Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa
File:                     3139302e35372e3132382e302f31382d3234203d3e203232373234.roa (raw, json)
Hash identifier:          6wek/+sDq6a2CDdy3ZDSr0s39Z5D5cSBcFi2amyXscE=
Subject key identifier:   7A:35:25:39:CD:1D:6C:1A:E4:9B:18:15:2C:DB:6D:55:CF:F6:61:03
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       3F93A5547DA5F10913FAA5374EFC83CA90491A14
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:36 +0000
ROA not before:           Tue 04 Feb 2025 20:02:36 +0000
ROA not after:            Tue 03 Feb 2026 20:07:36 +0000
asID:                     22724
IP address blocks:        190.57.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:93:a5:54:7d:a5:f1:09:13:fa:a5:37:4e:fc:83:ca:90:49:1a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:36 2025 GMT
            Not After : Feb  3 20:07:36 2026 GMT
        Subject: CN=7A352539CD1D6C1AE49B18152CDB6D55CFF66103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:01:2a:cf:00:98:50:b2:59:9f:cd:7d:01:
                    a4:ef:06:0b:78:2c:8c:8c:34:35:ae:72:7a:45:4f:
                    c1:4d:4f:d9:e3:da:d4:47:3f:f1:f5:c5:50:b8:2d:
                    a6:ee:ba:94:78:0b:9a:be:4b:78:ee:34:f6:6d:d0:
                    ca:15:98:19:60:d3:6e:56:d1:4a:17:26:d6:84:25:
                    93:9f:00:94:3b:0b:bd:0e:5c:d4:32:76:f1:04:e2:
                    be:fb:7c:a3:d1:71:22:1c:c0:4e:cf:78:0f:75:7d:
                    bc:97:9a:de:a7:b8:fd:8a:1d:29:78:eb:c0:da:f2:
                    5d:2e:23:fa:54:e8:b8:5b:7c:c2:ef:b2:19:ef:13:
                    77:c5:f1:a1:a2:5d:76:52:f8:f3:2a:62:db:89:30:
                    b8:56:87:60:dc:1c:99:3f:ef:5c:e4:7a:44:40:a7:
                    f2:29:47:11:4a:ae:41:d6:e5:92:b6:20:69:e1:3c:
                    80:51:39:46:e3:ac:24:3b:35:1c:6f:84:ad:0a:ec:
                    e1:7b:fa:06:9f:fc:ab:ee:0a:57:0b:db:3b:dc:f1:
                    59:78:d5:3e:f0:74:32:fe:ef:35:86:7c:af:68:3f:
                    9f:12:11:ca:fd:03:38:b8:df:ec:09:6d:f9:0a:28:
                    74:29:dc:db:7a:a4:7b:62:ee:da:3d:b3:21:b2:2c:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:35:25:39:CD:1D:6C:1A:E4:9B:18:15:2C:DB:6D:55:CF:F6:61:03
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3132382e302f31382d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b8:fc:0c:bb:db:5b:c0:2a:71:11:28:79:94:96:9f:b3:bd:9d:
         81:8e:5d:2e:f1:f0:af:81:b5:83:54:9c:d6:bf:90:71:75:5e:
         33:6f:d1:92:9d:8d:da:84:9b:21:c9:64:91:1a:6d:b2:1a:ff:
         d5:91:27:65:70:09:8e:13:97:47:53:ca:27:35:6f:14:3f:c6:
         09:2d:df:bd:a4:af:e5:c3:76:67:51:b4:61:ed:22:20:97:8f:
         3f:a0:61:1a:9c:f8:5a:a9:1b:38:6a:bf:0e:e8:06:cc:ff:a6:
         cb:b3:93:9d:49:30:97:ba:b0:0c:e1:59:67:26:10:e6:0a:3e:
         b8:0b:58:2e:15:0d:15:20:81:be:43:99:ee:b5:85:17:d2:b0:
         02:e0:b8:7d:0b:4d:33:6e:1d:86:03:dd:0e:ce:5d:cf:2e:b2:
         97:54:46:1c:de:7f:25:f6:4c:0d:b7:e0:c3:c4:37:e5:b9:3d:
         da:93:f2:6a:46:28:1a:34:ab:e0:63:00:26:fd:70:43:28:9c:
         f5:77:e4:cc:68:bb:c2:f8:a2:ca:bd:51:e8:4b:f2:b3:ca:02:
         e4:dd:00:c9:3a:a2:c0:1a:e9:ee:aa:f7:bc:8b:d7:50:9f:cc:
         60:be:a6:a7:68:c0:5e:af:35:24:08:61:54:e8:c2:45:a5:f8:
         a8:91:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:06 2025 by rpki-client