Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa
File:                     3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa (raw, json)
Hash identifier:          LXR3PyJjI+SZ3QzrpaomXNeF8hKjLMITDAMhVbKYkVc=
Subject key identifier:   0D:78:AF:83:ED:B0:95:BB:08:2C:B9:CB:9B:C0:68:11:D8:1B:47:44
Certificate issuer:       /CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
Certificate serial:       5E9FEB8AD83847A87781B18D830884C64BE7E8C9
Authority key identifier: C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa
Signing time:             Tue 04 Feb 2025 18:07:56 +0000
ROA not before:           Tue 04 Feb 2025 18:02:56 +0000
ROA not after:            Tue 03 Feb 2026 18:07:56 +0000
asID:                     270151
IP address blocks:        190.102.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9f:eb:8a:d8:38:47:a8:77:81:b1:8d:83:08:84:c6:4b:e7:e8:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75798560649F727F4B8EEB5DE65CE896EF27A0F
        Validity
            Not Before: Feb  4 18:02:56 2025 GMT
            Not After : Feb  3 18:07:56 2026 GMT
        Subject: CN=0D78AF83EDB095BB082CB9CB9BC06811D81B4744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:b1:81:5c:72:ee:25:cc:84:69:b4:d8:22:
                    fa:09:1f:75:32:a4:15:de:a8:de:c0:29:3b:06:1f:
                    1c:17:a6:35:49:17:c3:ef:45:1e:e0:f8:81:b4:54:
                    19:4b:3f:d1:d8:6a:d8:20:12:d4:1c:af:4b:f1:f3:
                    9a:b1:a3:03:52:2e:56:9b:92:11:d6:ff:ef:12:2a:
                    f8:1f:b0:d9:7a:86:d5:0d:c6:1f:76:21:22:ae:09:
                    e1:f3:b3:b1:e8:de:7b:ef:b4:49:e1:08:f9:ce:2e:
                    1d:d7:c7:d9:33:8f:c8:c4:33:56:56:bd:5a:e7:be:
                    92:4c:5d:80:a5:4f:7b:e2:31:4b:0e:7d:24:d9:da:
                    9d:7c:12:d7:1c:38:65:94:fc:c0:7d:14:2f:98:83:
                    b1:eb:e8:1f:9c:a7:14:5f:61:38:60:4e:4f:49:c3:
                    51:5e:06:f1:68:12:bd:f1:09:49:50:f4:31:1b:6d:
                    ee:02:43:c0:c1:fa:32:35:fe:63:af:cd:b5:2b:d5:
                    f7:df:8b:c1:0a:74:5f:3f:ee:9d:25:73:49:60:f6:
                    6e:71:db:3d:6d:f4:38:46:f9:9d:2f:e5:22:a7:65:
                    7c:aa:0e:dd:a1:ce:19:48:60:96:98:93:11:12:b4:
                    60:a8:e6:e7:2b:43:e8:cc:5a:27:d9:aa:54:9c:fd:
                    26:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:78:AF:83:ED:B0:95:BB:08:2C:B9:CB:9B:C0:68:11:D8:1B:47:44
            X509v3 Authority Key Identifier:
                keyid:C7:57:98:56:06:49:F7:27:F4:B8:EE:B5:DE:65:CE:89:6E:F2:7A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C75798560649F727F4B8EEB5DE65CE896EF27A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED2D51395E2CCAA773D82961D1627A6E38A9BCB3127EDDB8F01FDE9DF43442D/0/3139302e3130322e33322e302f32322d3234203d3e20323730313531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:92:3a:88:65:38:ca:81:25:a5:8e:94:e6:a4:3a:06:4a:a0:
