Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
File:                     3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa (raw, json)
Hash identifier:          SQpwojRRR0KIf0Ovcm/A/r3UlhXwY6r2DdHSfAKca0A=
Subject key identifier:   6F:49:79:6E:D2:8A:41:4A:60:A2:04:C1:B4:70:59:66:BE:3A:63:B3
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       0E0479883205FDE8AC681ADF5EBB95330CC65705
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:14 +0000
ROA not before:           Tue 04 Feb 2025 18:10:14 +0000
ROA not after:            Tue 03 Feb 2026 18:15:14 +0000
asID:                     52330
IP address blocks:        190.184.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:04:79:88:32:05:fd:e8:ac:68:1a:df:5e:bb:95:33:0c:c6:57:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:14 2025 GMT
            Not After : Feb  3 18:15:14 2026 GMT
        Subject: CN=6F49796ED28A414A60A204C1B4705966BE3A63B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:5b:8d:5d:71:09:95:45:97:49:48:18:cc:
                    ca:ee:42:2f:a9:26:9f:f9:d2:dd:72:f0:18:a8:18:
                    b8:fe:d5:76:72:7e:61:77:50:86:1f:04:7f:17:29:
                    e6:b5:6f:4b:7f:26:b8:a9:e2:6f:43:3f:c8:d4:97:
                    78:92:89:8f:b5:e2:41:f1:b5:53:dc:d5:2d:36:32:
                    14:c4:76:aa:3f:6a:7e:a7:31:68:73:62:5c:75:9b:
                    4f:8b:1b:af:8f:93:b4:48:95:6a:d4:53:fe:c9:bf:
                    ba:f1:4f:0b:c7:74:c0:f2:c7:42:b3:fb:b5:4c:b0:
                    49:68:d7:4b:ec:46:48:91:8f:52:39:d1:65:56:85:
                    3f:27:fc:2e:0f:5a:c7:07:a5:ed:a2:dd:e9:bc:50:
                    77:99:e7:d2:11:40:c7:0c:c4:c6:75:b9:70:85:a0:
                    ca:83:74:a6:56:f6:8a:e5:f3:92:80:c7:a1:ec:bd:
                    0b:e8:ee:f5:26:ff:59:74:b4:99:af:8b:49:37:50:
                    45:2b:6d:99:ef:44:e8:80:ba:ba:6a:00:6b:83:0e:
                    08:4d:67:94:6a:7b:7b:48:6e:11:ed:e1:49:bf:6a:
                    a6:88:b8:eb:b4:fc:14:28:7e:5a:84:23:7b:84:56:
                    aa:60:95:8e:e5:7e:29:32:20:1a:b0:ba:a4:7a:e4:
                    3c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:49:79:6E:D2:8A:41:4A:60:A2:04:C1:B4:70:59:66:BE:3A:63:B3
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230302e302f32312d3231203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8c:34:8c:c9:97:24:7c:92:f8:c9:51:3c:ba:dd:8a:c3:16:30:
         ea:82:3a:a7:08:f7:50:4e:ef:1e:3e:97:3c:49:43:84:39:1a:
         6f:85:93:fb:2e:55:69:40:ae:fa:d4:44:7e:6b:f8:3a:ee:73:
         7a:fc:d7:0a:fb:73:23:44:5b:2d:75:97:38:71:82:31:8f:5a:
