Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa
File:                     3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa (raw, json)
Hash identifier:          JaE+oS/0Tah0k4cysQ78v+rclRPTlMWywK0+TGBG8OQ=
Subject key identifier:   86:DC:B6:D8:31:7D:F0:41:EF:A2:9D:FA:FB:5C:6C:F7:79:5A:0A:9C
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       2F367C6C8D9070BA9CCE2A9D31CA869C755BE247
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:03 +0000
ROA not before:           Tue 04 Feb 2025 19:54:03 +0000
ROA not after:            Tue 03 Feb 2026 19:59:03 +0000
asID:                     28075
IP address blocks:        190.113.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:36:7c:6c:8d:90:70:ba:9c:ce:2a:9d:31:ca:86:9c:75:5b:e2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:03 2025 GMT
            Not After : Feb  3 19:59:03 2026 GMT
        Subject: CN=86DCB6D8317DF041EFA29DFAFB5C6CF7795A0A9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:a6:01:2b:53:ac:56:e9:da:2e:e4:97:3b:
                    8d:89:fd:bd:e7:44:4c:b2:22:c0:85:5a:82:07:74:
                    1b:e3:29:7b:c6:ab:1b:7b:bd:2f:7e:3a:c7:c4:6a:
                    f5:65:bd:13:7d:52:7f:72:f0:5b:ab:58:84:62:ef:
                    f2:d0:33:53:33:5b:9a:7e:02:e2:7a:3c:fa:d2:4e:
                    01:9b:b9:b9:0a:9a:c5:92:f3:d9:bd:86:b1:80:01:
                    21:68:b1:0d:c3:f4:39:ae:5a:f9:84:86:e4:e1:b7:
                    6c:53:7f:c4:5b:d9:c4:78:19:4d:ff:f5:2d:f8:54:
                    ac:a8:c8:4d:9f:c0:51:39:68:e6:a7:b7:a0:34:d4:
                    59:ec:f7:37:2a:2e:2d:2d:e6:fd:3d:25:da:c3:34:
                    58:95:24:1b:3c:c1:cc:f9:ee:40:17:c4:ed:32:11:
                    75:10:d9:ef:0e:f9:eb:ea:10:dd:3a:67:ab:48:c2:
                    c8:81:61:f4:dd:3e:a5:a1:6a:90:a2:d6:2d:82:9e:
                    f7:5d:d0:f6:bd:2b:41:1c:28:64:78:d6:cd:b5:e1:
                    7b:20:b8:01:dd:63:eb:a6:fe:f7:af:69:14:99:96:
                    fa:51:ed:e8:39:da:de:07:57:d0:ba:d9:97:34:9f:
                    cc:4e:04:e5:2f:55:d0:58:1d:bb:c1:7f:cb:07:28:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DC:B6:D8:31:7D:F0:41:EF:A2:9D:FA:FB:5C:6C:F7:79:5A:0A:9C
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3139302e3131332e3132382e302f31382d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:43:e1:5e:3a:ee:56:5f:51:5a:70:59:64:01:7d:0b:7b:2c:
         b5:b6:ab:0b:27:29:89:43:2c:d9:ad:49:05:53:92:1f:bc:84:
         41:1e:d8:5c:33:4e:14:c5:3d:9e:97:c2:ae:83:88:13:3f:e5:
         52:12:29:d0:a4:2b:36:05:4a:5b:c4:77:74:c1:97:c7:c1:f8:
         1c:9f:0f:2b:91:7f:52:35:d0:ac:73:66:31:2c:db:e8:b8:ed:
         fa:59:27:b6:93:6f:a8:a0:08:97:1b:3b:b1:13:8d:77:07:18:
         9d:43:2f:78:91:fc:51:86:ba:40:ec:2e:ab:62:32:27:59:9b:
         dd:28:fe:c6:89:d4:40:41:5f:7c:08:5a:63:ba:ba:bc:52:fb:
         1c:94:be:1b:33:ed:fb:d4:23:72:1f:53:e0:ac:1a:b6:5d:70:
         1a:91:c6:a7:ea:3e:ee:58:63:37:31:d6:cf:be:30:fc:b4:7c:
         14:93:a5:14:79:16:0e:0f:f0:2c:33:b9:42:f4:bc:6a:44:5c:
         87:d9:97:9b:d0:1b:fc:ea:fb:1b:43:6d:37:69:81:dd:c0:af:
         26:a6:2b:03:7b:5d:83:4b:77:d5:83:b5:79:f3:23:c5:19:ba:
         fc:db:7f:22:cf:d2:71:43:b5:5e:76:1c:c5:5a:bd:b7:65:21:
         a7:4a:72:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:47:01 2025 by rpki-client