Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3133362e302f32342d3234203d3e203238303036.roa
File:                     3139302e35372e3133362e302f32342d3234203d3e203238303036.roa (raw, json)
Hash identifier:          erpwQmmuoOz6NEfSxxEGwLIEM1x7xOhfOENbZBdZh5c=
Subject key identifier:   10:FC:B6:64:E7:F3:59:42:4A:62:71:86:34:68:16:95:94:DC:70:6E
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       4BAA460B7AA32B1B218DE0541D3735BEE9D19777
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3133362e302f32342d3234203d3e203238303036.roa
Signing time:             Tue 04 Feb 2025 20:07:35 +0000
ROA not before:           Tue 04 Feb 2025 20:02:35 +0000
ROA not after:            Tue 03 Feb 2026 20:07:35 +0000
asID:                     28006
IP address blocks:        190.57.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:aa:46:0b:7a:a3:2b:1b:21:8d:e0:54:1d:37:35:be:e9:d1:97:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:35 2025 GMT
            Not After : Feb  3 20:07:35 2026 GMT
        Subject: CN=10FCB664E7F359424A6271863468169594DC706E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:09:34:fb:bc:e8:83:13:7f:31:e9:88:3d:4e:
                    99:69:f4:27:8b:e5:8a:e2:91:45:03:58:14:6e:e0:
                    86:75:98:46:9e:cb:f3:5f:c8:49:ee:50:85:30:75:
                    4c:b3:43:5c:33:7d:75:fd:4f:84:8c:4c:f1:34:73:
                    e3:02:0a:85:ab:24:40:36:87:b4:23:25:bd:3a:f3:
                    97:fe:78:03:fe:34:0e:47:b4:ff:03:67:7c:35:eb:
                    86:9b:34:d6:2a:54:0a:f3:7c:c8:94:08:b1:23:bd:
                    5d:fc:04:c0:b4:6f:e2:c0:fb:55:09:70:ba:56:2d:
                    07:40:35:de:51:1c:65:66:f0:b3:e2:40:88:8b:80:
                    ed:32:6b:ee:1a:93:73:52:ad:3e:68:41:d4:31:73:
                    af:6b:6b:66:ab:65:ae:ab:06:aa:8c:1f:8c:43:19:
                    68:83:03:01:16:ee:08:44:cb:1a:07:f5:b8:d0:2f:
                    ab:d0:ad:65:07:97:99:c5:6d:5f:0e:48:c7:b4:35:
                    70:8b:7c:64:b1:eb:29:b1:d1:43:93:da:29:82:b3:
                    95:79:f2:fe:66:18:ae:4b:05:f7:16:03:7c:b8:1f:
                    53:54:d0:6a:0e:ae:74:a9:22:69:31:8e:84:5f:54:
                    5e:89:3d:44:ff:3e:98:5d:88:9a:a6:e7:6a:98:b3:
                    9c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FC:B6:64:E7:F3:59:42:4A:62:71:86:34:68:16:95:94:DC:70:6E
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e35372e3133362e302f32342d3234203d3e203238303036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:af:12:a0:5c:72:6d:59:82:a1:8b:80:ce:92:21:11:5f:c1:
         66:ee:4c:79:62:44:55:9b:a8:8a:ac:c0:16:92:17:c7:f4:3a:
