Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130372e302f32342d3234203d3e20323730313638.roa
File:                     3139302e39332e3130372e302f32342d3234203d3e20323730313638.roa (raw, json)
Hash identifier:          f9ENhLjFCk0Q2hxVDpBHFOlTBpYgbuG4EtqtS7Hd6WQ=
Subject key identifier:   21:3B:57:EB:6F:1F:39:C9:68:47:9B:14:33:79:BB:C8:39:83:F7:36
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2A6DE6BD12BA23B9B869524DEE40D25404FD3E63
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130372e302f32342d3234203d3e20323730313638.roa
Signing time:             Mon 20 Jan 2025 11:25:00 +0000
ROA not before:           Mon 20 Jan 2025 11:20:00 +0000
ROA not after:            Mon 19 Jan 2026 11:25:00 +0000
asID:                     270168
IP address blocks:        190.93.107.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6d:e6:bd:12:ba:23:b9:b8:69:52:4d:ee:40:d2:54:04:fd:3e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan 20 11:20:00 2025 GMT
            Not After : Jan 19 11:25:00 2026 GMT
        Subject: CN=213B57EB6F1F39C968479B143379BBC83983F736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:51:99:2e:ba:ba:2e:d6:41:35:bc:6a:21:c8:
                    8c:df:f9:e1:30:14:a6:a0:d3:f6:54:58:9c:25:93:
                    e7:01:57:74:84:9d:82:fe:f0:bf:5c:31:15:c0:22:
                    9d:6b:35:81:8e:e6:99:e0:11:60:01:c6:f5:1c:cc:
                    79:3c:95:a0:07:1e:7b:a1:b8:21:3b:c3:ae:cb:8d:
                    cb:9b:fa:4a:00:8d:5f:da:95:70:de:a1:67:47:0f:
                    74:d3:39:58:6b:7d:42:26:1f:ad:02:73:26:bb:f7:
                    fb:f3:1d:02:3b:de:0c:88:ac:cd:b7:5f:ba:44:4e:
                    42:a1:05:4b:e8:ac:6b:4c:f3:bd:b5:6d:38:bf:9f:
                    5e:ad:8c:84:25:e0:db:89:ad:7a:64:fe:41:13:1b:
                    27:b9:fc:ed:19:30:39:86:0e:0b:56:57:0d:cf:0a:
                    7e:f2:3f:d9:4b:aa:c9:a6:e4:3d:a7:35:34:5e:83:
                    a2:ed:34:5b:18:39:26:09:93:37:0a:02:aa:bb:87:
                    56:6f:ab:23:91:ee:03:62:88:33:ba:c4:b0:82:95:
                    7e:83:fa:48:3b:bb:f3:26:cd:e7:ec:18:1b:7c:79:
                    4d:73:13:f1:5f:98:44:c8:91:c7:2e:a5:cf:23:bc:
                    d3:c8:0e:55:18:30:c4:ad:15:70:3a:97:0f:9d:be:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:57:EB:6F:1F:39:C9:68:47:9B:14:33:79:BB:C8:39:83:F7:36
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130372e302f32342d3234203d3e20323730313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:3e:91:89:ab:9b:6a:3a:dd:bb:a1:98:5d:05:3c:36:70:9b:
         27:d5:cc:c2:69:57:bd:a3:fd:0c:9b:8c:0a:17:84:35:60:50:
         b1:04:74:c6:f7:cf:a2:4e:07:10:72:0f:f1:17:64:c7:d0:8d:
         3a:75:83:fe:43:37:d8:39:cc:93:ed:64:fc:b3:03:96:4d:1e:
         89:9c:ff:ab:42:88:57:49:11:f2:e0:1b:19:24:6e:1a:91:c8:
         b1:79:d4:59:be:f0:b2:1f:20:90:b1:96:d9:1a:90:e1:91:68:
         fd:ed:a4:ab:09:8b:1f:27:e5:89:dd:d0:28:de:81:e0:f0:05:
         24:96:c6:b5:c9:e7:87:0b:36:d0:dd:13:3c:c3:33:27:c1:b8:
         de:11:30:ab:15:38:1b:a9:24:9b:bf:93:72:94:3e:07:41:22:
         78:5c:f2:54:9b:33:64:7e:65:a0:23:bb:af:fb:c5:01:13:b2:
         68:49:54:47:09:98:82:58:ec:93:70:32:c7:d4:1f:37:09:08:
         52:1b:4e:bd:00:9b:d0:5e:48:8d:8f:2a:ab:f1:38:fb:fd:fd:
         09:85:c4:0c:d2:c9:6e:1a:b3:c5:20:17:a2:05:b9:e2:b6:05:
         8b:8b:50:41:8c:60:d9:44:e0:d1:19:04:29:21:d1:9f:06:f8:
         10:fe:ee:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:14 2025 by rpki-client