Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131342e302f32332d3234203d3e203236363131.roa
File:                     3139302e3133302e3131342e302f32332d3234203d3e203236363131.roa (raw, json)
Hash identifier:          wQr5rUmng8LBT5y/ZbN/TCz3zCknzsXCpt357MoWPzE=
Subject key identifier:   83:2D:E7:39:3A:44:F8:E8:15:E7:62:57:DF:59:97:94:7A:02:82:D7
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       37064BE4D029AB8E6D87C026AA4B566B5896B058
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131342e302f32332d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:09 +0000
ROA not before:           Tue 04 Feb 2025 18:00:09 +0000
ROA not after:            Tue 03 Feb 2026 18:05:09 +0000
asID:                     26611
IP address blocks:        190.130.114.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:06:4b:e4:d0:29:ab:8e:6d:87:c0:26:aa:4b:56:6b:58:96:b0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:09 2025 GMT
            Not After : Feb  3 18:05:09 2026 GMT
        Subject: CN=832DE7393A44F8E815E76257DF5997947A0282D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:da:b5:e0:73:5a:de:dd:70:b4:99:87:2f:43:
                    89:ed:97:2b:60:48:27:39:c8:c3:0b:b5:4a:95:33:
                    4d:9b:89:c3:79:d2:6c:70:e7:9d:d3:5b:99:b2:f5:
                    57:75:4d:d1:98:31:42:89:21:f3:18:fd:27:c1:c6:
                    97:c9:72:38:76:ab:02:ee:1e:03:97:25:60:a9:e7:
                    46:1a:d6:06:05:bb:aa:01:3a:dc:c1:9c:5e:95:c6:
                    8d:4b:a9:a7:b7:ea:52:ce:ef:56:d0:8c:ca:0d:d8:
                    23:aa:f6:0f:41:6d:0f:58:f4:b3:f2:91:4b:5f:98:
                    a3:74:2e:29:0c:69:3d:36:32:19:c4:a8:7a:34:5c:
                    f9:f4:8d:05:ac:28:5c:c0:be:24:27:15:42:50:45:
                    99:cb:6f:9f:8e:cc:67:f6:9a:79:3b:49:75:24:2e:
                    a2:8b:a3:1d:6b:a9:f8:05:82:60:bd:72:1d:ee:97:
                    65:4b:90:52:23:8c:99:15:d2:29:07:66:ef:a8:3b:
                    47:d8:92:19:79:92:7a:bf:dd:64:ec:80:68:a4:3d:
                    b4:cb:be:aa:6d:84:60:45:48:6a:99:39:e4:35:7d:
                    e5:a9:3e:88:49:fa:a8:52:92:9a:10:fa:f0:d2:0f:
                    d6:a8:78:46:db:8a:46:10:24:78:0f:ed:84:d1:3d:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:2D:E7:39:3A:44:F8:E8:15:E7:62:57:DF:59:97:94:7A:02:82:D7
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3133302e3131342e302f32332d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:37:ba:8a:15:40:e5:4f:98:05:fd:4a:5d:59:c6:33:28:
         36:23:7a:a6:5f:1d:53:9a:08:c8:2a:81:27:a8:0d:57:83:34:
         ab:66:7a:d4:ec:b3:6d:38:88:82:64:bc:8d:8e:2d:a8:72:c0:
         cd:7e:81:88:8e:7f:ef:7c:92:4c:63:eb:95:ca:7c:5a:9d:f2:
         10:d0:e8:59:81:7d:19:d9:bf:b2:35:c4:93:43:38:f1:50:be:
         45:58:17:ed:cf:29:1c:ef:37:2b:8e:07:21:b0:96:9e:a8:84:
         63:6a:22:c0:1c:8b:e6:b5:de:f8:fe:26:76:58:b6:b4:05:4d:
         60:80:75:02:f1:77:0f:9f:07:fb:e7:56:a1:85:ed:5b:8b:14:
         e4:cd:e1:7f:3d:ee:ed:a6:7f:cb:be:06:0b:3a:dc:eb:81:95:
         ac:06:a8:e8:91:d6:9a:9c:82:80:52:ac:49:70:16:36:37:95:
         1e:69:94:37:5c:2f:5e:9b:83:fb:45:92:46:68:5b:63:bb:a1:
         01:01:4f:ec:3a:0f:60:79:8d:87:d6:a0:07:02:a5:84:ad:54:
         38:82:f1:01:66:d1:1f:7e:76:69:5f:b1:05:d7:33:c7:04:97:
         8e:9e:24:09:bd:2b:30:35:55:34:4b:60:ae:25:da:54:59:66:
         0e:94:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:07 2025 by rpki-client