         3e:9a:db:f5:40:ee:72:52:b6:3d:1e:93:db:36:bb:80:48:12:
         8e:7c:79:b5:ce:2d:81:a7:f7:36:91:da:b3:73:56:da:7d:a3:
         c3:c3:43:6c:c6:89:4b:a7:78:ee:f8:2e:02:cc:da:98:9e:c7:
         42:5c:58:26:7c:7c:42:b8:7d:ae:dd:5f:e9:2d:82:f1:7f:91:
         8b:83:48:60:09:af:f9:ad:01:5f:6c:21:02:48:31:93:b0:3c:
         4f:e2:bf:99:f9:86:d4:eb:49:09:b4:34:2e:7c:07:f9:29:7c:
         68:f8:08:02:8f:c0:55:18:0a:44:5d:25:41:d5:1f:04:dc:52:
         46:d8:5a:00:77:ca:a0:7e:3d:5c:da:48:8e:28:e5:3d:dd:55:
         96:25:ca:d3:d7:0a:2f:58:66:9d:b3:21:3d:8e:af:90:41:1b:
         1c:83:c0:77:98:2f:3a:e3:58:1c:a1:21:67:3d:33:66:e4:bd:
         82:ed:e7:a4:7f:4f:99:fb:8d:78:6e:a7:64:6f:7d:eb:1d:dc:
         9c:46:58:2e:53:55:29:e0:2f:b0:9f:22:08:20:d6:c6:d1:81:
         50:b7:51:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUS6pGC3qjKxshjeBUHTc1vunRl3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUYzQzVENjE0NjY1MUVDREI5ODVCRkE5REI4MjQ3NDRF
RDQ0OTk0MjAeFw0yNTAyMDQyMDAyMzVaFw0yNjAyMDMyMDA3MzVaMDMxMTAvBgNV
BAMTKDEwRkNCNjY0RTdGMzU5NDI0QTYyNzE4NjM0NjgxNjk1OTREQzcwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDCTT7vOiDE38x6Yg9Tplp9CeL
5YrikUUDWBRu4IZ1mEaey/NfyEnuUIUwdUyzQ1wzfXX9T4SMTPE0c+MCCoWrJEA2
h7QjJb0685f+eAP+NA5HtP8DZ3w164abNNYqVArzfMiUCLEjvV38BMC0b+LA+1UJ
cLpWLQdANd5RHGVm8LPiQIiLgO0ya+4ak3NSrT5oQdQxc69ra2arZa6rBqqMH4xD
GWiDAwEW7ghEyxoH9bjQL6vQrWUHl5nFbV8OSMe0NXCLfGSx6ymx0UOT2imCs5V5
8v5mGK5LBfcWA3y4H1NU0GoOrnSpImkxjoRfVF6JPUT/PphdiJqm52qYs5xrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUEPy2ZOfzWUJKYnGGNGgWlZTccG4wHwYDVR0j
BBgwFoAU7zxdYUZlHs25hb+p24JHRO1EmUIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QUNBNjE0MEVENzc4MDRBMDRDRjNGOTIzM0JFQTVFMzQ5
NDI3MDE3MUIyRjY5QUNDRkQxN0ExN0I4OUVFRTI2LzAvRUYzQzVENjE0NjY1MUVD
REI5ODVCRkE5REI4MjQ3NDRFRDQ0OTk0Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FRjNDNUQ2MTQ2NjUxRUNEQjk4
NUJGQTlEQjgyNDc0NEVENDQ5OTQyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0FDQTYxNDBFRDc3ODA0QTA0Q0YzRjkyMzNCRUE1RTM0OTQyNzAxNzFC
MkY2OUFDQ0ZEMTdBMTdCODlFRUUyNi8wLzMxMzkzMDJlMzUzNzJlMzEzMzM2MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzAzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45iDAN
BgkqhkiG9w0BAQsFAAOCAQEAp68SoFxybVmCoYuAzpIhEV/BZu5MeWJEVZuoiqzA
FpIXx/Q6Pprb9UDuclK2PR6T2za7gEgSjnx5tc4tgaf3NpHas3NW2n2jw8NDbMaJ
S6d47vguAszamJ7HQlxYJnx8Qrh9rt1f6S2C8X+Ri4NIYAmv+a0BX2whAkgxk7A8
T+K/mfmG1OtJCbQ0LnwH+Sl8aPgIAo/AVRgKRF0lQdUfBNxSRthaAHfKoH49XNpI
jijlPd1VliXK09cKL1hmnbMhPY6vkEEbHIPAd5gvOuNYHKEhZz0zZuS9gu3npH9P
mfuNeG6nZG996x3cnEZYLlNVKeAvsJ8iCCDWxtGBULdR0A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client