Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e203238313134.roa
File:                     3139302e3131352e34392e302f32342d3234203d3e203238313134.roa (raw, json)
Hash identifier:          dGM/BqhgQ+xHxHFYPDj2FRIsMbUj5GrYDzbSe33uWI0=
Subject key identifier:   F2:B0:0E:50:6F:30:DC:E8:00:C7:56:5A:B5:52:04:B2:44:57:73:27
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       10A3187CD5C08F40DD6A9A80CC68861B394E4A27
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:38 +0000
ROA not before:           Tue 04 Feb 2025 18:02:38 +0000
ROA not after:            Tue 03 Feb 2026 18:07:38 +0000
asID:                     28114
IP address blocks:        190.115.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:a3:18:7c:d5:c0:8f:40:dd:6a:9a:80:cc:68:86:1b:39:4e:4a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:38 2025 GMT
            Not After : Feb  3 18:07:38 2026 GMT
        Subject: CN=F2B00E506F30DCE800C7565AB55204B244577327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:52:55:2f:d9:98:83:84:2a:0a:1d:f3:1f:7e:
                    2d:41:04:ab:50:39:37:31:a9:d7:29:82:97:49:de:
                    e6:3c:f3:19:0f:09:52:9e:00:cf:5b:00:ed:ac:47:
                    ca:83:32:44:82:9b:b9:fa:eb:1b:bf:7d:dc:fc:2b:
                    dc:c0:21:67:20:5b:53:68:b9:b7:64:6e:bd:fb:f9:
                    cf:55:50:b8:7f:13:c4:83:4f:cb:0d:df:04:41:07:
                    0b:7e:9f:1b:16:e0:66:1a:fc:63:45:17:b3:2e:00:
                    4e:87:63:b8:2a:46:1e:0c:d4:c8:85:c9:82:ed:29:
                    e6:5e:4c:97:dd:45:1b:03:a8:1f:7e:6d:0c:b3:02:
                    03:12:ff:e7:5e:75:79:da:c4:e8:87:50:77:66:b5:
                    8a:53:0c:24:cd:5d:0a:ed:83:32:47:6b:ba:73:35:
                    13:68:5b:4b:9a:1b:22:24:e1:02:24:63:fd:3e:67:
                    e7:5d:82:e3:3c:db:d1:04:02:5b:dc:04:25:db:d1:
                    0a:44:f1:e0:51:ab:75:3b:39:ba:43:ca:80:89:94:
                    b6:72:cb:f8:ce:91:b4:6f:47:02:7c:de:17:e2:f8:
                    a3:0b:d8:d7:9a:e5:4c:0c:3e:69:c3:b6:05:41:80:
                    41:18:af:3a:c1:dc:b2:f6:85:28:04:a2:0b:60:41:
                    d3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B0:0E:50:6F:30:DC:E8:00:C7:56:5A:B5:52:04:B2:44:57:73:27
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3139302e3131352e34392e302f32342d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:58:96:cc:4c:24:44:fe:8b:29:7f:4e:8b:2f:91:8e:39:7f:
         7d:a3:bd:6c:aa:cf:18:6d:f2:28:e3:4d:fb:a7:95:7d:62:4b:
         bf:28:52:bc:87:68:14:ea:fa:65:75:36:11:0e:cc:76:4e:53:
         73:00:47:ca:c8:1b:d7:b7:d5:ce:0b:8d:66:ea:b9:54:0a:ce:
         54:1b:ae:51:8f:bb:13:ed:6d:af:a6:c1:d8:17:63:30:a5:3d:
         ba:2e:83:c1:f4:ba:93:e3:4e:72:8d:62:b3:f6:ae:6b:e5:58:
         21:91:7f:e7:7a:55:8f:12:a4:2b:09:64:67:97:36:77:18:7d:
         ce:d2:f4:69:90:30:73:99:ee:4b:fb:73:ec:92:e7:a6:32:c1:
         f2:41:51:8f:87:fa:a8:6a:d7:ec:e2:d2:ee:2c:a2:d0:e9:57:
         0d:4e:6c:8b:f4:00:b4:38:e5:e0:3d:cb:f7:3b:7d:2d:2f:c4:
         cb:3f:4d:22:d4:bf:9c:be:70:fe:16:55:99:95:0c:12:ff:b4:
         d4:a9:74:bd:a2:5d:29:1f:9a:05:17:f4:5f:b2:18:a7:74:2a:
         db:8e:78:b3:3e:8e:28:71:3b:d7:0a:a3:71:38:7d:e2:6d:42:
         e9:d7:c1:af:0d:cb:81:bb:1f:02:f4:11:09:9d:42:8e:45:ec:
         5b:bc:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:39 2025 by rpki-client