Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e203237393935.roa
File:                     3139302e3131302e3132382e302f31392d3234203d3e203237393935.roa (raw, json)
Hash identifier:          CHzWFP4xOCbt1X4jPjebTYGpA5d2LlGt6eGuiW6bsko=
Subject key identifier:   B1:BA:06:FA:15:E2:11:80:9B:EB:E3:A8:92:D5:C7:34:03:EA:5B:E1
Certificate issuer:       /CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
Certificate serial:       4EF1AACF6EF659E7DE2F73C9E0A1E979C2C71A1F
Authority key identifier: 51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e203237393935.roa
Signing time:             Tue 04 Feb 2025 18:12:10 +0000
ROA not before:           Tue 04 Feb 2025 18:07:10 +0000
ROA not after:            Tue 03 Feb 2026 18:12:10 +0000
asID:                     27995
IP address blocks:        190.110.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f1:aa:cf:6e:f6:59:e7:de:2f:73:c9:e0:a1:e9:79:c2:c7:1a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=516A0BAEF13F646C61E3AB03846DBFAD78DD7E99
        Validity
            Not Before: Feb  4 18:07:10 2025 GMT
            Not After : Feb  3 18:12:10 2026 GMT
        Subject: CN=B1BA06FA15E211809BEBE3A892D5C73403EA5BE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:74:c5:12:9b:59:17:ee:76:df:cc:c0:28:
                    26:46:38:32:4b:d0:de:84:da:13:92:66:04:b9:a5:
                    c6:ab:d5:75:49:cd:70:eb:74:65:aa:28:d0:c0:a1:
                    ea:ae:88:b9:ab:36:16:02:f8:78:fa:9f:d8:8f:e7:
                    bf:e0:f5:bd:97:dc:9c:44:ab:e2:de:f2:83:ea:01:
                    ea:07:d6:6f:ad:ee:64:d9:9e:2a:22:17:6b:63:cd:
                    4a:7a:1b:1c:8a:76:f3:a8:a2:fe:f7:c4:11:37:89:
                    dd:f2:f6:1f:25:ab:2a:dc:d0:d8:1b:44:7a:31:78:
                    ca:53:a2:69:93:4c:7a:fe:a1:43:62:7d:a3:dd:d8:
                    6f:b5:5b:6f:54:a2:72:2e:be:ec:6c:8a:1f:57:a0:
                    f3:cd:7f:61:c9:d1:e0:ab:bb:2c:12:93:58:da:5c:
                    bb:dc:b9:27:15:93:50:a8:f2:5f:9d:d2:99:cb:a1:
                    37:5c:6a:6c:d1:ba:5b:c6:b8:a9:d0:00:0f:99:dd:
                    73:3f:a0:8e:a3:5e:69:92:09:b3:61:4d:27:2d:da:
                    42:2c:96:98:b6:35:ad:d4:87:08:a7:42:e8:ba:39:
                    3c:e9:6a:16:62:fc:96:b7:7d:58:e9:c4:9b:7e:7b:
                    9e:40:b6:14:68:0c:13:ee:85:2b:df:79:1c:cf:85:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:06:FA:15:E2:11:80:9B:EB:E3:A8:92:D5:C7:34:03:EA:5B:E1
            X509v3 Authority Key Identifier:
                keyid:51:6A:0B:AE:F1:3F:64:6C:61:E3:AB:03:84:6D:BF:AD:78:DD:7E:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/516A0BAEF13F646C61E3AB03846DBFAD78DD7E99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29DB7344B82C38AD35114D1906578EABE7484BC2497FC09F1ADBB0C9E51474AB/0/3139302e3131302e3132382e302f31392d3234203d3e203237393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1d:f9:80:8e:b5:c8:46:b5:9f:04:81:41:57:29:e5:08:da:81:
         2e:ad:96:ec:f3:f7:4d:91:f7:d9:b7:3f:a4:0b:9c:f5:85:d7:
         a7:34:cc:ca:f9:5d:8b:2d:bc:e5:92:ed:d1:17:5c:1b:0f:55:
         d0:3b:2c:21:ae:78:9c:67:fc:8b:86:62:af:dc:b7:01:a1:55:
         93:6d:27:b6:a7:97:ff:b6:1b:60:cc:57:95:c2:f9:a5:d4:52:
         9c:76:4f:f9:6c:a7:9d:9c:6f:a1:25:2f:78:78:98:a5:6d:5f:
         d0:15:66:a6:13:34:bd:55:02:41:62:e8:76:7e:5e:b6:50:98:
         71:6e:ff:52:6d:77:27:03:6a:c3:03:f6:78:1f:4a:4c:bb:b9:
         80:82:50:e2:ef:98:a8:12:60:5e:bd:81:5d:63:8b:7d:e0:3a:
         f7:7c:3c:58:24:6d:61:60:98:08:4d:65:b8:ff:e9:e1:ca:93:
         ab:87:cd:aa:b1:1b:8b:ca:83:09:1f:15:68:ea:a2:a4:74:3b:
         a7:6a:b2:3a:d5:da:a9:1e:ea:cb:4a:d0:60:72:3c:53:d0:d3:
         f8:9d:4d:ba:9c:f4:dc:84:86:48:f7:8e:82:e4:ea:d2:88:ef:
         71:b1:7a:8d:ce:59:d8:6c:14:23:e2:48:3e:d7:f2:ea:9e:b9:
         b8:44:bc:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----