Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34382e302f32312d3234203d3e203232373234.roa
File:                     3139302e3131302e34382e302f32312d3234203d3e203232373234.roa (raw, json)
Hash identifier:          CVJ/THtS2AUfZvyqcnh6stBEg1+Ln4j5D/Es05h2KzY=
Subject key identifier:   11:65:50:1A:FB:A0:3B:B9:1C:20:64:BB:DC:3A:31:14:AA:24:86:62
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       54317B3D810A96BD11DD5089505435531E8BE594
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34382e302f32312d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:34 +0000
ROA not before:           Tue 04 Feb 2025 20:02:34 +0000
ROA not after:            Tue 03 Feb 2026 20:07:34 +0000
asID:                     22724
IP address blocks:        190.110.48.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:31:7b:3d:81:0a:96:bd:11:dd:50:89:50:54:35:53:1e:8b:e5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:34 2025 GMT
            Not After : Feb  3 20:07:34 2026 GMT
        Subject: CN=1165501AFBA03BB91C2064BBDC3A3114AA248662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:42:50:af:58:f6:ec:a2:05:02:79:41:8c:
                    1c:41:58:1c:8d:d5:b7:7d:70:a9:ef:7b:02:1e:a8:
                    1b:b1:ea:12:7d:f7:d1:7e:83:c6:60:4f:43:87:d5:
                    4d:95:de:b7:5b:b5:33:33:31:9b:64:06:40:7a:1d:
                    e6:16:5d:bc:f6:6c:cf:14:36:94:d7:68:75:f4:fc:
                    43:49:1f:05:47:2c:d7:e8:aa:51:8a:25:81:00:bc:
                    39:fe:51:23:51:63:80:29:3d:3c:d2:41:94:2a:85:
                    e1:92:d0:1d:e8:be:be:37:8c:cc:f1:34:74:32:07:
                    7c:8c:fe:23:af:c8:c4:00:4f:be:1f:f2:2a:a2:a9:
                    7b:dc:55:78:4b:ae:d6:28:a4:9b:d2:99:f1:e9:e2:
                    74:c4:b0:8a:43:52:87:ca:88:41:0f:3b:5b:54:0e:
                    65:f0:92:48:86:59:7a:ca:59:64:18:2b:52:01:93:
                    3e:01:f9:c2:36:fa:e3:50:a6:c8:db:60:b8:ba:a7:
                    d2:d5:5f:89:1b:da:ca:ba:4c:3f:a2:fc:8b:a7:cb:
                    fb:5b:32:9f:73:8a:a7:2f:f7:b4:11:10:5b:83:7c:
                    fe:dd:92:7b:68:04:bb:e2:9c:61:4e:67:82:dc:b9:
                    be:c5:46:83:c8:98:fa:fc:65:f9:14:82:e9:37:61:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:50:1A:FB:A0:3B:B9:1C:20:64:BB:DC:3A:31:14:AA:24:86:62
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e34382e302f32312d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         94:52:42:a6:7c:08:ad:3a:01:b3:44:46:34:dc:8b:60:d6:88:
         3d:54:79:e8:94:74:9a:7a:3f:5f:ba:f1:b4:b9:ec:92:d9:96:
         98:4c:d5:28:28:31:cc:1c:1c:7f:39:ab:5e:af:99:e7:73:92:
         bb:5f:94:5c:19:31:28:4d:eb:12:f7:ab:1e:e6:7d:91:88:c7:
         8a:d9:08:6a:88:0a:6d:5e:87:74:dc:55:ad:d4:ff:c4:ea:2b:
         71:1d:00:a6:b7:4b:86:24:b7:5a:5f:77:13:cd:92:dd:5c:1a:
         41:e8:34:e5:53:8b:96:d8:fe:7f:8d:4d:ba:e1:30:8b:42:f9:
         e6:a2:48:b9:e6:5c:fb:47:aa:11:cf:cd:1a:f7:1b:c0:2c:e3:
         b4:b2:ad:4a:2c:35:67:7b:66:43:31:a1:5c:e0:f0:af:4a:47:
         70:a2:ce:f1:00:06:c7:3b:8d:f4:30:bb:1a:ea:9f:a8:20:f2:
         fb:4d:18:a5:17:c4:78:7c:1d:54:fd:f6:b2:8e:11:9d:9b:75:
         89:65:a3:5a:3b:83:d7:76:20:2c:ed:1b:7f:76:c9:15:8e:9b:
         e3:7a:57:27:ac:e9:24:bd:9f:03:d4:84:c2:5a:87:68:0c:8b:
         5f:22:b4:90:d3:8f:a1:47:a3:7b:67:93:41:c7:42:c2:b7:61:
         1e:06:1d:e2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVDF7PYEKlr0R3VCJUFQ1Ux6L5ZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNTAyMDQyMDAyMzRaFw0yNjAyMDMyMDA3MzRaMDMxMTAvBgNV
BAMTKDExNjU1MDFBRkJBMDNCQjkxQzIwNjRCQkRDM0EzMTE0QUEyNDg2NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSC0JQr1j27KIFAnlBjBxBWByN
1bd9cKnvewIeqBux6hJ999F+g8ZgT0OH1U2V3rdbtTMzMZtkBkB6HeYWXbz2bM8U
NpTXaHX0/ENJHwVHLNfoqlGKJYEAvDn+USNRY4ApPTzSQZQqheGS0B3ovr43jMzx
NHQyB3yM/iOvyMQAT74f8iqiqXvcVXhLrtYopJvSmfHp4nTEsIpDUofKiEEPO1tU
DmXwkkiGWXrKWWQYK1IBkz4B+cI2+uNQpsjbYLi6p9LVX4kb2sq6TD+i/Iuny/tb
Mp9ziqcv97QREFuDfP7dkntoBLvinGFOZ4Lcub7FRoPImPr8ZfkUguk3YSaTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEWVQGvugO7kcIGS73DoxFKokhmIwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMxMzkzMDJlMzEzMTMwMmUzNDM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzMjM3MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA75uMDAN
BgkqhkiG9w0BAQsFAAOCAQEAlFJCpnwIrToBs0RGNNyLYNaIPVR56JR0mno/X7rx
tLnsktmWmEzVKCgxzBwcfzmrXq+Z53OSu1+UXBkxKE3rEverHuZ9kYjHitkIaogK
bV6HdNxVrdT/xOorcR0AprdLhiS3Wl93E82S3VwaQeg05VOLltj+f41NuuEwi0L5
5qJIueZc+0eqEc/NGvcbwCzjtLKtSiw1Z3tmQzGhXODwr0pHcKLO8QAGxzuN9DC7
GuqfqCDy+00YpRfEeHwdVP32so4RnZt1iWWjWjuD13YgLO0bf3bJFY6b43pXJ6zp
JL2fA9SEwlqHaAyLXyK0kNOPoUeje2eTQcdCwrdhHgYd4g==
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:46:08 2025 by rpki-client