         ad:1d:11:69:d8:62:5a:21:03:c3:27:b7:2b:6f:d6:82:55:8b:
         b6:35:36:e0:ce:d3:60:71:6d:32:a3:fb:e1:cd:ea:6d:44:6d:
         bc:68:3a:36:5e:af:2f:0a:a7:2e:8a:82:78:fe:e7:68:24:d9:
         4b:87:3f:f2:b2:0a:a8:61:fd:b3:fc:45:8b:13:29:10:87:a0:
         69:b0:13:02:0e:6b:71:89:55:f2:a1:8c:d2:3f:36:67:96:02:
         52:48:a5:fe:39:08:52:11:c4:6e:b6:59:06:52:5d:a0:58:99:
         c8:9b:a6:b5:f3:04:bf:a2:6d:26:d5:1d:76:93:47:12:84:90:
         a0:a3:9f:06:8b:e0:59:b8:02:5a:e0:93:d6:d6:34:50:b9:92:
         d4:fd:37:0c:b3:25:7c:2c:84:ee:05:25:45:8d:f1:d3:ab:e8:
         4d:9d:8d:4a:ae:e6:e4:70:10:72:ef:de:0a:6e:35:ae:88:fd:
         e8:b1:11:81:02:48:af:b1:3e:70:5b:c7:98:fa:b0:bc:85:ef:
         d6:6b:ad:92:39:99:a6:c9:f0:3a:71:f8:5d:2f:64:d9:d9:57:
         c1:d9:6b:dd:18:e3:6e:4f:c8:c5:06:78:15:15:72:e7:60:1c:
         98:f9:3f:62
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXp/ritg4R6h3gbGNgwiExkvn6MkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc1Nzk4NTYwNjQ5RjcyN0Y0QjhFRUI1REU2NUNFODk2
RUYyN0EwRjAeFw0yNTAyMDQxODAyNTZaFw0yNjAyMDMxODA3NTZaMDMxMTAvBgNV
BAMTKDBENzhBRjgzRURCMDk1QkIwODJDQjlDQjlCQzA2ODExRDgxQjQ3NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPbGBXHLuJcyEabTYIvoJH3Uy
pBXeqN7AKTsGHxwXpjVJF8PvRR7g+IG0VBlLP9HYatggEtQcr0vx85qxowNSLlab
khHW/+8SKvgfsNl6htUNxh92ISKuCeHzs7Ho3nvvtEnhCPnOLh3Xx9kzj8jEM1ZW
vVrnvpJMXYClT3viMUsOfSTZ2p18EtccOGWU/MB9FC+Yg7Hr6B+cpxRfYThgTk9J
w1FeBvFoEr3xCUlQ9DEbbe4CQ8DB+jI1/mOvzbUr1fffi8EKdF8/7p0lc0lg9m5x
2z1t9DhG+Z0v5SKnZXyqDt2hzhlIYJaYkxEStGCo5ucrQ+jMWifZqlSc/SZbAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUDXivg+2wlbsILLnLm8BoEdgbR0QwHwYDVR0j
BBgwFoAUx1eYVgZJ9yf0uO613mXOiW7yeg8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81RUQyRDUxMzk1RTJDQ0FBNzczRDgyOTYxRDE2MjdBNkUz
OEE5QkNCMzEyN0VEREI4RjAxRkRFOURGNDM0NDJELzAvQzc1Nzk4NTYwNjQ5Rjcy
N0Y0QjhFRUI1REU2NUNFODk2RUYyN0EwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzU3OTg1NjA2NDlGNzI3RjRC
OEVFQjVERTY1Q0U4OTZFRjI3QTBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUVEMkQ1MTM5NUUyQ0NBQTc3M0Q4Mjk2MUQxNjI3QTZFMzhBOUJDQjMx
MjdFRERCOEYwMUZERTlERjQzNDQyRC8wLzMxMzkzMDJlMzEzMDMyMmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzMwMzEzNTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvmYg
MA0GCSqGSIb3DQEBCwUAA4IBAQBIkjqIZTjKgSWljpTmpDoGSqCtHRFp2GJaIQPD
J7crb9aCVYu2NTbgztNgcW0yo/vhzeptRG28aDo2Xq8vCqcuioJ4/udoJNlLhz/y
sgqoYf2z/EWLEykQh6BpsBMCDmtxiVXyoYzSPzZnlgJSSKX+OQhSEcRutlkGUl2g
WJnIm6a18wS/om0m1R12k0cShJCgo58Gi+BZuAJa4JPW1jRQuZLU/TcMsyV8LITu
BSVFjfHTq+hNnY1KrubkcBBy794KbjWuiP3osRGBAkivsT5wW8eY+rC8he/Wa62S
OZmmyfA6cfhdL2TZ2VfB2WvdGONuT8jFBngVFXLnYByY+T9i
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:53 2025 by rpki-client