Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa
File:                     3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa (raw, json)
Hash identifier:          M2CrE7KjwQyZE/MCfdMzE1X4M+wY0GeGxKJs7sCYQMs=
Subject key identifier:   4E:78:40:19:9B:A0:F8:3F:FA:59:81:AB:E6:44:E1:DA:56:6F:AB:EE
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       299F95CF9383601911C3BAE72A80E1A3EE449DC8
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa
Signing time:             Tue 04 Feb 2025 18:41:09 +0000
ROA not before:           Tue 04 Feb 2025 18:36:09 +0000
ROA not after:            Tue 03 Feb 2026 18:41:09 +0000
asID:                     262929
IP address blocks:        191.102.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9f:95:cf:93:83:60:19:11:c3:ba:e7:2a:80:e1:a3:ee:44:9d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Feb  4 18:36:09 2025 GMT
            Not After : Feb  3 18:41:09 2026 GMT
        Subject: CN=4E7840199BA0F83FFA5981ABE644E1DA566FABEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:97:22:85:87:f7:54:ed:83:80:5e:c6:fc:97:
                    69:eb:bd:7c:4f:5b:06:7d:aa:c6:1e:53:09:97:dd:
                    60:1b:44:8b:4e:fd:08:98:f4:18:90:15:a3:2f:41:
                    9d:67:55:ac:b3:38:1b:3a:22:fd:ca:b9:77:8a:6a:
                    66:f1:53:04:9e:99:42:94:54:ee:cb:a9:7c:3b:27:
                    4b:0b:42:b8:98:2b:04:af:fe:42:77:50:8f:0a:df:
                    2d:76:5b:25:ea:c1:1e:34:cc:b6:8d:75:51:de:e6:
                    77:06:eb:d5:da:96:bc:38:f7:e5:dc:d5:54:f8:5e:
                    78:ae:d0:52:32:de:87:b2:6c:bd:c6:b5:0d:c4:16:
                    52:86:48:b8:2c:1b:23:42:0f:3a:92:54:5d:78:12:
                    f4:b7:ed:15:2e:82:68:3b:91:3c:ea:d9:2b:8f:dd:
                    02:17:3b:58:4b:43:8d:bc:26:c6:e4:81:ec:33:95:
                    9c:70:75:d6:52:c5:bf:2b:43:ca:f3:bd:12:44:ba:
                    94:a5:91:f8:4b:ea:af:ba:e4:55:a8:bc:ce:01:f8:
                    29:49:83:87:5a:34:d3:f4:6f:f4:62:7d:60:aa:83:
                    3c:7c:5a:2a:48:18:f3:f9:72:e5:a0:cd:79:90:ff:
                    d7:25:c4:03:a1:44:1a:d0:0e:28:bc:db:fe:14:2b:
                    fb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:78:40:19:9B:A0:F8:3F:FA:59:81:AB:E6:44:E1:DA:56:6F:AB:EE
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36312e302f32342d3234203d3e20323632393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:73:2a:42:60:89:eb:24:5f:1c:43:f5:4d:27:af:83:e8:a1:
         03:a7:5a:6d:65:a8:58:54:c8:ac:c8:d2:57:0a:a4:dd:c5:9b:
         94:8f:1a:f0:af:70:59:f5:75:a3:5f:ec:0d:68:b5:71:f9:01:
         6e:f4:ef:bf:49:df:7e:5a:a3:0e:8c:4d:35:eb:28:61:8d:ab:
         30:b7:e6:8b:87:94:27:8e:0d:eb:94:9e:93:9c:52:cc:8e:ca:
         55:e5:2b:c6:69:7b:7d:13:f0:57:49:60:7c:d6:cc:f1:2e:fc:
         1e:5e:70:39:c9:fa:98:4e:e1:e0:5a:fd:b8:ff:3c:cb:0c:97:
         24:82:ad:16:52:90:75:e9:1a:49:b5:e1:e3:4b:c0:a8:c0:1e:
         c8:4a:67:ad:77:24:ae:91:cb:db:99:71:2f:a3:63:36:34:bd:
         b5:01:51:76:81:34:12:55:5b:66:50:97:2d:da:fe:ec:b7:f5:
         6f:60:ea:86:41:cc:80:a7:f9:5a:58:2b:1e:6d:05:82:56:21:
         18:20:1f:ce:22:fd:b2:6a:d4:6e:d5:70:fd:50:8e:cf:2f:f2:
         74:43:4e:77:ec:31:19:fc:91:b0:86:91:da:d3:68:31:b8:4e:
         54:0a:07:ed:d9:94:10:bf:e3:34:fd:8f:6a:e1:66:7e:99:e0:
         09:ed:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:50 2025 by rpki-client