Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa
File:                     3139302e39332e37362e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          2s3LQzdqLlh/fcUALp8IpCGH9ForCHMLQNFVTDo44lo=
Subject key identifier:   BD:29:7E:98:97:39:81:32:35:30:23:FE:02:8E:8E:07:40:17:AA:71
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       58FD388481F15F0F90DCEFB4374408B16777C554
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 04 Feb 2025 20:08:39 +0000
ROA not before:           Tue 04 Feb 2025 20:03:39 +0000
ROA not after:            Tue 03 Feb 2026 20:08:39 +0000
asID:                     212384
IP address blocks:        190.93.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fd:38:84:81:f1:5f:0f:90:dc:ef:b4:37:44:08:b1:67:77:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:39 2025 GMT
            Not After : Feb  3 20:08:39 2026 GMT
        Subject: CN=BD297E9897398132353023FE028E8E074017AA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:ab:b3:45:e1:45:f5:7c:28:af:3f:a7:d7:a3:
                    b5:17:f7:2b:0f:ca:4b:92:f5:8f:a1:e9:f8:80:de:
                    c5:56:3d:7b:b4:01:cf:a8:f7:f3:6f:d0:ff:52:e3:
                    4e:94:d5:ee:ae:74:c9:79:17:77:1e:30:b0:4b:1c:
                    5f:a7:62:8c:93:42:06:19:d0:f9:25:02:04:2c:19:
                    6d:27:b6:04:b3:10:a2:d2:cf:7a:36:49:1e:ca:5c:
                    3a:af:26:01:00:fe:3d:82:ac:ac:83:77:50:59:87:
                    d4:08:3b:b9:72:8e:8e:aa:ee:8f:74:18:e3:36:6c:
                    9b:f9:e2:0b:68:da:bd:11:b1:08:87:56:c9:e0:3f:
                    e1:c2:df:26:a3:20:34:0f:22:f5:3a:2f:30:ae:13:
                    2e:f9:18:bf:3a:49:b1:2a:4d:87:f8:92:d8:e3:5a:
                    33:83:af:78:cd:69:2a:94:5c:37:e1:2f:c9:12:a5:
                    0a:d6:c6:55:44:aa:08:30:aa:be:e5:0d:28:5f:69:
                    46:eb:97:0c:f8:cf:92:a7:df:70:3d:11:8e:51:19:
                    77:7c:75:60:da:21:e2:6e:92:f9:7b:2c:0d:b1:cb:
                    82:9a:ba:fd:44:b4:26:1e:34:70:2b:a2:11:1a:b7:
                    43:ad:0d:d1:bc:34:cb:c8:72:d3:cd:68:db:3b:64:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:29:7E:98:97:39:81:32:35:30:23:FE:02:8E:8E:07:40:17:AA:71
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37362e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:94:a4:32:b3:74:42:85:29:2c:2a:c7:df:5d:68:6e:94:6a:
         15:d3:af:0d:9d:6e:60:39:6a:26:ff:6d:74:26:2d:be:62:26:
         b8:d0:ed:07:f2:1d:6a:f9:89:bd:03:b1:bb:88:d2:fa:46:da:
         cf:a4:e1:14:3b:47:ca:8c:78:3e:a6:7e:28:20:98:08:53:d3:
         36:cb:68:03:5f:71:97:6b:8b:9f:cf:97:05:ff:9f:b9:15:75:
         f5:76:e5:0b:28:b0:a4:39:88:61:84:d7:e4:bf:c4:d8:5d:0a:
         74:b1:98:a5:ae:49:79:80:21:48:21:2d:c4:b0:fc:32:e0:32:
         74:a0:0d:ce:e0:20:f6:1e:89:43:1d:76:cb:19:39:8f:d4:1d:
         f7:0e:33:70:d3:35:05:65:64:d4:16:0b:cb:c3:a1:2b:3f:9b:
         62:8d:93:3a:c2:ce:0c:6b:e2:dd:ff:5b:cc:7f:97:4f:5a:ff:
         c7:f4:1d:c3:c5:64:2e:21:8c:ba:ec:11:1c:c4:00:24:8c:3a:
         98:f3:f1:09:bb:a5:56:a1:9c:de:8b:c9:a2:4a:44:0c:3b:f3:
         a6:72:8e:23:64:64:c9:aa:cf:8d:38:a7:d4:5f:1f:ea:21:7f:
         f4:a7:36:d6:6d:77:76:e5:1b:7f:e1:a1:2d:3e:b7:76:71:87:
         5c:8d:c0:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUWP04hIHxXw+Q3O+0N0QIsWd3xVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAyMDQyMDAzMzlaFw0yNjAyMDMyMDA4MzlaMDMxMTAvBgNV
BAMTKEJEMjk3RTk4OTczOTgxMzIzNTMwMjNGRTAyOEU4RTA3NDAxN0FBNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8q7NF4UX1fCivP6fXo7UX9ysP
ykuS9Y+h6fiA3sVWPXu0Ac+o9/Nv0P9S406U1e6udMl5F3ceMLBLHF+nYoyTQgYZ
0PklAgQsGW0ntgSzEKLSz3o2SR7KXDqvJgEA/j2CrKyDd1BZh9QIO7lyjo6q7o90
GOM2bJv54gto2r0RsQiHVsngP+HC3yajIDQPIvU6LzCuEy75GL86SbEqTYf4ktjj
WjODr3jNaSqUXDfhL8kSpQrWxlVEqggwqr7lDShfaUbrlwz4z5Kn33A9EY5RGXd8
dWDaIeJukvl7LA2xy4Kauv1EtCYeNHArohEat0OtDdG8NMvIctPNaNs7ZP7PAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUvSl+mJc5gTI1MCP+Ao6OB0AXqnEwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzczNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dTDAN
BgkqhkiG9w0BAQsFAAOCAQEAZ5SkMrN0QoUpLCrH311obpRqFdOvDZ1uYDlqJv9t
dCYtvmImuNDtB/IdavmJvQOxu4jS+kbaz6ThFDtHyox4PqZ+KCCYCFPTNstoA19x
l2uLn8+XBf+fuRV19XblCyiwpDmIYYTX5L/E2F0KdLGYpa5JeYAhSCEtxLD8MuAy
dKANzuAg9h6JQx12yxk5j9Qd9w4zcNM1BWVk1BYLy8OhKz+bYo2TOsLODGvi3f9b
zH+XT1r/x/Qdw8VkLiGMuuwRHMQAJIw6mPPxCbulVqGc3ovJokpEDDvzpnKOI2Rk
yarPjTin1F8f6iF/9Kc21m13duUbf+GhLT63dnGHXI3ApQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:41 2025 by rpki-client