         57:43:6d:15:d4:0a:dd:36:a8:55:c8:c4:43:de:87:f2:b1:87:
         28:8e:a7:9e:12:7b:cc:38:ad:63:68:ed:b3:ee:8c:05:ce:c4:
         43:2b:12:7c:b6:00:df:0c:89:f3:f7:53:94:e8:1e:e9:a4:83:
         56:1f:b4:1d:ff:94:f0:02:03:5c:f2:50:fa:b7:7b:fb:85:60:
         77:f3:cc:2f:8d:2e:26:cb:9e:6f:f5:3b:fa:d8:bf:e8:4b:7e:
         4c:9f:d8:d5:3b:20:71:a0:24:fc:25:f0:67:c0:e1:71:66:37:
         2e:e4:a8:05:8f:50:8f:3e:34:c9:17:8c:e4:53:d5:92:d0:2c:
         f1:46:3f:bd:54:43:78:04:71:9b:38:5e:41:ab:8b:40:3a:66:
         10:3c:28:24:c0:e5:94:c7:c2:63:bb:b4:5e:a7:77:57:34:e8:
         c8:40:89:25:1b:34:8f:de:14:e3:62:07:ef:f1:d5:b6:1d:3e:
         d5:f6:36:86
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUDgR5iDIF/eisaBrfXruVMwzGVwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVGQjc5MUExNDU1ODIzNDQ5NTRERjk1MDY3RUJFNEY3
QzU2N0VDQjAeFw0yNTAyMDQxODEwMTRaFw0yNjAyMDMxODE1MTRaMDMxMTAvBgNV
BAMTKDZGNDk3OTZFRDI4QTQxNEE2MEEyMDRDMUI0NzA1OTY2QkUzQTYzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9MluNXXEJlUWXSUgYzMruQi+p
Jp/50t1y8BioGLj+1XZyfmF3UIYfBH8XKea1b0t/Jrip4m9DP8jUl3iSiY+14kHx
tVPc1S02MhTEdqo/an6nMWhzYlx1m0+LG6+Pk7RIlWrUU/7Jv7rxTwvHdMDyx0Kz
+7VMsElo10vsRkiRj1I50WVWhT8n/C4PWscHpe2i3em8UHeZ59IRQMcMxMZ1uXCF
oMqDdKZW9orl85KAx6HsvQvo7vUm/1l0tJmvi0k3UEUrbZnvROiAurpqAGuDDghN
Z5Rqe3tIbhHt4Um/aqaIuOu0/BQoflqEI3uEVqpglY7lfikyIBqwuqR65DyhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUb0l5btKKQUpgogTBtHBZZr46Y7MwHwYDVR0j
BBgwFoAUnvt5GhRVgjRJVN+VBn6+T3xWfsswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80OTIyRDE1ODc4NUFBQjE3MDRGNzA3NTNCRDRENUFGRjk5
MEVBOUI5NDgyOUIxRkRERTFEODZCRUI2NjgwQzVGLzAvOUVGQjc5MUExNDU1ODIz
NDQ5NTRERjk1MDY3RUJFNEY3QzU2N0VDQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RUZCNzkxQTE0NTU4MjM0NDk1
NERGOTUwNjdFQkU0RjdDNTY3RUNCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDkyMkQxNTg3ODVBQUIxNzA0RjcwNzUzQkQ0RDVBRkY5OTBFQTlCOTQ4
MjlCMUZEREUxRDg2QkVCNjY4MEM1Ri8wLzMxMzkzMDJlMzEzODM0MmUzMjMwMzAy
ZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNTMyMzMzMzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDvrjI
MA0GCSqGSIb3DQEBCwUAA4IBAQCMNIzJlyR8kvjJUTy63YrDFjDqgjqnCPdQTu8e
Ppc8SUOEORpvhZP7LlVpQK761ER+a/g67nN6/NcK+3MjRFstdZc4cYIxj1pXQ20V
1ArdNqhVyMRD3ofysYcojqeeEnvMOK1jaO2z7owFzsRDKxJ8tgDfDInz91OU6B7p
pINWH7Qd/5TwAgNc8lD6t3v7hWB388wvjS4my55v9Tv62L/oS35Mn9jVOyBxoCT8
JfBnwOFxZjcu5KgFj1CPPjTJF4zkU9WS0CzxRj+9VEN4BHGbOF5Bq4tAOmYQPCgk
wOWUx8Jju7Rep3dXNOjIQIklGzSP3hTjYgfv8dW2HT7V9jaG
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:27:22 2025 by rpki-client