Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa
File:                     3139302e31332e38302e302f32312d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          CR8X6jo02TcpxitaGQ4ZfKhEmu8AHzEb4BoDz4zSS6Q=
Subject key identifier:   8B:28:E8:04:1F:A6:DF:1A:43:F8:CF:6E:26:C6:96:9F:96:CC:BD:3E
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       2F81E4FE0E6233E2414197D5EC650F259AF3AD58
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa
Signing time:             Tue 04 Feb 2025 20:00:20 +0000
ROA not before:           Tue 04 Feb 2025 19:55:20 +0000
ROA not after:            Tue 03 Feb 2026 20:00:20 +0000
asID:                     262186
IP address blocks:        190.13.80.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:81:e4:fe:0e:62:33:e2:41:41:97:d5:ec:65:0f:25:9a:f3:ad:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Feb  4 19:55:20 2025 GMT
            Not After : Feb  3 20:00:20 2026 GMT
        Subject: CN=8B28E8041FA6DF1A43F8CF6E26C6969F96CCBD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:4e:ed:c5:89:83:ae:e2:bd:b7:4b:0c:f5:
                    d8:3a:7c:9a:cc:d8:c8:68:ac:30:b0:0a:86:20:ff:
                    21:62:cd:8c:e5:79:f9:84:ea:0a:52:d5:8d:16:a8:
                    88:ce:d1:86:a7:03:ca:b0:e7:e9:01:65:e3:3d:13:
                    5c:b2:3a:2d:3b:e1:eb:ec:ff:2b:4a:15:15:1a:a5:
                    3e:f5:2b:93:6e:b4:dd:73:68:26:11:2b:c1:0a:4d:
                    b8:44:2e:1f:a7:89:f4:82:d2:e3:c9:90:19:39:c3:
                    af:55:a0:2a:cf:99:06:06:71:2f:2b:03:42:70:85:
                    cd:46:b9:a8:d2:f5:d8:44:b5:5a:25:81:91:b8:78:
                    41:c1:03:bc:1a:04:ea:b3:08:2e:a3:c1:19:d3:1e:
                    01:a6:78:13:02:5a:59:90:75:a5:6b:32:99:0e:d2:
                    34:bc:76:9d:98:69:ea:46:7b:86:0d:86:f3:50:4b:
                    08:0b:be:07:d2:60:a4:7f:8e:a5:da:9c:07:5f:42:
                    20:ef:b5:70:3d:ba:95:a2:fd:fa:d9:db:ab:de:9f:
                    6b:90:fc:d7:07:0a:02:bf:50:c5:03:8f:f7:ed:ee:
                    53:fa:0e:c3:c9:19:af:56:e3:27:fc:57:87:68:cf:
                    2e:dc:77:60:15:71:8f:75:f5:9b:95:7b:cb:53:36:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:28:E8:04:1F:A6:DF:1A:43:F8:CF:6E:26:C6:96:9F:96:CC:BD:3E
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3139302e31332e38302e302f32312d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:7e:8c:cd:58:77:e8:04:a2:90:ad:65:14:eb:94:e5:fc:37:
         93:ba:45:9d:10:57:cc:ff:12:d3:dc:8b:09:3a:ce:f0:37:6e:
         93:75:e4:99:49:28:69:56:2a:92:61:91:c6:53:87:4e:33:37:
