Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
File:                     3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          lSzAZQ4JBYm2tTh5bUVBevyOHyuepHPoYij0W+NJDPM=
Subject key identifier:   46:1B:4B:D2:54:A4:22:B3:C6:E8:FF:61:D3:1F:B1:40:04:A3:60:99
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       680F7273311481B85F1F203A544127A4E9F8CBDF
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:41 +0000
ROA not before:           Tue 04 Feb 2025 18:23:41 +0000
ROA not after:            Tue 03 Feb 2026 18:28:41 +0000
asID:                     52253
IP address blocks:        190.124.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:0f:72:73:31:14:81:b8:5f:1f:20:3a:54:41:27:a4:e9:f8:cb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:41 2025 GMT
            Not After : Feb  3 18:28:41 2026 GMT
        Subject: CN=461B4BD254A422B3C6E8FF61D31FB14004A36099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:13:23:21:36:4b:57:c2:91:5b:f5:48:d3:eb:
                    5f:36:fc:05:af:8e:12:96:cc:2d:18:fb:dd:99:34:
                    5d:5b:e3:79:77:e6:16:78:02:2a:ca:3d:74:8b:2e:
                    97:e0:a4:cd:f1:76:59:47:33:1a:0d:a8:a3:13:1d:
                    f7:40:1c:96:5e:d3:b1:90:43:0f:9a:b9:27:04:4c:
                    f0:83:65:82:a1:b9:d4:ba:f6:4a:47:80:88:8f:f2:
                    3e:1c:00:42:13:f3:f2:62:46:9b:95:21:38:32:d0:
                    62:b4:3d:f3:9d:f5:e1:b6:0a:70:e4:95:0f:c2:63:
                    c3:17:60:24:29:c0:b2:1a:ed:c5:54:70:68:d1:6e:
                    00:77:38:3e:d4:c3:d8:72:c3:c6:e0:3a:85:60:eb:
                    65:2f:34:67:1a:50:cf:a0:b1:c2:e4:24:2c:06:97:
                    0a:b9:a4:65:90:7f:1d:04:49:70:9a:f8:c6:c0:0f:
                    ed:d1:f9:83:55:aa:c3:c5:80:21:fa:49:ff:0a:b8:
                    1d:74:8d:2a:f8:ec:24:0f:dc:ee:82:37:3d:08:41:
                    58:d9:94:e6:f2:2c:8d:ad:c0:51:ca:df:ec:7d:9f:
                    c4:d0:08:13:a7:3f:1b:ed:1b:e5:78:b5:6f:fd:0c:
                    5f:83:0c:88:fe:37:51:3c:7d:f7:ea:1f:94:24:1a:
                    dc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1B:4B:D2:54:A4:22:B3:C6:E8:FF:61:D3:1F:B1:40:04:A3:60:99
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3132342e3232322e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2f:0e:b8:00:33:16:14:19:26:03:f4:80:b0:34:05:2a:f7:
         56:49:4b:a4:93:3c:ed:95:95:4d:53:95:e2:de:43:6e:10:6a:
         38:5c:52:54:c1:7b:f2:8a:3a:d2:27:31:76:cf:fa:44:f0:bb:
         41:93:7d:ce:29:29:1d:68:3d:a6:2a:c5:b1:11:89:ef:72:c3:
         8f:94:ce:51:8f:b0:88:b2:17:4f:8e:4f:90:68:2d:44:e6:50:
         45:88:4b:87:b2:50:13:c0:a2:37:1b:7c:b0:56:6b:ca:29:52:
         a6:9d:91:2f:95:24:24:43:bf:a3:dd:a4:a8:c2:f9:30:da:1e:
         de:6e:47:b2:a7:09:5d:1c:a4:d4:82:cd:36:2d:0e:10:9a:3c:
         80:48:5a:74:45:29:05:87:11:49:8c:10:2c:1e:e1:be:a4:7f:
         32:ed:b1:ad:ba:84:bd:67:07:35:f8:51:b3:b9:a8:3b:b9:36:
         a2:07:46:e8:4e:81:d2:fb:0b:9b:50:4e:2c:52:eb:f0:07:d5:
         65:69:80:ee:55:be:43:01:c5:31:a5:20:a7:d8:19:b8:01:2a:
         8b:46:7e:3a:6c:1c:66:4d:7e:00:dd:43:a7:f2:e5:d5:9c:e5:
         f0:39:3f:99:07:b0:4a:c1:35:0a:8f:50:7a:6b:2f:a3:6c:8b:
         5b:86:7a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:10:00 2025 by rpki-client