Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          DcK/ackp46A7E/UH6q8ZrT57/6Ij8FtHEPYqqQXb6rM=
Subject key identifier:   0B:FF:90:70:C9:41:F8:8D:33:2D:3B:95:2F:F3:B2:91:17:56:91:1C
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       3EEC14135C91A16112BB567E05A7960CA637D294
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:13 +0000
ROA not before:           Tue 04 Feb 2025 18:10:13 +0000
ROA not after:            Tue 03 Feb 2026 18:15:13 +0000
asID:                     52330
IP address blocks:        190.184.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:ec:14:13:5c:91:a1:61:12:bb:56:7e:05:a7:96:0c:a6:37:d2:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:13 2025 GMT
            Not After : Feb  3 18:15:13 2026 GMT
        Subject: CN=0BFF9070C941F88D332D3B952FF3B2911756911C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:76:cb:df:7b:88:d9:64:6a:5d:49:36:37:
                    78:f5:eb:07:87:87:61:3c:8e:6a:ed:62:14:24:ac:
                    12:ed:74:43:47:0e:dd:95:4b:f9:b2:9f:db:32:aa:
                    28:c7:0f:fb:78:19:49:3e:ca:da:57:45:b9:bc:91:
                    0b:9b:f4:db:d4:25:de:ee:ee:f7:6a:cd:02:7c:3c:
                    d9:97:fb:2d:b2:a4:e1:07:1e:f7:90:e3:51:14:45:
                    5d:e1:7a:54:00:94:fc:e9:77:16:f3:63:ac:14:e3:
                    b6:54:0a:40:52:49:29:1e:4b:61:74:5d:6c:93:76:
                    b2:2c:7e:0c:81:d8:b5:27:c7:89:41:f2:6d:d1:8f:
                    a0:ab:59:88:dc:f1:c8:ab:e9:13:c8:e5:f7:76:a5:
                    b9:0e:21:3c:8d:6a:b4:ee:46:88:67:3a:1e:8a:0d:
                    ff:47:bb:56:81:78:b6:2d:b8:a9:6a:33:06:b6:9e:
                    90:54:2e:88:cf:c8:d7:df:21:e1:b0:d8:c3:bf:68:
                    fa:e9:c8:be:7e:3d:76:61:c8:f5:e8:ab:c7:85:ad:
                    d5:12:cf:a9:24:5a:de:f9:29:41:9f:7c:9f:94:8d:
                    90:b2:41:d7:e6:b7:c7:e6:70:9f:46:da:20:a8:66:
                    4b:37:31:fd:73:e6:d4:cc:52:bc:e1:cb:05:19:75:
                    96:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FF:90:70:C9:41:F8:8D:33:2D:3B:95:2F:F3:B2:91:17:56:91:1C
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:da:bd:1b:26:9b:33:21:df:bd:81:2c:07:cb:f2:fb:5d:2c:
         f2:3f:88:af:c2:ef:34:ec:48:05:e9:24:9f:85:c5:c4:8a:79:
         65:59:63:9c:4e:26:13:14:df:89:1e:99:e3:f8:44:a3:73:02:
         e0:ff:e1:5e:2a:c1:fd:b5:9c:eb:38:54:a5:9b:fc:c6:75:56:
         24:76:40:cf:7a:ab:58:59:d3:e9:82:d1:c3:c2:94:f7:90:57:
         19:95:e7:5c:d7:ee:64:d1:3b:80:50:52:ed:a3:15:63:a8:58:
         e8:ac:6e:c1:1e:11:c1:68:de:78:f6:53:a7:3a:71:f0:f2:52:
         82:a1:20:4d:64:23:50:5a:a8:a3:08:ae:26:55:f6:8a:c4:88:
         67:aa:b8:9b:1f:be:8c:ae:48:19:09:ef:17:6d:55:90:50:ba:
         80:fe:20:b1:ae:ab:23:8e:8a:01:86:f2:8a:e3:e3:f9:48:90:
         0e:16:00:66:8e:0d:5c:51:97:e5:bf:7e:8e:1f:45:97:45:ae:
         72:61:9f:b9:e8:dd:b0:41:c0:1e:2d:f8:f0:79:7f:63:74:22:
         4e:0e:f5:74:ce:54:96:a0:af:3a:ce:72:50:0a:e3:ad:15:68:
         5c:f7:0d:60:ef:51:78:79:6f:0f:f8:ae:0d:96:63:a6:38:c4:
         1f:ad:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:27:16 2025 by rpki-client