Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e33322e302f31392d3234203d3e203232373234.roa
File:                     3139302e31322e33322e302f31392d3234203d3e203232373234.roa (raw, json)
Hash identifier:          j++8IQmkqck/c6MwP6eelfq5f64+SK97WW5xG1zcm1c=
Subject key identifier:   FE:11:91:8D:24:E9:CC:E2:2C:6B:9D:21:4A:1D:C3:72:D0:BB:CB:A8
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       39313597B56C92D65F2C9DC56EE30006E87C3C78
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e33322e302f31392d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:33 +0000
ROA not before:           Tue 04 Feb 2025 20:02:33 +0000
ROA not after:            Tue 03 Feb 2026 20:07:33 +0000
asID:                     22724
IP address blocks:        190.12.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:31:35:97:b5:6c:92:d6:5f:2c:9d:c5:6e:e3:00:06:e8:7c:3c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:33 2025 GMT
            Not After : Feb  3 20:07:33 2026 GMT
        Subject: CN=FE11918D24E9CCE22C6B9D214A1DC372D0BBCBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:1e:8b:3b:84:54:3e:35:98:b7:cb:67:2a:
                    56:e7:ea:68:7c:7b:7a:d5:57:4c:cd:c2:32:d9:1a:
                    0b:e4:d9:21:df:1e:b0:69:ee:47:b3:cc:e7:dd:cf:
                    71:10:15:46:89:c4:e4:5d:99:e4:c5:2e:b6:67:a0:
                    af:46:a6:5d:31:17:33:6c:df:a8:fa:d2:81:29:5c:
                    f2:d8:94:40:9b:09:05:7d:5e:ef:4b:db:9e:fd:f6:
                    19:80:65:de:4b:bd:68:de:61:28:d2:e6:c7:ed:3a:
                    37:04:76:23:6f:c8:39:38:b6:95:40:a2:af:25:61:
                    f5:fb:e5:d9:2d:5b:0a:ee:b0:70:d7:0f:c6:d3:d3:
                    2b:56:bc:34:c9:58:dd:f0:14:67:e6:f5:af:00:94:
                    41:ac:99:cf:b4:f0:78:c4:d0:39:87:41:46:dd:4a:
                    9c:fa:19:0b:50:1c:1d:ea:df:65:a8:89:4c:23:de:
                    55:3c:c3:5d:98:0b:2f:7d:f8:cc:d3:50:99:ee:f1:
                    58:5b:30:4d:6c:94:58:12:ea:25:6b:b4:6c:72:d3:
                    70:8a:be:eb:83:2f:48:17:8d:02:9c:dc:8a:3c:f7:
                    8b:b5:f4:fa:f9:2d:8c:c1:36:54:f8:91:56:69:a6:
                    0e:3e:93:18:b9:b1:bf:be:30:91:3a:8b:fc:f7:fc:
                    28:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:11:91:8D:24:E9:CC:E2:2C:6B:9D:21:4A:1D:C3:72:D0:BB:CB:A8
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e31322e33322e302f31392d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:a3:b4:c3:60:ee:06:c5:d0:4c:41:c2:1c:fb:43:3e:ff:fd:
         8a:cb:0f:d9:76:22:fb:dc:ce:c3:60:89:03:ef:0b:83:4e:05:
         07:38:d2:79:5b:fc:7b:af:7c:cd:e7:45:5a:96:5e:31:2c:d7:
         be:9c:cc:32:64:28:72:ac:f1:4e:ea:ea:f7:72:42:c4:89:07:
         6e:e5:53:ee:b0:51:c8:63:96:e0:45:75:fa:37:c5:ea:be:97:
         f3:44:ba:0a:03:17:91:e3:bd:b4:3f:bd:d7:18:01:d0:05:0c:
         93:b1:d6:d7:03:b1:d1:cf:d7:a6:b3:06:07:30:ff:05:4c:21:
         5e:10:b8:68:b4:f3:55:67:fc:29:7e:bf:a9:30:15:32:3f:d7:
         9e:24:69:02:25:4e:39:54:43:ec:17:97:7e:71:de:03:be:55:
         bb:e4:55:53:b0:2b:f8:be:e7:a6:34:0a:c2:42:41:fc:dd:36:
         02:5d:eb:eb:c0:bd:16:e9:89:6c:86:40:1e:9d:d3:22:a8:98:
         e3:56:e2:fd:f1:12:60:6a:6f:a4:69:61:83:b6:b6:24:09:cd:
         d8:d7:87:75:58:61:68:08:5b:a1:8b:c8:96:b4:6d:1c:b6:d7:
         78:6a:4e:1d:85:5d:0a:a3:8c:50:28:7f:a8:93:dd:e4:46:6c:
         fe:0d:24:96
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOTE1l7VsktZfLJ3FbuMABuh8PHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNTAyMDQyMDAyMzNaFw0yNjAyMDMyMDA3MzNaMDMxMTAvBgNV
BAMTKEZFMTE5MThEMjRFOUNDRTIyQzZCOUQyMTRBMURDMzcyRDBCQkNCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI3h6LO4RUPjWYt8tnKlbn6mh8
e3rVV0zNwjLZGgvk2SHfHrBp7kezzOfdz3EQFUaJxORdmeTFLrZnoK9Gpl0xFzNs
36j60oEpXPLYlECbCQV9Xu9L25799hmAZd5LvWjeYSjS5sftOjcEdiNvyDk4tpVA
oq8lYfX75dktWwrusHDXD8bT0ytWvDTJWN3wFGfm9a8AlEGsmc+08HjE0DmHQUbd
Spz6GQtQHB3q32WoiUwj3lU8w12YCy99+MzTUJnu8VhbME1slFgS6iVrtGxy03CK
vuuDL0gXjQKc3Io894u19Pr5LYzBNlT4kVZppg4+kxi5sb++MJE6i/z3/Cg3AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/hGRjSTpzOIsa50hSh3DctC7y6gwHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMxMzkzMDJlMzEzMjJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzIzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+DCAwDQYJ
KoZIhvcNAQELBQADggEBACWjtMNg7gbF0ExBwhz7Qz7//YrLD9l2IvvczsNgiQPv
C4NOBQc40nlb/HuvfM3nRVqWXjEs176czDJkKHKs8U7q6vdyQsSJB27lU+6wUchj
luBFdfo3xeq+l/NEugoDF5HjvbQ/vdcYAdAFDJOx1tcDsdHP16azBgcw/wVMIV4Q
uGi081Vn/Cl+v6kwFTI/154kaQIlTjlUQ+wXl35x3gO+VbvkVVOwK/i+56Y0CsJC
QfzdNgJd6+vAvRbpiWyGQB6d0yKomONW4v3xEmBqb6RpYYO2tiQJzdjXh3VYYWgI
W6GLyJa0bRy213hqTh2FXQqjjFAof6iT3eRGbP4NJJY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 22:41:29 2025 by rpki-client