         57:12:86:f1:4a:97:8d:61:30:1f:4b:37:fc:49:9c:35:e8:80:
         6b:1c:54:6c:78:fb:6f:93:92:d4:22:ab:fb:fc:20:d3:7c:6b:
         1f:8a:0f:48:36:1c:ed:5a:eb:ab:55:2f:cc:20:ec:b3:8d:55:
         3a:cf:3c:72:b3:e3:83:58:a8:98:b2:33:cb:02:81:5b:2c:c2:
         6e:58:c5:1a:ce:2d:4b:9f:3b:87:07:8a:5b:81:03:19:a4:ef:
         28:1d:e7:d5:bf:bc:27:25:c2:06:43:0d:36:35:a6:49:29:9c:
         20:0c:a2:e9:ce:8b:66:6d:3b:75:4f:3a:83:74:89:33:51:f9:
         ea:9e:db:c6:e2:43:d2:6f:1c:1f:68:8d:c3:e1:be:66:9d:ca:
         70:f0:84:4d:cf:5b:60:e8:76:5c:d0:b7:2f:e7:15:2c:4f:13:
         4c:e1:be:e2:12:1a:a2:24:64:96:2b:82:db:35:92:73:af:ff:
         f8:f0:91:e3:09:ad:45:77:29:17:4a:ab:71:27:9a:b8:b4:c6:
         b9:40:7f:3f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUL4Hk/g5iM+JBQZfV7GUPJZrzrVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFENkMyM0Y4OEQyRDM0OTkyQTQzRkFCMDFFRjVBNUIw
NDAzN0JBQjAeFw0yNTAyMDQxOTU1MjBaFw0yNjAyMDMyMDAwMjBaMDMxMTAvBgNV
BAMTKDhCMjhFODA0MUZBNkRGMUE0M0Y4Q0Y2RTI2QzY5NjlGOTZDQ0JEM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZk7txYmDruK9t0sM9dg6fJrM
2MhorDCwCoYg/yFizYzlefmE6gpS1Y0WqIjO0YanA8qw5+kBZeM9E1yyOi074evs
/ytKFRUapT71K5NutN1zaCYRK8EKTbhELh+nifSC0uPJkBk5w69VoCrPmQYGcS8r
A0Jwhc1GuajS9dhEtVolgZG4eEHBA7waBOqzCC6jwRnTHgGmeBMCWlmQdaVrMpkO
0jS8dp2YaepGe4YNhvNQSwgLvgfSYKR/jqXanAdfQiDvtXA9upWi/frZ26ven2uQ
/NcHCgK/UMUDj/ft7lP6DsPJGa9W4yf8V4dozy7cd2AVcY919ZuVe8tTNgLPAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUiyjoBB+m3xpD+M9uJsaWn5bMvT4wHwYDVR0j
BBgwFoAUgdbCP4jS00mSpD+rAe9aWwQDe6swDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NkZFNzA1RjZEREJEMTYyQjhERURCQTk5MzUzODZGQ0ZG
NkIyQTgxMERCRjhDN0YzMzNFMjc2Mjg1QjlDRjBGLzAvODFENkMyM0Y4OEQyRDM0
OTkyQTQzRkFCMDFFRjVBNUIwNDAzN0JBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MUQ2QzIzRjg4RDJEMzQ5OTJB
NDNGQUIwMUVGNUE1QjA0MDM3QkFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDZGRTcwNUY2RERCRDE2MkI4REVEQkE5OTM1Mzg2RkNGRjZCMkE4MTBE
QkY4QzdGMzMzRTI3NjI4NUI5Q0YwRi8wLzMxMzkzMDJlMzEzMzJlMzgzMDJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzYzMjMxMzgzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA74NUDAN
BgkqhkiG9w0BAQsFAAOCAQEABH6MzVh36ASikK1lFOuU5fw3k7pFnRBXzP8S09yL
CTrO8Dduk3XkmUkoaVYqkmGRxlOHTjM3VxKG8UqXjWEwH0s3/EmcNeiAaxxUbHj7
b5OS1CKr+/wg03xrH4oPSDYc7Vrrq1UvzCDss41VOs88crPjg1iomLIzywKBWyzC
bljFGs4tS587hweKW4EDGaTvKB3n1b+8JyXCBkMNNjWmSSmcIAyi6c6LZm07dU86
g3SJM1H56p7bxuJD0m8cH2iNw+G+Zp3KcPCETc9bYOh2XNC3L+cVLE8TTOG+4hIa
oiRkliuC2zWSc6//+PCR4wmtRXcpF0qrcSeauLTGuUB/Pw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:53:00 2025 by rpki-client