Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38382e302f32322d3234203d3e20323632313837.roa
File:                     3139302e3231312e38382e302f32322d3234203d3e20323632313837.roa (raw, json)
Hash identifier:          MAAsp4QELsq5sOfdOT7yjjaIJRE0uKZVvdn3JWxB8KY=
Subject key identifier:   32:47:E3:5F:00:1B:17:23:63:A2:DC:F0:2B:FF:14:65:79:4B:D7:9A
Certificate issuer:       /CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
Certificate serial:       5BEEB134C0EC52399C19D42167187D0627E7AB51
Authority key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38382e302f32322d3234203d3e20323632313837.roa
Signing time:             Tue 04 Feb 2025 18:39:52 +0000
ROA not before:           Tue 04 Feb 2025 18:34:52 +0000
ROA not after:            Tue 03 Feb 2026 18:39:52 +0000
asID:                     262187
IP address blocks:        190.211.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ee:b1:34:c0:ec:52:39:9c:19:d4:21:67:18:7d:06:27:e7:ab:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218
        Validity
            Not Before: Feb  4 18:34:52 2025 GMT
            Not After : Feb  3 18:39:52 2026 GMT
        Subject: CN=3247E35F001B172363A2DCF02BFF1465794BD79A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:58:ee:c7:26:6c:9c:ea:e0:2d:d3:14:02:
                    50:4a:3c:6f:fe:71:b1:04:23:1d:aa:e8:1b:e7:a6:
                    ec:ec:8f:3f:85:49:fb:7e:21:e9:4b:cc:45:d6:99:
                    91:92:a3:96:fc:58:ee:f1:44:a1:3e:e0:b6:d5:7c:
                    55:4c:0c:b8:64:20:c1:27:72:ec:9f:de:0c:52:be:
                    35:36:71:43:1b:1a:7b:12:6f:9d:34:a1:2b:f6:6c:
                    0f:e2:7f:94:6e:b5:ed:9f:4b:97:b8:c8:17:72:22:
                    bf:0d:8f:62:3d:c0:4a:71:56:3a:d0:41:a6:27:0c:
                    6b:e3:f7:4d:24:32:7b:72:a4:95:a8:e8:fe:67:38:
                    53:50:ac:60:cf:f5:0d:02:ba:c1:27:d3:92:32:48:
                    6c:db:7f:6e:fe:b7:87:13:40:44:31:04:40:ec:0b:
                    72:4e:0e:22:97:74:a5:ab:df:d7:33:0f:10:6b:45:
                    cd:38:90:27:a3:da:44:ff:b0:49:b8:a9:e1:13:9b:
                    33:a2:fd:0b:43:3a:39:06:0d:7c:f2:21:77:b4:57:
                    82:1a:f7:ba:69:38:b0:7b:b0:52:07:0a:8d:bd:93:
                    5f:23:be:22:29:a2:e0:ec:3b:73:ba:de:56:cc:98:
                    f4:fb:17:38:6f:0b:11:43:ff:ee:65:ed:17:b8:62:
                    37:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:47:E3:5F:00:1B:17:23:63:A2:DC:F0:2B:FF:14:65:79:4B:D7:9A
            X509v3 Authority Key Identifier:
                keyid:6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/3139302e3231312e38382e302f32322d3234203d3e20323632313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:d3:35:5f:ae:3b:7f:b3:8f:66:0e:ad:6b:7d:b7:83:e4:
         99:16:85:a1:7e:f8:45:0f:49:ed:78:fa:08:e1:b3:0b:0a:88:
         15:ad:41:08:ea:26:8c:2e:48:92:d6:88:ac:a6:cf:c3:8c:1c:
         2a:1f:97:13:4c:a5:32:b0:9e:79:09:29:7e:1a:8a:bf:0f:4e:
         b5:46:20:05:44:ac:94:97:4b:e3:2b:36:21:21:9e:c7:2b:a9:
         24:27:7f:88:00:4f:4a:ae:6e:21:ef:8e:17:55:68:83:7e:f1:
         3a:51:3d:8c:85:c5:39:0f:2e:2f:1e:92:d7:e5:00:1b:6d:1a:
         05:d4:d1:fe:37:40:f2:ba:08:5f:8e:a2:ec:45:72:56:50:ee:
         33:68:04:6c:f9:e3:74:8f:7c:fa:8c:66:76:38:1d:43:8e:5d:
         7c:8d:10:bc:ef:ef:dd:b0:b3:ef:72:01:88:70:26:01:69:0b:
         e9:b9:cf:45:8d:c5:92:57:c2:02:02:16:27:b7:6e:16:67:c2:
         6b:ee:89:fa:f0:f9:55:bf:a3:61:3e:b5:24:67:06:55:6a:65:
         46:20:88:4e:08:21:c6:cb:e4:40:12:db:91:cd:21:72:18:b0:
         6c:f7:d6:d6:76:6d:94:fc:5b:06:04:4d:1f:1e:83:4d:9d:98:
         f1:24:a2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:09:19 2025 by rpki-client