Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa
File:                     3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa (raw, json)
Hash identifier:          WotqFc2JAGqwZ5RO1ZwwqN8vZWEyJFs6K/c8/G9zVFo=
Subject key identifier:   83:5E:94:61:4C:6D:FD:6C:3D:F2:E1:88:2B:E8:A5:9A:5B:BA:05:C2
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4A04E2C939CBFF7195AED7BE041489C51CDF0EF5
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa
Signing time:             Tue 07 Jan 2025 17:35:00 +0000
ROA not before:           Tue 07 Jan 2025 17:30:00 +0000
ROA not after:            Tue 06 Jan 2026 17:35:00 +0000
asID:                     22927
IP address blocks:        190.197.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:04:e2:c9:39:cb:ff:71:95:ae:d7:be:04:14:89:c5:1c:df:0e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  7 17:30:00 2025 GMT
            Not After : Jan  6 17:35:00 2026 GMT
        Subject: CN=835E94614C6DFD6C3DF2E1882BE8A59A5BBA05C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:73:8a:08:83:d7:74:67:08:47:a1:58:4f:
                    d3:63:04:71:d4:e5:cc:ed:67:42:5f:d8:0e:07:71:
                    c4:a2:f0:4c:f3:8a:9f:24:eb:20:f3:50:a1:f5:37:
                    f3:f4:3c:3d:d4:d4:a5:76:d3:e6:e7:7c:b4:89:60:
                    88:1c:ac:20:87:fe:12:bd:41:42:86:9c:33:4b:f9:
                    41:f1:a6:09:14:89:99:3f:66:86:e6:86:37:aa:6c:
                    89:f0:b2:4a:e1:16:e6:34:a5:6b:93:bb:2d:89:fe:
                    7c:a2:7f:df:db:03:4e:7e:e2:e1:67:a8:ad:e0:3c:
                    3b:30:92:9b:af:65:5b:bf:3a:da:e7:43:f6:4f:96:
                    4a:5c:5e:0a:e7:47:50:c6:39:34:8a:35:a3:84:53:
                    28:98:39:05:09:f3:a8:b1:99:d2:86:58:dd:24:ea:
                    90:6a:bd:df:b9:7b:87:01:17:2a:31:87:bf:cb:ab:
                    e2:6b:cf:f0:36:76:2e:22:8f:97:21:6d:4c:41:c0:
                    01:c6:cc:33:b9:82:74:53:3f:de:e7:83:84:44:ee:
                    70:f3:e0:c1:f4:0f:69:59:01:b2:59:5e:b3:a1:a9:
                    75:d8:e7:53:60:32:3f:57:a6:d6:43:a0:56:dd:b5:
                    8b:6b:cc:e4:6f:15:b1:b6:56:e9:78:0b:01:76:0d:
                    80:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5E:94:61:4C:6D:FD:6C:3D:F2:E1:88:2B:E8:A5:9A:5B:BA:05:C2
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:37:bf:1a:e2:91:b8:26:f0:30:59:2a:61:13:f2:0d:ed:
         03:40:c7:39:21:59:21:61:24:95:dd:ce:5f:30:ba:d6:a5:8c:
         ce:6f:5f:c7:a5:95:c9:7c:82:7c:dd:36:af:90:09:73:c3:56:
         59:a8:de:ff:17:98:df:b6:49:f6:f5:3d:e0:fe:15:bd:47:31:
         9b:bd:09:2e:fd:f8:43:9b:7b:d2:da:2b:00:27:61:53:c2:cc:
         c5:6f:20:45:c0:65:b9:f9:e7:a4:14:c9:ee:a4:6f:87:58:6d:
         7b:c3:0a:d6:ed:c4:52:48:ef:2c:8b:72:48:a7:7d:bc:23:0b:
         4a:c1:35:f1:c9:52:64:43:0e:03:31:3c:80:1b:73:01:64:12:
         45:88:71:13:03:ff:f0:53:55:0e:79:e2:49:8d:8c:32:dd:4e:
         15:5d:51:86:53:f0:2c:6c:73:10:5b:28:a2:bf:67:ac:c5:76:
         9c:77:4f:9d:0d:f4:78:07:60:fb:d0:d5:49:05:3c:95:6c:3c:
         e8:ef:01:65:6b:70:27:95:93:82:0c:a4:d6:e9:58:ab:c9:4e:
         9f:ac:c1:34:e1:a1:2f:f0:fe:e6:31:43:3d:23:c4:ee:05:f8:
         c4:fe:b0:7d:dd:d6:30:68:84:52:f1:11:e2:3a:74:d6:59:89:
         db:a1:c4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:13 2025 by rpki-client