Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          GBX6tjO98K52SqNeIIuk0z+Cg/cKR/T3XLNxxflQvgk=
Subject key identifier:   51:E9:33:11:F7:D8:B7:AD:51:24:4E:EA:2D:3E:D9:DE:B6:CE:7C:A0
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       44E5B26B31674AC737D6D08AF2F5FCD5975AB7AE
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:12 +0000
ROA not before:           Tue 04 Feb 2025 18:10:12 +0000
ROA not after:            Tue 03 Feb 2026 18:15:12 +0000
asID:                     52330
IP address blocks:        190.184.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e5:b2:6b:31:67:4a:c7:37:d6:d0:8a:f2:f5:fc:d5:97:5a:b7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:12 2025 GMT
            Not After : Feb  3 18:15:12 2026 GMT
        Subject: CN=51E93311F7D8B7AD51244EEA2D3ED9DEB6CE7CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:93:b3:28:03:90:5e:62:46:79:00:59:bf:
                    a6:ea:09:64:3c:71:ff:cd:ce:dc:8c:7c:f1:43:d8:
                    e0:c9:0a:70:69:c6:ab:b7:34:7f:73:22:bf:f2:e9:
                    c7:e2:af:d0:65:aa:9a:84:e8:9b:82:c0:4a:99:91:
                    db:64:7a:43:78:00:0b:de:f2:3e:f4:0a:af:d9:28:
                    92:98:99:e5:9e:0c:05:7c:9b:9b:e9:7a:61:83:a5:
                    1d:a0:29:13:65:28:f0:a9:00:1f:0f:3f:69:fb:6b:
                    3d:d1:1b:41:58:c8:4a:9d:b3:a9:5a:b3:5e:84:1b:
                    52:70:f9:94:03:73:c2:77:5e:41:a9:66:98:83:54:
                    dc:c8:a1:18:50:3d:a1:d6:38:5d:42:17:9c:1d:e3:
                    de:94:56:dd:2c:7d:4c:90:16:a9:a2:22:00:df:56:
                    9a:80:10:1d:58:ba:a2:75:91:51:4a:2f:a8:85:75:
                    3b:aa:7a:04:a7:55:b2:a8:fe:dd:4a:68:d9:4b:1f:
                    95:eb:e0:16:14:69:ec:61:66:79:2a:6f:5c:83:1f:
                    82:60:a2:d5:d9:0d:68:29:be:eb:da:9a:19:9e:f8:
                    5a:81:f1:62:b1:47:28:db:c4:47:ca:20:cf:f7:de:
                    02:0b:6c:96:99:03:07:8f:72:9f:86:fd:29:a2:3e:
                    c6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E9:33:11:F7:D8:B7:AD:51:24:4E:EA:2D:3E:D9:DE:B6:CE:7C:A0
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230322e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:a9:bc:0d:09:af:e6:1e:e9:3f:41:4a:99:ba:8c:c4:5d:
         2b:08:c2:b6:23:22:e3:44:70:e6:05:c8:e8:1c:4d:84:c7:43:
         f1:9f:7f:19:d0:e5:ba:7d:29:e5:8c:ee:db:ce:f3:21:18:0b:
         90:51:4b:d1:e8:a8:0c:48:bc:46:45:99:4b:c4:b0:e8:11:f8:
         5a:a6:a5:51:e9:49:b1:4b:14:2a:60:f2:30:1c:49:c1:b0:9c:
         6c:c2:8b:e7:53:fc:8d:51:92:0a:e2:73:25:d4:32:1c:a2:18:
         00:02:1f:42:2e:ba:34:3a:28:cb:96:dd:38:96:cc:61:38:ec:
         07:54:96:0b:39:d7:25:69:1d:8a:6c:a7:55:a7:f8:ec:3d:a9:
         7a:d2:7a:2b:71:31:ea:49:e3:67:4c:c4:19:ee:25:04:10:e0:
         bf:29:c6:a7:31:2f:24:c9:20:26:7b:49:47:89:03:83:a8:bd:
         d8:7a:da:c9:08:38:28:ce:92:f9:0d:82:cb:05:7c:7e:be:2f:
         40:64:2b:80:00:87:94:98:f6:81:96:7a:af:cd:f6:be:f8:24:
         d2:27:6f:db:bb:47:88:50:75:f5:75:0b:b8:01:9a:c3:3d:ec:
         7e:8e:23:a8:ea:fb:1e:47:d8:57:2b:c4:9b:4a:af:ff:13:f9:
         6e:77:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:27:15 2025 by rpki-client