2w7l1Kc
yBz9lt02IU+QdlwyBwol56IBeokCHm2fPmadMnt67hQPx7t2mAkJu2fPFqcNJWYZ
UpQAKM7s4NoJAyyZDhVsZsOqMUwM6F9X75bnZzyUV2GFuvsNVoXJSPtUle+VUrwH
xUPSbLzQgVuFG0jjOnE/XfztHzFeg3zNpzje1t1p1rmW4GZ0dmbIw2l1rpkNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUvuOE1pnajZ2NzIGwXLYHAvLOZ5cwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzYzNTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczODMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+WkEwDQYJ
KoZIhvcNAQELBQADggEBAB+C/goVx5C+tL4mD71g6k6RSdyHGphynIGhCxY8yIU4
Bxl7tAmUVIsImKpFg4cIuH84Kh/VOjlpVRo3+BnJ/YTZPsEPgUOABExUKlD8jAOb
H9GapjRgLA8jcvZd9BzzvP6VgGXWQvSkE+YZVCfHes2a4ZttmRa08PgCEoGFPuBh
DAu9axahhYNgdoVJUx2zFY4qs9cW43ckJGMhob51LZjw74/amMdFJn4ycc/9LFzV
5Ri9jUWWgpXIWyPJ2N+8dqYymshXlYo98vLwdVEF3/2JgP3DK53XAtr4Ixxkki4Z
V8PQ2UlCGF+60/U/u1yGjNmc0Ksng7O7/exX3lkpYmc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:38 2025 by rpki-client