Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3139302e3231312e3132382e302f32312d3234203d3e203237393533.roa
File:                     3139302e3231312e3132382e302f32312d3234203d3e203237393533.roa (raw, json)
Hash identifier:          sRru6V5L5XwaU3sRbql5OpHMnuPOgon5dHptissSNDY=
Subject key identifier:   10:BD:44:9A:20:A4:4D:17:1E:82:8D:C6:C0:20:CE:31:02:91:C2:DD
Certificate issuer:       /CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
Certificate serial:       7F1BD5EB0D4A549A98C1E52D02A9C5D1D7311E04
Authority key identifier: D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3139302e3231312e3132382e302f32312d3234203d3e203237393533.roa
Signing time:             Tue 04 Feb 2025 18:56:27 +0000
ROA not before:           Tue 04 Feb 2025 18:51:27 +0000
ROA not after:            Tue 03 Feb 2026 18:56:27 +0000
asID:                     27953
IP address blocks:        190.211.128.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:1b:d5:eb:0d:4a:54:9a:98:c1:e5:2d:02:a9:c5:d1:d7:31:1e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67E5644D439ECB615A931808B0D6F2AC66A19F2
        Validity
            Not Before: Feb  4 18:51:27 2025 GMT
            Not After : Feb  3 18:56:27 2026 GMT
        Subject: CN=10BD449A20A44D171E828DC6C020CE310291C2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:cf:d5:18:61:f2:50:9a:6e:0e:90:f6:33:
                    a1:64:19:21:e8:6d:c0:0d:af:af:f2:31:45:4b:1d:
                    f8:4b:69:c9:71:58:50:eb:87:b4:98:90:60:7b:e3:
                    48:08:c7:e0:04:3a:df:5e:7a:10:4f:a0:08:83:0f:
                    d8:e5:c2:68:77:76:26:82:b7:f4:dd:e6:1e:6d:a2:
                    7c:04:1b:87:ca:c1:11:61:dd:ae:95:5c:e0:8d:4a:
                    7b:12:b7:93:5e:df:19:a9:ae:4a:5b:25:3c:e1:1f:
                    8b:06:83:79:12:cb:71:35:a9:06:82:70:1c:b8:73:
                    40:a7:4d:d8:26:83:34:0d:88:4a:6c:ce:87:9c:ab:
                    f6:4d:ee:75:9d:06:0e:a8:ad:bf:f7:00:dc:44:94:
                    34:2e:cf:bf:91:21:ba:59:28:d1:46:6a:4b:a8:2a:
                    22:6e:18:6b:0c:ff:ac:c6:af:fd:09:74:96:09:a3:
                    29:12:91:ad:57:54:18:10:19:00:fd:72:7e:f2:76:
                    c8:ea:1e:ef:e8:b5:0f:70:a1:5f:e0:26:52:c2:4e:
                    c4:9c:50:86:68:17:e8:4e:db:7e:57:34:98:00:a8:
                    8d:95:dd:11:ca:1a:22:66:83:4c:12:0c:b6:ec:90:
                    3c:5d:12:6e:93:c7:d9:66:5d:40:53:f8:1e:e6:46:
                    9f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:44:9A:20:A4:4D:17:1E:82:8D:C6:C0:20:CE:31:02:91:C2:DD
            X509v3 Authority Key Identifier:
                keyid:D6:7E:56:44:D4:39:EC:B6:15:A9:31:80:8B:0D:6F:2A:C6:6A:19:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D67E5644D439ECB615A931808B0D6F2AC66A19F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DEA4B959BE421481C137BAE5FBC2FBE1BDDD87C07A65D52F0C9ECF68F7C599F/0/3139302e3231312e3132382e302f32312d3234203d3e203237393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:46:d4:7f:31:cc:51:52:6c:b4:af:30:9d:d0:c5:70:12:0c:
