Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa
File:                     3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa (raw, json)
Hash identifier:          g1zDolMWz1VQ3PvlMDmjKBhm7bGRG+ihmYSqK6r2o94=
Subject key identifier:   A0:A5:E7:EE:07:A2:00:72:6A:07:A9:16:00:61:56:AF:A7:32:AB:64
Certificate issuer:       /CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
Certificate serial:       27389AB936BCDB2B2B334CC0C0C18E726B6FD381
Authority key identifier: FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa
Signing time:             Tue 04 Feb 2025 01:45:00 +0000
ROA not before:           Tue 04 Feb 2025 01:40:00 +0000
ROA not after:            Tue 03 Feb 2026 01:45:00 +0000
asID:                     269897
IP address blocks:        190.112.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:38:9a:b9:36:bc:db:2b:2b:33:4c:c0:c0:c1:8e:72:6b:6f:d3:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4
        Validity
            Not Before: Feb  4 01:40:00 2025 GMT
            Not After : Feb  3 01:45:00 2026 GMT
        Subject: CN=A0A5E7EE07A200726A07A916006156AFA732AB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f1:c0:36:93:96:0b:b5:29:9d:7e:34:b1:6d:
                    1e:d5:29:d8:13:41:23:85:58:c9:10:49:7e:8f:de:
                    97:5b:d7:1f:87:e4:3a:39:17:a9:01:96:a2:80:ae:
                    46:e5:60:4c:d7:3e:e0:b3:47:7c:c3:4e:fb:6b:33:
                    84:58:b8:66:5b:47:80:fc:fc:bd:3a:76:6a:44:c2:
                    15:cc:d9:93:15:93:36:21:98:65:75:0b:1e:64:16:
                    86:b3:56:14:c1:e0:4c:bb:42:25:93:d9:54:36:d9:
                    73:7b:50:88:3b:d3:cb:6c:b7:07:4f:09:3d:f5:e3:
                    21:6d:b9:e0:e7:f2:a6:bb:31:42:94:00:40:f6:35:
                    c2:44:12:f3:38:72:29:76:82:f3:c2:33:09:41:3d:
                    db:6b:98:20:d5:e0:ad:e2:af:97:40:fd:0a:47:5c:
                    c1:dd:1d:c7:c6:5e:a3:72:e0:c4:d2:fc:52:6b:f2:
                    13:d2:f6:d4:92:04:c7:da:61:15:66:8b:05:83:a2:
                    80:86:aa:d4:7b:af:06:ec:40:c1:63:7b:9e:39:0f:
                    43:3b:15:a8:f1:3b:dc:d2:bd:55:09:09:90:c9:13:
                    17:29:50:1d:19:2d:4f:db:6b:0c:28:59:9a:30:d1:
                    f5:53:1a:ae:ab:bf:37:9a:5f:6e:48:c2:b4:22:49:
                    60:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A5:E7:EE:07:A2:00:72:6A:07:A9:16:00:61:56:AF:A7:32:AB:64
            X509v3 Authority Key Identifier:
                keyid:FD:40:15:BF:5F:4C:07:4C:A4:D5:23:02:EB:FB:E3:92:C5:FF:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD4015BF5F4C074CA4D52302EBFBE392C5FFE6A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E697061640116CEA57C9D9FD8C9DCE84EBDE94D27B887C6D39C08AB913F4571/0/3139302e3131322e3133382e302f32342d3234203d3e20323639383937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:d5:7e:7c:87:e4:10:b8:af:97:78:6b:c4:c9:e5:dc:97:
         eb:95:53:bc:1e:03:7c:af:87:87:8a:a5:18:4d:00:d9:5b:9f:
         c5:bc:08:1c:7b:1d:82:26:0c:a1:73:d0:fc:71:c1:d7:c0:42:
         fe:b2:ab:95:f7:9b:50:31:8e:01:88:71:86:a5:92:e6:0f:cd:
         89:67:4f:67:d8:1a:9b:f7:e9:3e:2f:0c:33:32:25:67:b4:bb:
         05:4f:8b:a6:f4:a2:d0:45:b8:07:25:55:9d:63:3f:e7:86:44:
         49:53:f2:2a:06:48:98:c4:97:f8:db:fd:7a:39:3f:42:14:f3:
         a0:1d:c7:bd:62:d3:62:8d:a7:be:7c:bc:68:11:e5:c5:00:1d:
         67:46:49:3a:bb:59:b8:9e:a9:e9:2f:48:05:26:3a:7e:50:7c:
         15:0f:34:8e:bd:26:f0:4b:f3:81:81:af:65:ec:8c:3e:98:6b:
         bb:53:c7:a3:cc:f3:be:9c:27:0b:a9:cf:1f:e3:95:83:67:fd:
         32:b2:58:6a:0c:ad:3a:ba:45:5c:57:db:d1:21:bf:02:04:60:
         5f:83:a2:d2:e7:20:66:87:5c:d8:98:45:74:74:c2:e4:6a:4d:
         60:36:b4:42:15:f0:5a:d6:60:56:e9:13:a0:bf:d6:82:fb:c9:
         fc:06:7d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:33 2025 by rpki-client