Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
File:                     3139302e3136342e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          FM7T1o+b6EW3IZsVmIdIa5YtKLyigtuzRCALB3Pxiaw=
Subject key identifier:   36:91:1B:7D:3B:7C:32:61:BF:8B:FE:5D:1C:00:52:E1:5F:19:CD:D4
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       4754D38D2757B5BC2B550DD6B146DB9F44687416
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:19:18 +0000
ROA not before:           Tue 04 Feb 2025 18:14:18 +0000
ROA not after:            Tue 03 Feb 2026 18:19:18 +0000
asID:                     22047
IP address blocks:        190.164.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:54:d3:8d:27:57:b5:bc:2b:55:0d:d6:b1:46:db:9f:44:68:74:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:18 2025 GMT
            Not After : Feb  3 18:19:18 2026 GMT
        Subject: CN=36911B7D3B7C3261BF8BFE5D1C0052E15F19CDD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:1a:2f:02:3f:eb:45:b2:55:e7:cb:f8:b0:
                    07:27:67:15:39:bb:a8:d9:08:09:22:10:36:af:86:
                    13:2d:1b:f8:4d:ad:b3:59:00:e6:cb:bc:cb:b5:62:
                    ab:70:43:02:31:92:f9:ba:f8:66:f2:6a:02:f5:68:
                    52:d9:16:62:36:a4:9e:e4:e2:14:50:69:b9:04:0d:
                    5d:ec:ed:49:5b:4d:dd:40:e2:6c:50:5d:cf:f1:e4:
                    03:22:25:1a:97:f0:87:f2:cc:d5:c3:5d:4c:fa:ab:
                    f5:59:09:3a:5c:26:ee:db:73:12:a1:7e:35:03:69:
                    11:bf:a1:ca:7f:13:e9:e9:53:37:b0:62:34:64:8c:
                    e7:92:d9:c3:f1:29:5b:31:14:e3:d6:7a:57:46:6e:
                    af:98:e3:55:de:c5:71:48:7b:0b:6b:6b:b2:4d:5d:
                    03:ac:42:5f:ea:e8:e3:02:e4:ec:07:e8:d6:79:bf:
                    b5:21:eb:41:26:7a:5b:19:c7:60:57:53:fb:84:21:
                    87:07:1a:df:4d:12:42:d1:71:a0:81:88:d2:0b:1f:
                    61:a3:54:df:10:60:28:95:6c:f0:e5:ae:b6:69:dc:
                    5c:65:63:a8:6e:1f:57:03:03:22:9a:4a:de:c9:43:
                    fe:7e:f4:ed:c5:36:28:f0:f8:29:e8:53:90:d6:a9:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:1B:7D:3B:7C:32:61:BF:8B:FE:5D:1C:00:52:E1:5F:19:CD:D4
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d3:7b:e3:b2:a6:67:b1:bb:fa:84:31:b5:3d:70:f4:04:53:17:
         14:cb:fa:60:22:d3:ba:e4:7e:bf:cb:5c:d0:0e:f0:68:b3:ad:
         b0:33:57:d3:5b:ee:7d:03:d5:34:e9:33:ca:0f:a8:7f:d7:42:
         4a:85:81:da:c4:24:33:31:95:83:e6:a3:e6:ae:9c:71:d1:6d:
         61:81:74:81:a3:ab:55:e0:87:49:4f:97:6d:c1:59:f6:ad:c8:
         00:b1:8f:64:53:53:df:8b:1d:d7:d1:01:67:61:78:1a:65:97:
         a2:94:f6:0c:e9:90:fa:5c:58:d0:b9:1c:dc:b6:00:bb:e5:5e:
         8d:89:1c:47:cf:ae:fa:72:b6:e6:a7:7a:17:00:ae:e9:37:3c:
         0f:2d:3a:aa:aa:2f:9d:fb:b7:b9:73:af:fe:c1:9d:2e:44:68:
         03:82:a3:71:15:1c:b8:00:a4:be:09:a1:9e:49:ac:67:70:e4:
         52:70:92:04:7f:ac:03:60:56:7a:18:51:5b:b5:35:b6:8b:27:
         31:05:a0:ef:bd:c9:1f:9c:6d:ae:b4:05:1d:db:7e:f4:2c:ec:
         fc:36:72:6c:46:03:65:a0:f0:08:78:da:7e:5e:45:d6:ad:76:
         2b:17:c2:83:9d:b8:44:15:d2:4c:bd:b4:e9:d7:a5:bb:8b:af:
         23:e3:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:04 2025 by rpki-client