Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38312e302f32342d3234203d3e2037303138.roa
File:                     3139302e39332e38312e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          FOFT/tTjIEEB/CJAHJHuREeA68HlHvw89dJolwdz2ug=
Subject key identifier:   C4:4A:7C:9D:02:67:15:E7:87:9B:22:72:76:BD:42:CA:C3:85:27:6A
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       0E35B0BD309C680D1D80E4BE1E93D351DDAAFD98
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38312e302f32342d3234203d3e2037303138.roa
Signing time:             Tue 04 Feb 2025 20:08:37 +0000
ROA not before:           Tue 04 Feb 2025 20:03:37 +0000
ROA not after:            Tue 03 Feb 2026 20:08:37 +0000
asID:                     7018
IP address blocks:        190.93.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:35:b0:bd:30:9c:68:0d:1d:80:e4:be:1e:93:d3:51:dd:aa:fd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:37 2025 GMT
            Not After : Feb  3 20:08:37 2026 GMT
        Subject: CN=C44A7C9D026715E7879B227276BD42CAC385276A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f7:91:8c:59:8d:f0:bb:86:d7:ff:c2:fd:9d:
                    cc:53:dd:e4:02:e3:bb:ec:b2:15:8e:92:63:04:70:
                    6e:b1:63:c3:4f:f5:69:7a:d4:5a:c4:99:fc:05:18:
                    d6:5b:3a:e9:e4:e4:09:82:c1:ff:32:9f:d0:4d:07:
                    5e:74:ab:d7:4e:fe:48:5f:9a:9d:d5:0f:fd:d5:86:
                    19:55:24:cd:e0:2b:ad:86:e2:ca:df:0d:b3:61:c3:
                    a3:b3:31:69:be:49:b2:ec:21:0d:e9:19:31:2f:e5:
                    98:38:a8:21:e9:eb:cb:3f:7d:8c:17:34:3f:4d:9d:
                    a9:c1:08:58:b0:21:d6:aa:d3:31:39:f1:c9:fc:be:
                    82:16:bc:f0:45:f6:ab:04:04:56:fe:f1:d0:09:ea:
                    39:81:a3:33:35:32:09:a6:ba:3f:9d:85:cf:2c:ad:
                    f0:fd:be:e0:e9:8f:26:93:aa:b0:ed:ec:be:df:61:
                    5f:fd:d5:f1:03:44:86:5f:bc:9d:41:05:62:9d:86:
                    26:61:f5:70:be:ac:60:aa:e4:4c:11:08:cc:dc:6d:
                    0b:53:75:45:50:02:2f:e0:61:3b:6a:5e:b9:02:ab:
                    44:e6:2a:f0:ef:81:ab:1c:81:66:50:d9:20:8f:75:
                    b8:92:2d:51:13:6a:e2:ed:1b:d6:e0:ea:09:3a:ab:
                    9f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4A:7C:9D:02:67:15:E7:87:9B:22:72:76:BD:42:CA:C3:85:27:6A
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38312e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:2c:ff:a4:9d:09:9c:84:9e:60:fc:ea:b5:df:a7:06:24:
         ea:2e:e0:fc:7e:6d:8c:b0:44:96:8d:16:57:c8:42:58:ce:fd:
         3b:84:f8:0a:42:25:43:97:dc:5b:c2:63:af:25:37:24:cd:2e:
         67:e0:16:4b:d3:ea:9a:f4:10:73:56:d5:41:90:b7:b6:12:f8:
         c5:72:cc:56:b5:af:04:76:64:6e:3f:cd:34:f2:41:0e:ba:7b:
         40:db:92:76:06:b3:a6:e6:c7:5d:39:08:35:bb:82:ea:75:bb:
         9b:18:2d:ec:fb:dd:0d:e5:30:2c:8d:6a:05:a3:43:19:89:d3:
         d0:ac:ab:80:d2:37:e9:14:14:70:ab:5c:9c:45:6d:73:8c:ef:
         bf:c2:e8:a7:8b:00:67:33:71:35:62:28:66:77:4e:89:02:ab:
         10:b1:0e:eb:bb:fa:a5:a1:76:b7:9d:3f:c7:65:56:a9:67:15:
         ac:7b:28:8e:8e:12:6e:2d:88:10:9f:4d:72:cc:9d:0f:5a:ae:
         33:02:1d:d7:83:b1:2d:e5:ea:50:e2:91:b2:79:ab:c2:37:7c:
         81:2e:bc:f6:09:15:d5:c7:7a:0e:56:af:e8:bc:86:73:0d:3d:
         c7:19:db:15:7b:a9:27:2a:46:82:75:2b:11:5e:db:4c:f2:09:
         f7:30:ed:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:48 2025 by rpki-client