Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
File:                     3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa (raw, json)
Hash identifier:          TEHmmAlFAYn+/vEeUZz185DYp04q+OsN11fV7lbtGGc=
Subject key identifier:   7A:F5:6C:DC:35:40:09:2D:B7:99:19:F9:A9:F3:AE:4D:AB:2D:8D:92
Certificate issuer:       /CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
Certificate serial:       1B1FA3A8B44C18A0259DC086E76B9EAD58E50100
Authority key identifier: F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 18:13:25 +0000
ROA not before:           Tue 04 Feb 2025 18:08:25 +0000
ROA not after:            Tue 03 Feb 2026 18:13:25 +0000
asID:                     20207
IP address blocks:        190.105.144.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1f:a3:a8:b4:4c:18:a0:25:9d:c0:86:e7:6b:9e:ad:58:e5:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F821DED2CE38BADE79C41BB152602F035BB78B6C
        Validity
            Not Before: Feb  4 18:08:25 2025 GMT
            Not After : Feb  3 18:13:25 2026 GMT
        Subject: CN=7AF56CDC3540092DB79919F9A9F3AE4DAB2D8D92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:cb:7c:69:fe:8c:80:ab:7c:a5:c1:1d:01:
                    38:dd:4c:ea:06:34:9d:c9:8c:1e:f0:ec:a7:8e:7a:
                    49:3a:76:25:8c:12:f5:c4:cb:34:3e:4f:db:8e:ec:
                    99:5c:ab:3b:c8:fe:67:2a:2f:23:d6:a1:1c:d8:73:
                    b2:7b:b6:27:7b:87:7d:84:b9:9b:49:ea:dc:a0:be:
                    22:b3:ce:4a:66:af:de:27:00:7e:f2:2d:8a:c0:8a:
                    3a:ce:b5:eb:63:44:99:35:aa:8c:93:96:00:e7:12:
                    c0:6d:28:2a:c6:47:a8:0b:e1:fa:8d:4a:40:46:db:
                    1f:4b:12:c8:14:28:c2:fe:d6:b7:c2:42:31:31:bd:
                    5c:9c:01:14:2b:92:37:0a:7f:2c:a1:e5:7a:8e:07:
                    ea:e4:ce:2d:e1:80:ab:05:a9:e4:36:38:72:51:97:
                    79:08:67:4d:7f:97:d2:cb:0f:12:bb:ab:00:99:e2:
                    84:97:f2:a7:97:68:15:5f:27:3a:3f:90:22:13:c8:
                    13:76:b2:8b:f6:77:36:0f:35:f1:fa:78:0c:c6:5e:
                    68:01:5e:ce:4a:c9:fa:51:28:8c:b7:ea:a9:ae:6b:
                    87:b0:ec:d4:4c:bc:12:3b:16:f9:30:f6:66:07:6a:
                    38:eb:f7:da:e8:cd:54:51:d2:28:73:34:29:46:df:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:6C:DC:35:40:09:2D:B7:99:19:F9:A9:F3:AE:4D:AB:2D:8D:92
            X509v3 Authority Key Identifier:
                keyid:F8:21:DE:D2:CE:38:BA:DE:79:C4:1B:B1:52:60:2F:03:5B:B7:8B:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F821DED2CE38BADE79C41BB152602F035BB78B6C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E176CFB859FFF8D07920D2AD4B9F8E7788C33CC9D3336684CB4C666434E4B22/0/3139302e3130352e3134342e302f32312d3231203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:42:0f:07:9f:db:83:73:49:76:d4:50:9b:4f:61:28:1f:24:
         87:41:57:07:68:a2:70:74:1c:30:9e:96:69:7c:63:5e:7f:b4:
         f8:c0:2c:57:d8:98:48:bd:1a:2c:3e:f3:db:ed:a1:6e:31:bd:
         63:73:4b:a4:23:ea:86:15:de:fc:ce:e3:db:bb:d5:b1:16:62:
         5e:0f:12:ab:a4:47:e4:40:bf:af:4c:7c:5d:b3:b3:4e:04:d9:
         ac:d6:b2:d1:f4:bb:41:10:ab:3b:23:94:2a:47:7b:22:a2:f2:
         a3:77:6e:07:d7:3c:72:17:3d:11:44:6e:07:fb:f6:bc:d1:30:
         c5:59:53:6c:c8:04:40:ad:c8:e0:8a:9d:b0:b5:a3:af:b2:f8:
         9f:5d:2c:4f:00:7a:88:82:b3:5b:6c:4f:95:ef:d9:d7:2b:b5:
         78:6c:e1:51:88:87:18:02:38:61:bd:55:8f:ac:4c:b9:87:9a:
         b9:e6:45:08:88:e0:7e:26:fb:f1:11:3e:2f:3f:22:85:e9:bc:
         28:b1:bc:db:f3:a0:51:f1:40:df:79:60:63:21:a9:35:12:fd:
         89:80:a4:ae:41:1d:2b:a9:f1:1e:d0:f2:9b:cb:46:16:ce:e9:
         10:31:13:48:6d:e1:f2:25:c7:10:eb:7a:4d:cf:04:09:fe:cd:
         42:80:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:42 2025 by rpki-client