Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa
File:                     3139302e31342e322e302f32332d3234203d3e203233323433.roa (raw, json)
Hash identifier:          bil+iAE9hlp/P8+x3ZjB7jUbwF+//0vDN1ciyVaMWCM=
Subject key identifier:   3B:0B:E3:E9:F3:8B:1C:00:DC:14:79:09:E8:F6:13:41:CA:F1:04:92
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       52B1A19464A36B17289BA2727A9071CFD8A90F54
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:15:31 +0000
ROA not before:           Tue 04 Feb 2025 18:10:31 +0000
ROA not after:            Tue 03 Feb 2026 18:15:31 +0000
asID:                     23243
IP address blocks:        190.14.2.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b1:a1:94:64:a3:6b:17:28:9b:a2:72:7a:90:71:cf:d8:a9:0f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:31 2025 GMT
            Not After : Feb  3 18:15:31 2026 GMT
        Subject: CN=3B0BE3E9F38B1C00DC147909E8F61341CAF10492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:a7:81:2a:40:6f:7e:13:5d:0d:b7:fe:63:
                    c8:4b:c2:f3:cc:f8:c6:11:5c:f5:c7:52:41:70:8f:
                    fc:d4:de:3b:03:15:76:6c:16:b6:a0:63:4a:ae:88:
                    20:14:a4:03:4a:52:51:e2:8b:8f:e1:2a:30:08:4f:
                    d1:7d:78:3b:0d:b9:97:85:0c:f7:6a:f5:dc:44:52:
                    d2:dd:04:e7:b7:69:91:c9:51:aa:10:fa:bb:5d:39:
                    63:eb:69:76:58:e5:e1:98:c8:9c:9e:e4:e0:d0:9e:
                    d1:b9:36:f5:b0:0a:e7:b9:23:f6:18:a0:83:7f:dc:
                    f6:d9:1c:73:6f:16:19:db:d5:53:c7:e5:33:54:61:
                    6f:bb:43:c9:48:b8:62:18:29:92:d7:4b:ea:1e:2f:
                    5c:ee:46:f2:23:b0:60:2a:45:6b:d5:98:77:1d:81:
                    8d:f2:1f:da:a3:de:7f:e6:2c:71:1e:01:41:d5:2c:
                    a1:97:1d:32:ff:ea:e2:89:f8:55:b8:60:57:45:ed:
                    a1:2f:b9:fb:97:ab:f1:f9:3b:2e:eb:76:70:15:9a:
                    23:08:89:17:d9:08:78:b0:3b:1d:0d:9e:f6:a2:bd:
                    94:c5:53:09:f0:83:df:4e:ff:16:99:65:d6:8b:45:
                    3d:84:87:e6:17:3f:25:e0:f0:96:8e:6a:76:6d:b7:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0B:E3:E9:F3:8B:1C:00:DC:14:79:09:E8:F6:13:41:CA:F1:04:92
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e322e302f32332d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:21:df:e1:31:76:74:b4:a6:d9:65:80:7d:92:7a:eb:b3:df:
         1c:7c:b2:b6:3c:eb:da:88:66:c0:e3:15:c0:c6:44:ca:52:92:
         9c:d7:5e:3c:d1:5c:13:cf:47:e8:1e:ca:03:dd:14:72:36:5f:
