Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3139322e302f31382d3234203d3e203134373534.roa
File:                     3139302e3134392e3139322e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          DkhnVGMyu1NNIrPA7h9ZEp3qgmGJlh594V0SVATpPXo=
Subject key identifier:   5A:F2:D9:8C:6D:60:AB:00:2B:70:F3:75:DB:64:C2:EF:D8:A4:4C:90
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       72AA45EC6772D44AB15EFF1F22C34DC5BBFC1D8D
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3139322e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:21 +0000
ROA not before:           Tue 04 Feb 2025 18:50:21 +0000
ROA not after:            Tue 03 Feb 2026 18:55:21 +0000
asID:                     14754
IP address blocks:        190.149.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:aa:45:ec:67:72:d4:4a:b1:5e:ff:1f:22:c3:4d:c5:bb:fc:1d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:21 2025 GMT
            Not After : Feb  3 18:55:21 2026 GMT
        Subject: CN=5AF2D98C6D60AB002B70F375DB64C2EFD8A44C90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:f5:ce:72:24:80:c6:73:8d:45:4d:10:14:
                    e7:28:28:e1:1b:db:f9:db:ea:d3:dc:b2:41:b5:53:
                    4a:d9:4e:df:96:e8:0c:15:80:b0:37:41:b2:e2:8f:
                    93:39:73:14:cb:7d:5d:2d:b4:b3:35:52:16:b6:85:
                    42:18:ce:b7:09:6b:17:4a:32:aa:01:09:6e:e9:0e:
                    21:6c:7a:59:f7:a1:a4:af:f1:f8:af:cd:d4:70:55:
                    d5:bb:14:8e:08:de:70:93:4a:5c:46:52:d1:be:0d:
                    7d:01:24:bb:4e:1c:cd:bf:a9:a6:9b:bc:c1:61:ed:
                    3f:31:1a:9a:2d:07:a1:41:a9:4b:35:19:51:22:74:
                    9d:a0:5f:9a:bb:ec:b6:b7:ce:5f:4d:9c:7a:fc:0e:
                    0f:c8:2f:4e:0c:e8:1a:7c:f7:a3:6d:41:bc:94:19:
                    5d:0b:29:15:0b:bd:d9:7d:41:d5:3c:02:e0:d3:c1:
                    dc:0d:26:a3:f9:9e:ab:75:6d:41:aa:8f:00:4e:ee:
                    b7:6b:73:64:85:3c:06:77:e9:e8:28:4c:63:1d:88:
                    bf:2e:f8:aa:a5:56:af:c4:44:f1:fd:e9:f6:96:55:
                    cd:d9:2c:ec:97:5a:4d:77:3f:b9:98:fc:c3:a2:ca:
                    56:8d:24:36:e8:33:07:d0:23:84:c4:25:44:ff:f9:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:D9:8C:6D:60:AB:00:2B:70:F3:75:DB:64:C2:EF:D8:A4:4C:90
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3139322e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:29:a8:72:05:c7:64:3f:9f:8f:fc:b5:c3:d4:b7:78:98:18:
         4a:02:d5:7a:3c:0f:30:12:45:ee:df:44:67:0f:c5:b1:23:64:
         8d:74:5a:4b:bc:f2:b4:28:4d:be:25:3b:56:d7:fe:90:fa:ee:
         ad:45:be:db:07:a6:cf:b8:2e:dc:21:fd:e8:a2:ac:21:9d:e7:
         e8:33:01:82:b9:4d:26:bf:02:2e:6b:74:6d:ba:72:45:ca:3e:
         28:ed:fa:a8:0f:76:b9:4c:e7:2b:11:7e:c0:16:b5:b6:b7:4e:
         ff:20:06:0b:ba:2e:ac:c2:c7:3d:2d:29:22:3e:9f:ee:aa:9e:
         7c:bb:b1:c5:d9:74:76:86:52:34:4b:d2:bd:35:8d:23:2e:8c:
         23:1d:66:0e:61:a8:bd:aa:5f:d1:20:ab:49:7c:d8:eb:5d:bb:
         43:52:01:4f:00:7c:0d:1b:33:92:cd:04:05:2a:f3:88:0f:ec:
         9b:cc:35:87:94:63:3e:1e:5d:58:85:0f:f1:fc:cf:30:0e:d8:
         5e:b3:3d:02:e1:14:99:ea:d9:01:f8:e9:81:1f:bc:82:af:b5:
         98:7e:3d:cd:52:92:b6:2d:9e:6a:0f:2b:9b:5e:54:5a:17:fb:
         cd:98:a0:25:47:9f:1f:7c:fc:14:09:c7:15:9c:01:db:40:e7:
         f4:94:03:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:16 2025 by rpki-client