Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa
File:                     3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa (raw, json)
Hash identifier:          ih6f0ZcuNm7JGJneu1Bt+WPJRekpeJTNoGxyBAJ8ZGI=
Subject key identifier:   54:B8:13:62:58:F6:95:F8:6A:4A:7E:29:F7:83:46:F4:49:8C:D6:76
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       4E937E79F1AEB4E4443B49A95296376406D9B44D
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:08 +0000
ROA not before:           Tue 04 Feb 2025 18:00:08 +0000
ROA not after:            Tue 03 Feb 2026 18:05:08 +0000
asID:                     26611
IP address blocks:        190.127.250.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:93:7e:79:f1:ae:b4:e4:44:3b:49:a9:52:96:37:64:06:d9:b4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:08 2025 GMT
            Not After : Feb  3 18:05:08 2026 GMT
        Subject: CN=54B8136258F695F86A4A7E29F78346F4498CD676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:e4:3f:83:71:9c:07:ad:03:87:ec:e2:41:
                    a2:c8:a5:cc:79:36:92:16:71:59:89:75:1e:82:1f:
                    04:54:63:e5:5a:6d:9b:83:58:b2:33:d5:e9:db:78:
                    2b:8d:62:42:a9:35:8a:47:99:b1:40:6e:d1:6b:5a:
                    8c:43:b3:a9:a7:e7:7c:e5:b5:33:87:bf:33:35:a0:
                    ee:05:54:b1:2f:3c:ef:5f:a0:82:38:8f:fe:81:5e:
                    59:8c:54:34:09:08:fd:6d:17:41:06:e9:47:f0:2a:
                    57:5e:7b:74:be:31:71:0c:0e:2a:08:82:7a:bc:f8:
                    6a:da:36:9b:a7:17:ac:fc:c4:40:4d:b7:62:ff:75:
                    68:d0:c1:d2:e2:e9:fe:93:9e:52:9f:9c:5a:eb:7d:
                    18:7f:aa:ef:3d:fc:8a:d0:a7:1f:b4:d5:60:40:df:
                    39:84:a2:f8:5f:82:a8:79:76:41:10:c5:c4:a8:18:
                    66:0f:21:b7:1c:59:02:59:45:50:3e:f9:84:cb:78:
                    08:b9:db:77:b9:83:49:a4:0b:25:08:2e:27:cd:97:
                    b0:69:1c:cd:8e:11:7f:2a:9d:89:fd:2a:28:50:57:
                    0b:84:20:7d:7b:dc:37:97:e8:fd:1a:12:dc:7c:f4:
                    7c:4a:31:48:18:f9:ba:7f:ec:9e:a9:f0:06:27:ce:
                    c9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:13:62:58:F6:95:F8:6A:4A:7E:29:F7:83:46:F4:49:8C:D6:76
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235302e302f32332d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:3e:ff:45:0a:6b:fd:26:ac:9f:d6:c7:b0:e4:d6:9c:23:
         f2:0e:4e:34:21:1f:1b:12:2e:63:5f:af:10:e9:c3:99:21:bc:
         2d:4b:f1:66:30:c8:89:f4:a6:22:8c:d6:83:a5:6e:d3:61:67:
         a4:3f:64:06:15:11:47:a9:c7:3c:44:d7:b1:ea:2e:49:ef:b5:
         48:45:22:ee:3a:c4:dd:1d:8a:b9:1b:8e:a2:78:3d:55:de:7e:
         bf:5a:56:b0:e3:73:6d:5d:5c:42:47:34:55:d9:f5:a1:8d:16:
         e5:36:53:c7:c5:93:1b:04:89:82:10:5e:a9:0f:eb:4f:7b:02:
         7b:46:f5:b1:ba:c3:05:e5:9a:25:fc:38:8a:f5:94:aa:3b:95:
         cb:a0:64:5a:7a:08:1c:9d:03:b0:d5:f5:fd:de:db:58:b6:69:
         b5:cb:7b:0d:11:52:14:d9:fe:1a:a7:d0:2f:3c:9f:1c:bf:40:
         88:f6:22:f0:60:64:c6:f9:74:05:74:9c:40:92:78:eb:9f:f3:
         12:78:30:93:eb:5f:63:00:e8:8a:36:6a:bd:c5:3d:1c:b4:26:
         97:14:80:8b:f5:27:7e:3a:21:c4:59:52:84:39:44:ec:d6:17:
         d1:3c:b5:a8:b8:bf:bb:dd:ad:6a:c0:b6:62:c1:2c:df:c3:7b:
         80:20:03:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----