         d1:9b:98:73:6e:fd:9f:40:a6:38:bd:85:a6:eb:10:94:4f:87:
         22:62:34:2a:ab:95:65:04:db:df:e6:b4:04:c8:b5:56:50:e3:
         6a:04:d8:39:0b:ac:a4:cd:45:b4:11:62:18:9e:98:ec:93:e5:
         d9:43:86:4a:29:e4:8b:0f:3e:35:e2:04:a3:00:b9:24:74:be:
         83:cf:de:e0:81:3e:66:41:38:21:0f:f4:35:c8:49:4b:29:da:
         46:30:1e:fd:a2:03:eb:64:48:13:fc:04:34:1d:5e:a5:3c:ae:
         c5:f9:c7:a2:83:4b:71:38:83:c6:8c:73:54:4e:19:2e:d1:f9:
         ee:e6:46:69:39:1c:72:f9:4a:47:e7:73:9a:8d:bd:54:dd:ca:
         b9:7a:99:be:81:64:1d:3c:23:b1:bb:5b:24:40:f5:32:b7:8c:
         2b:d0:5b:07:33:b3:97:8d:14:22:b4:7a:12:77:63:4d:38:a4:
         83:b9:0e:a4:2c:ac:6f:a3:ed:7b:e0:c2:a2:1a:81:09:3a:ff:
         e3:5e:b8:65
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUrGhlGSjaxcom6JyepBxz9ipD1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENDMTAwODdCMzJFRTY5QTQ4OEY1QUU4QUZBMkVFMkY1
MDYxQURFMDAeFw0yNTAyMDQxODEwMzFaFw0yNjAyMDMxODE1MzFaMDMxMTAvBgNV
BAMTKDNCMEJFM0U5RjM4QjFDMDBEQzE0NzkwOUU4RjYxMzQxQ0FGMTA0OTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjCaeBKkBvfhNdDbf+Y8hLwvPM
+MYRXPXHUkFwj/zU3jsDFXZsFragY0quiCAUpANKUlHii4/hKjAIT9F9eDsNuZeF
DPdq9dxEUtLdBOe3aZHJUaoQ+rtdOWPraXZY5eGYyJye5ODQntG5NvWwCue5I/YY
oIN/3PbZHHNvFhnb1VPH5TNUYW+7Q8lIuGIYKZLXS+oeL1zuRvIjsGAqRWvVmHcd
gY3yH9qj3n/mLHEeAUHVLKGXHTL/6uKJ+FW4YFdF7aEvufuXq/H5Oy7rdnAVmiMI
iRfZCHiwOx0NnvaivZTFUwnwg99O/xaZZdaLRT2Eh+YXPyXg8JaOanZttzaVAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUOwvj6fOLHADcFHkJ6PYTQcrxBJIwHwYDVR0j
BBgwFoAUTMEAh7Mu5ppIj1ror6LuL1BhreAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MDA3MkU1NzQzMTQzOTc1QzUxQjQ3RDlGM0E3MjhGMjk1
MkQyMjYwQURERDAwMUYwQ0E2MzA3ODc1QUQ0MUM4LzAvNENDMTAwODdCMzJFRTY5
QTQ4OEY1QUU4QUZBMkVFMkY1MDYxQURFMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Q0MxMDA4N0IzMkVFNjlBNDg4
RjVBRThBRkEyRUUyRjUwNjFBREUwLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTAwNzJFNTc0MzE0Mzk3NUM1MUI0N0Q5RjNBNzI4RjI5NTJEMjI2MEFE
REQwMDFGMENBNjMwNzg3NUFENDFDOC8wLzMxMzkzMDJlMzEzNDJlMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvg4CMA0GCSqG
SIb3DQEBCwUAA4IBAQA3Id/hMXZ0tKbZZYB9knrrs98cfLK2POvaiGbA4xXAxkTK
UpKc11480VwTz0foHsoD3RRyNl/Rm5hzbv2fQKY4vYWm6xCUT4ciYjQqq5VlBNvf
5rQEyLVWUONqBNg5C6ykzUW0EWIYnpjsk+XZQ4ZKKeSLDz414gSjALkkdL6Dz97g
gT5mQTghD/Q1yElLKdpGMB79ogPrZEgT/AQ0HV6lPK7F+ceig0txOIPGjHNUThku
0fnu5kZpORxy+UpH53Oajb1U3cq5epm+gWQdPCOxu1skQPUyt4wr0FsHM7OXjRQi
tHoSd2NNOKSDuQ6kLKxvo+174MKiGoEJOv/jXrhl
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:36 2025 by rpki-client