Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa
File:                     3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa (raw, json)
Hash identifier:          l3htdhTBSRk8ghBfhUNlyhws/FWd6k1mS2VZbSQpzxg=
Subject key identifier:   99:A7:86:91:DE:C8:04:89:70:BF:FD:C3:DA:25:3E:0B:F6:77:5D:60
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       79901F252708F107C80DEB55805301DA539F34A3
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:22 +0000
ROA not before:           Tue 04 Feb 2025 19:57:22 +0000
ROA not after:            Tue 03 Feb 2026 20:02:22 +0000
asID:                     27773
IP address blocks:        190.150.252.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:90:1f:25:27:08:f1:07:c8:0d:eb:55:80:53:01:da:53:9f:34:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:22 2025 GMT
            Not After : Feb  3 20:02:22 2026 GMT
        Subject: CN=99A78691DEC8048970BFFDC3DA253E0BF6775D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:1e:92:9f:b2:0e:48:d1:98:9d:39:c9:a8:
                    e9:2e:57:40:c6:7e:85:d0:bf:15:4a:e0:67:f7:b6:
                    06:ec:96:3b:66:80:2e:20:55:8d:5c:2a:49:b5:19:
                    76:63:64:e8:bd:15:48:7a:ec:0c:28:cc:99:a9:d8:
                    32:9f:f4:ec:82:f5:c8:f5:60:d5:4f:1e:1e:ee:83:
                    11:ef:9a:e0:b5:07:9c:25:0f:8a:5a:8f:9e:9e:ca:
                    c0:c5:f6:45:81:21:84:37:bf:97:9c:61:c2:b2:a0:
                    ac:fc:6d:36:6f:a3:f0:c7:67:b4:cb:3b:da:a6:18:
                    04:8d:a3:bb:e6:3f:42:26:21:fc:3b:61:0a:f8:6c:
                    f4:81:e2:44:45:ed:a4:a4:9a:5c:b5:63:cb:d2:04:
                    9d:77:99:81:69:8c:27:fc:2a:16:20:9b:05:db:6c:
                    38:bd:ac:66:81:12:a7:2d:33:9f:11:f9:ce:25:b4:
                    27:0c:55:4c:23:c8:cb:c6:b8:36:ae:d7:f2:88:5e:
                    f1:96:c7:b1:96:95:f3:d6:73:d2:a9:98:5c:45:b4:
                    76:d9:7c:6f:77:14:37:fa:e2:84:e8:ff:1d:92:ad:
                    05:35:f2:f8:ad:0c:47:5d:9d:2c:1a:2e:d8:d7:c3:
                    98:65:60:83:30:6f:3f:bf:80:98:2a:a2:62:b7:ae:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A7:86:91:DE:C8:04:89:70:BF:FD:C3:DA:25:3E:0B:F6:77:5D:60
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3235322e302f32332d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:02:7d:ff:bf:fa:80:98:94:d9:87:67:34:69:9b:f4:90:32:
         66:09:cc:8f:9d:d3:ff:7d:a6:21:1a:0c:d8:93:1c:ff:c0:cd:
         16:cb:a4:fa:d2:bc:fa:31:76:5a:5f:d9:13:6d:93:b0:78:04:
         77:fe:33:1b:4b:ad:98:bc:6f:39:9c:27:ef:1d:1b:f9:d1:a0:
         e5:ac:e7:07:2d:f7:6c:86:97:e9:b4:ff:f2:db:a6:8f:55:a0:
         fe:31:8e:b6:99:f0:bc:b9:6c:b7:dc:3f:0d:a1:de:2c:31:7c:
         3b:bc:41:9a:32:dc:ed:29:bb:c7:36:90:94:5c:e7:8b:b6:ef:
         38:b7:6d:00:4d:63:53:20:75:e1:04:0c:42:11:13:9b:9e:45:
         81:d0:7c:a7:66:6b:f5:99:2f:cf:47:88:49:87:c0:21:21:78:
         54:cd:bf:bd:7e:d7:34:9e:06:4f:50:56:e3:23:53:0a:9f:62:
         cc:a9:8e:27:29:a4:16:97:96:15:e2:3c:06:17:38:e5:b0:72:
         ab:fd:d8:be:57:6f:a5:41:c9:44:bd:91:a3:5d:34:e7:60:0d:
         2f:f4:f2:ea:e2:25:31:9d:fe:7d:02:82:e7:92:a9:f2:b2:6a:
         73:4e:d5:43:7a:0c:a7:22:00:6e:22:d2:47:2b:a1:77:2e:9a:
         0a:27:14:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:00 2025 by rpki-client