Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          dVSHtlAi2g+VW+fJjFVQwvemgdE7fXi9yAid57sPVko=
Subject key identifier:   13:E5:52:8A:1E:61:41:EE:72:91:B3:68:39:64:7A:65:B5:3F:96:E9
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       565B633ECF546D5BD99DB3C1B0C0E464E065C0BA
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:37 +0000
ROA not before:           Tue 04 Feb 2025 18:23:37 +0000
ROA not after:            Tue 03 Feb 2026 18:28:37 +0000
asID:                     52253
IP address blocks:        190.108.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:5b:63:3e:cf:54:6d:5b:d9:9d:b3:c1:b0:c0:e4:64:e0:65:c0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:37 2025 GMT
            Not After : Feb  3 18:28:37 2026 GMT
        Subject: CN=13E5528A1E6141EE7291B36839647A65B53F96E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:ea:f1:00:34:d9:2e:82:ed:35:17:c2:5a:
                    bd:a8:d4:2a:e7:f5:ec:72:62:88:5f:49:d6:cc:c2:
                    1e:d8:aa:5e:65:75:ce:ad:5e:7c:3d:97:73:14:1f:
                    eb:ae:bd:eb:f9:c9:be:93:fd:ff:c7:05:e0:72:37:
                    d7:c1:84:2d:ba:73:66:d7:88:68:d4:0e:4f:e5:6c:
                    92:bc:0d:46:cd:95:2c:d5:89:e1:b3:69:5c:da:26:
                    5b:86:26:00:b9:14:77:5d:46:a5:ba:57:9f:72:ec:
                    c9:41:9c:80:06:62:01:66:f4:51:34:8e:18:e2:f4:
                    3b:7d:33:0d:60:39:bb:a5:74:14:d8:3b:62:96:ec:
                    3e:99:aa:14:ea:aa:1f:a7:a6:c3:e9:36:ad:16:96:
                    89:53:0a:84:e0:00:fe:bc:c0:0e:c9:a2:ea:a4:78:
                    76:13:69:f1:e8:0c:80:de:c2:53:c5:99:2f:f7:33:
                    9a:46:3c:25:4e:ba:a8:3d:7f:7d:b6:c2:a0:79:49:
                    8b:6a:6e:1b:bd:14:30:cb:d1:21:68:65:fa:0c:c0:
                    27:90:e5:65:1d:05:d1:52:80:a8:7a:5e:3e:5d:78:
                    f0:81:ff:38:76:94:79:f1:f5:5c:d4:d0:38:fa:90:
                    3f:37:bb:de:fa:0f:6c:e3:a9:1a:24:63:df:d8:48:
                    f1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:52:8A:1E:61:41:EE:72:91:B3:68:39:64:7A:65:B5:3F:96:E9
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231302e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:6d:a9:1a:31:c9:a2:c2:1b:b3:12:c0:bc:b8:1e:d5:b8:
         22:13:6a:bf:6e:27:cc:fd:18:dc:79:37:04:a1:3e:eb:b2:69:
         b9:3a:93:b3:b0:26:3d:eb:f0:57:c6:8e:b9:19:cb:99:10:fa:
         45:4f:9c:de:c3:cc:e1:41:b5:55:e2:a7:df:49:bc:9c:6e:86:
         20:cf:95:c4:f0:6b:08:98:a7:c4:25:be:ed:9b:65:92:b5:f0:
         40:24:bc:61:35:8d:9d:dc:5f:90:10:9d:2e:d4:09:be:89:eb:
         25:01:95:ab:19:f7:34:9f:d8:fb:92:4f:6a:74:65:50:a4:85:
         1b:b6:2a:fb:7c:66:f0:84:38:5b:19:7d:3d:b5:f9:9e:65:73:
         27:ff:8c:0e:36:1b:f0:53:76:ca:a6:db:08:37:d5:be:e6:36:
         be:80:fa:33:c8:f6:f1:77:16:68:12:9d:4d:f0:a9:9e:be:f2:
         fa:c9:c4:95:4a:a7:a5:a3:51:f6:77:44:63:f4:cd:5f:f2:1a:
         03:d8:f9:02:16:9f:fe:43:09:75:eb:48:bb:0c:33:22:94:4c:
         be:83:1e:81:e6:cc:e9:29:0f:93:ec:5f:8f:55:8d:2e:73:79:
         7f:d0:c5:63:96:ae:37:9c:9c:d0:21:1c:87:98:82:54:8d:2b:
         43:b2:4a:2b
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVltjPs9UbVvZnbPBsMDkZOBlwLowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNTAyMDQxODIzMzdaFw0yNjAyMDMxODI4MzdaMDMxMTAvBgNV
BAMTKDEzRTU1MjhBMUU2MTQxRUU3MjkxQjM2ODM5NjQ3QTY1QjUzRjk2RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwNOrxADTZLoLtNRfCWr2o1Crn
9exyYohfSdbMwh7Yql5ldc6tXnw9l3MUH+uuvev5yb6T/f/HBeByN9fBhC26c2bX
iGjUDk/lbJK8DUbNlSzVieGzaVzaJluGJgC5FHddRqW6V59y7MlBnIAGYgFm9FE0
jhji9Dt9Mw1gObuldBTYO2KW7D6ZqhTqqh+npsPpNq0WlolTCoTgAP68wA7Jouqk
eHYTafHoDIDewlPFmS/3M5pGPCVOuqg9f322wqB5SYtqbhu9FDDL0SFoZfoMwCeQ
5WUdBdFSgKh6Xj5dePCB/zh2lHnx9VzU0Dj6kD83u976D2zjqRokY9/YSPFlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUE+VSih5hQe5ykbNoOWR6ZbU/lukwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMxMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzS
MA0GCSqGSIb3DQEBCwUAA4IBAQAOxG2pGjHJosIbsxLAvLge1bgiE2q/bifM/Rjc
eTcEoT7rsmm5OpOzsCY96/BXxo65GcuZEPpFT5zew8zhQbVV4qffSbycboYgz5XE
8GsImKfEJb7tm2WStfBAJLxhNY2d3F+QEJ0u1Am+ieslAZWrGfc0n9j7kk9qdGVQ
pIUbtir7fGbwhDhbGX09tfmeZXMn/4wONhvwU3bKptsIN9W+5ja+gPozyPbxdxZo
Ep1N8KmevvL6ycSVSqelo1H2d0Rj9M1f8hoD2PkCFp/+Qwl160i7DDMilEy+gx6B
5szpKQ+T7F+PVY0uc3l/0MVjlq43nJzQIRyHmIJUjStDskor
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:38 2025 by rpki-client