Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa
File:                     3139302e3131352e33322e302f31392d3234203d3e203238313134.roa (raw, json)
Hash identifier:          RE5k5+9hRm2AUFSLIBk8BUGljp0TQwjBoa0h7agZffQ=
Subject key identifier:   4D:21:63:D7:34:F7:2A:29:D1:0A:7F:64:B4:3A:CD:78:3B:59:25:AF
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       55E4C345B9194C5417078DA03ADF155769E06F12
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:44 +0000
ROA not before:           Tue 04 Feb 2025 18:02:44 +0000
ROA not after:            Tue 03 Feb 2026 18:07:44 +0000
asID:                     28114
IP address blocks:        190.115.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e4:c3:45:b9:19:4c:54:17:07:8d:a0:3a:df:15:57:69:e0:6f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:44 2025 GMT
            Not After : Feb  3 18:07:44 2026 GMT
        Subject: CN=4D2163D734F72A29D10A7F64B43ACD783B5925AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:78:4a:c4:c5:17:5d:80:43:06:ef:b9:60:
                    6c:ee:b9:ec:f5:b3:11:7d:9b:57:5f:1c:68:42:a5:
                    0f:99:14:ee:e9:65:1b:06:fa:37:64:70:71:81:d4:
                    a2:20:8a:1f:f5:af:dc:12:c2:c0:9c:59:77:46:6a:
                    18:39:d2:b0:6c:12:5e:f9:20:4b:78:7a:a9:ce:b1:
                    e1:d6:9d:44:6d:fc:68:94:4e:02:ca:72:42:02:ca:
                    70:8f:ce:e0:d6:c3:62:0a:f4:63:94:9c:59:eb:cc:
                    74:2c:b8:aa:1b:66:3b:e5:45:ed:3d:c8:e1:1c:44:
                    2f:94:03:e4:49:ac:44:55:fd:22:73:88:47:fd:48:
                    ec:ea:13:04:9c:61:ec:29:29:5a:ac:bc:9b:ec:19:
                    9d:d6:27:b0:28:1d:41:c2:b8:ef:63:59:d9:a3:cd:
                    57:01:86:d9:18:31:44:aa:a0:a8:9e:8f:37:9b:bd:
                    6b:a0:08:ec:98:9a:e8:6f:ed:e9:8a:ac:52:f7:0b:
                    78:c1:c4:40:34:fc:a0:44:e7:e9:cd:5d:01:15:bd:
                    fb:3a:3f:67:70:90:a2:cf:09:ac:9e:2f:2a:69:e0:
                    c1:a3:fd:4a:1d:60:cb:c7:b8:a5:ec:83:be:33:bf:
                    31:ee:e0:4a:d9:57:40:b5:4e:29:68:bb:f3:fe:e5:
                    1b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:21:63:D7:34:F7:2A:29:D1:0A:7F:64:B4:3A:CD:78:3B:59:25:AF
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e33322e302f31392d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:f5:31:6a:d3:44:58:37:13:44:28:71:05:96:5a:39:d7:84:
         91:0b:66:27:f7:f1:ce:2c:44:9f:1a:78:d5:23:8d:a1:33:2b:
         95:ba:90:dd:64:b0:eb:ae:8e:2b:a5:3b:cb:71:2a:fb:09:8d:
         a6:8a:01:39:1a:4b:cb:f1:a8:c2:11:0e:05:ee:77:cd:a2:fb:
         39:5b:16:d7:9b:15:f5:6a:1a:f4:25:83:b6:38:7d:23:ba:7a:
         5d:66:2f:ae:48:6b:56:87:13:cf:f1:ee:31:21:bf:f3:2b:3c:
         7a:a8:68:33:7f:1e:f0:8c:b5:75:de:c9:60:44:0e:83:86:71:
         56:27:dd:5e:89:c8:a8:d6:f3:00:01:f9:78:63:5c:20:c5:08:
         78:d1:80:6c:dc:3a:12:4e:0a:77:41:b5:4e:1d:13:bf:6c:38:
         82:21:51:0f:30:7d:d9:c9:a9:b6:16:39:ea:e3:25:f3:33:c7:
         35:cd:7d:77:bc:5c:4f:95:4a:06:6e:13:54:72:82:f7:8b:96:
         1b:91:1b:9d:3f:d7:80:37:93:f7:c4:ac:cc:67:2c:b8:db:64:
         f2:d8:e3:aa:7b:eb:a6:8f:f0:ee:23:b3:86:1b:a7:3e:3c:30:
         e3:7a:90:89:7e:42:4d:6c:62:64:9b:20:43:ff:d7:50:0a:42:
         1b:28:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:33 2025 by rpki-client