Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/3139312e3130322e33362e302f32322d3234203d3e20323633363938.roa
File:                     3139312e3130322e33362e302f32322d3234203d3e20323633363938.roa (raw, json)
Hash identifier:          ZaNasApPrvgqv6d8cwJVT5EkCFYf2AqNlkGgpLxNspo=
Subject key identifier:   1E:6B:70:CF:5B:C8:21:99:6A:66:F2:C1:EC:49:DE:21:D2:6F:45:19
Certificate issuer:       /CN=EA0A02ED533F7158CC574F97ADF00A76C058CD8E
Certificate serial:       131E3308E188BFABFC77DAE8FE32C7DFB1E730B1
Authority key identifier: EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/3139312e3130322e33362e302f32322d3234203d3e20323633363938.roa
Signing time:             Tue 04 Feb 2025 20:05:54 +0000
ROA not before:           Tue 04 Feb 2025 20:00:54 +0000
ROA not after:            Tue 03 Feb 2026 20:05:54 +0000
asID:                     263698
IP address blocks:        191.102.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:1e:33:08:e1:88:bf:ab:fc:77:da:e8:fe:32:c7:df:b1:e7:30:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA0A02ED533F7158CC574F97ADF00A76C058CD8E
        Validity
            Not Before: Feb  4 20:00:54 2025 GMT
            Not After : Feb  3 20:05:54 2026 GMT
        Subject: CN=1E6B70CF5BC821996A66F2C1EC49DE21D26F4519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:66:78:4b:41:6c:2a:52:b7:0c:3d:3a:da:52:
                    37:e2:05:9e:12:17:63:b7:55:74:47:e2:72:23:96:
                    43:93:30:54:27:b9:3d:03:14:c0:bc:0f:0f:62:4a:
                    cc:d6:6b:33:e1:15:d5:ac:47:70:90:22:20:c4:c4:
                    b4:dd:b9:2f:ed:d6:04:41:81:1e:81:ad:c1:35:d8:
                    b2:cd:42:5a:f5:fd:35:16:1d:7a:76:24:fa:17:7d:
                    5e:27:45:5c:0e:32:87:96:24:b0:e3:59:28:45:a2:
                    51:a9:a8:72:55:56:cd:74:74:7d:42:47:4f:c4:f6:
                    b3:a5:3b:c3:27:06:5c:cd:2e:61:37:26:17:23:1b:
                    23:11:bc:f0:7b:00:78:e3:de:18:ed:42:de:6a:c4:
                    05:8f:3a:1e:f1:4f:50:aa:03:82:e5:dd:a5:82:ce:
                    bc:1e:8e:87:13:6f:12:cd:42:43:44:2d:ea:ed:e6:
                    7e:ce:14:4a:14:a1:d8:b9:ed:5b:17:fc:20:fc:97:
                    db:71:49:5d:9a:35:ca:2d:34:85:3d:ec:09:ee:4b:
                    74:c2:6c:5f:6e:50:ae:74:11:2b:3e:1a:59:4a:44:
                    17:73:c1:7f:44:25:33:f4:14:9f:0d:8e:93:45:e5:
                    8a:4f:a4:a1:dd:87:ed:a6:3b:44:a6:96:3f:0f:5d:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:70:CF:5B:C8:21:99:6A:66:F2:C1:EC:49:DE:21:D2:6F:45:19
            X509v3 Authority Key Identifier:
                keyid:EA:0A:02:ED:53:3F:71:58:CC:57:4F:97:AD:F0:0A:76:C0:58:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EA0A02ED533F7158CC574F97ADF00A76C058CD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62805937801BD6939448889EC064A2D6FBC57233B2E595939FC8435B957B36B9/0/3139312e3130322e33362e302f32322d3234203d3e20323633363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:1b:96:ac:e4:dc:f2:9c:ec:bd:e2:0c:6e:81:ea:dc:f7:
         e6:07:df:aa:5b:35:4a:17:37:71:ff:e9:9b:f0:c4:47:f3:72:
         af:26:aa:59:b7:f1:25:ad:9b:22:e3:97:2d:18:1b:f9:c4:4c:
         78:c6:b3:60:b4:3f:b2:1e:32:90:43:2d:5d:de:85:86:7c:8a:
         2a:4b:83:88:11:65:4f:5f:1b:ac:7f:65:8a:57:7b:db:46:64:
         7d:fc:4f:2b:16:f3:1c:d2:c1:44:8e:5d:a8:dd:b0:ba:1a:62:
         76:e2:4e:a0:66:c0:7d:e6:5d:84:17:fb:10:88:b9:66:6a:86:
         9a:d6:75:fe:0c:a0:4c:b8:97:37:9a:6c:a1:45:27:d8:54:71:
         51:a1:59:c2:9e:23:ee:b9:5a:cd:1b:e6:43:11:2c:18:a4:44:
         e1:ca:4a:52:97:04:61:e2:80:f4:e8:31:5d:e3:47:54:fd:63:
         31:f7:8c:28:6f:7b:a3:2f:8a:40:6c:3b:f0:97:13:ae:af:1c:
         d2:3a:4c:af:ad:44:72:2a:ce:ed:70:e6:a4:62:41:d7:bd:a8:
         a1:f6:7a:68:35:1c:c7:17:f4:68:aa:fa:8c:04:b3:dd:fe:7c:
         df:89:61:20:1e:9a:14:87:bf:cf:e2:52:30:f2:26:d4:f5:5e:
         2b:6d:e3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:47 2025 by rpki-client