         52:a4:d0:d5:17:83:8b:e4:e2:ba:3d:6c:33:bf:7e:75:6c:13:
         d7:90:be:a3:c8:06:23:1e:f2:05:fd:50:35:87:41:93:d3:d0:
         d7:33:3b:5d:44:f5:98:0e:61:bf:b8:14:84:d7:ee:df:a2:a1:
         ca:f4:22:61:47:0a:45:75:df:d9:9a:f4:ec:69:b5:42:79:29:
         5d:1c:02:31:75:25:47:63:87:67:20:dc:0a:a2:06:75:07:f4:
         8e:f5:33:6f:47:aa:81:29:2a:74:ec:aa:cf:67:bf:c4:2f:e9:
         fe:d3:04:b6:96:0e:00:63:70:8c:03:1d:bc:54:97:66:d2:e6:
         bc:57:a0:41:86:32:bd:1b:33:d1:5f:28:b8:cc:69:ba:66:a6:
         85:e4:d9:c7:13:45:de:06:3d:9b:1c:83:e2:0e:cc:9b:8b:85:
         89:6a:ed:bf:22:a9:36:06:0b:97:54:22:d2:62:6a:d5:92:f0:
         17:48:38:63:bd:57:11:9d:6a:62:97:97:73:77:cf:19:e8:b0:
         45:f2:6a:32:86:84:fb:40:35:60:bc:02:a8:51:7e:ab:e3:2f:
         25:32:92:38:53:bc:e5:21:34:be:99:6e:0d:3e:93:11:f0:77:
         00:33:31:56
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUfxvV6w1KVJqYweUtAqnF0dcxHgQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY3RTU2NDRENDM5RUNCNjE1QTkzMTgwOEIwRDZGMkFD
NjZBMTlGMjAeFw0yNTAyMDQxODUxMjdaFw0yNjAyMDMxODU2MjdaMDMxMTAvBgNV
BAMTKDEwQkQ0NDlBMjBBNDREMTcxRTgyOERDNkMwMjBDRTMxMDI5MUMyREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWc/VGGHyUJpuDpD2M6FkGSHo
bcANr6/yMUVLHfhLaclxWFDrh7SYkGB740gIx+AEOt9eehBPoAiDD9jlwmh3diaC
t/Td5h5tonwEG4fKwRFh3a6VXOCNSnsSt5Ne3xmprkpbJTzhH4sGg3kSy3E1qQaC
cBy4c0CnTdgmgzQNiEpszoecq/ZN7nWdBg6orb/3ANxElDQuz7+RIbpZKNFGakuo
KiJuGGsM/6zGr/0JdJYJoykSka1XVBgQGQD9cn7ydsjqHu/otQ9woV/gJlLCTsSc
UIZoF+hO235XNJgAqI2V3RHKGiJmg0wSDLbskDxdEm6Tx9lmXUBT+B7mRp8fAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEL1EmiCkTRcego3GwCDOMQKRwt0wHwYDVR0j
BBgwFoAU1n5WRNQ57LYVqTGAiw1vKsZqGfIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yREVBNEI5NTlCRTQyMTQ4MUMxMzdCQUU1RkJDMkZCRTFC
REREODdDMDdBNjVENTJGMEM5RUNGNjhGN0M1OTlGLzAvRDY3RTU2NDRENDM5RUNC
NjE1QTkzMTgwOEIwRDZGMkFDNjZBMTlGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ENjdFNTY0NEQ0MzlFQ0I2MTVB
OTMxODA4QjBENkYyQUM2NkExOUYyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkRFQTRCOTU5QkU0MjE0ODFDMTM3QkFFNUZCQzJGQkUxQkRERDg3QzA3
QTY1RDUyRjBDOUVDRjY4RjdDNTk5Ri8wLzMxMzkzMDJlMzIzMTMxMmUzMTMyMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzkzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvtOA
MA0GCSqGSIb3DQEBCwUAA4IBAQBWRtR/McxRUmy0rzCd0MVwEgxSpNDVF4OL5OK6
PWwzv351bBPXkL6jyAYjHvIF/VA1h0GT09DXMztdRPWYDmG/uBSE1+7foqHK9CJh
RwpFdd/ZmvTsabVCeSldHAIxdSVHY4dnINwKogZ1B/SO9TNvR6qBKSp07KrPZ7/E
L+n+0wS2lg4AY3CMAx28VJdm0ua8V6BBhjK9GzPRXyi4zGm6ZqaF5NnHE0XeBj2b
HIPiDsybi4WJau2/Iqk2BguXVCLSYmrVkvAXSDhjvVcRnWpil5dzd88Z6LBF8moy
hoT7QDVgvAKoUX6r4y8lMpI4U7zlITS+mW4NPpMR8HcAMzFW
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:06 2025 by rpki-client