Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e36382e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          cQQhB/0xgL5blzdyHU/P14FnIFdkxfGX89f4FgvIi08=
Subject key identifier:   08:3F:B6:0F:20:D6:D7:8D:94:C4:A6:7A:EC:95:E4:32:C3:AD:2C:E4
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       639E96E86B8BC3D4D451EBE3E61E5A9BB59A06BC
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:31 +0000
ROA not before:           Tue 04 Feb 2025 18:11:31 +0000
ROA not after:            Tue 03 Feb 2026 18:16:31 +0000
asID:                     52328
IP address blocks:        190.211.68.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9e:96:e8:6b:8b:c3:d4:d4:51:eb:e3:e6:1e:5a:9b:b5:9a:06:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:31 2025 GMT
            Not After : Feb  3 18:16:31 2026 GMT
        Subject: CN=083FB60F20D6D78D94C4A67AEC95E432C3AD2CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5a:c6:48:4f:54:35:9c:08:1e:e6:7b:72:cb:
                    56:e4:3e:8f:20:49:54:94:63:71:b6:6f:13:8f:96:
                    6b:c5:74:0b:0d:38:12:9d:8a:64:b7:83:64:8e:34:
                    39:82:f4:5e:07:65:ef:42:69:b7:ab:c9:75:a1:57:
                    5c:c5:11:12:8c:c7:7d:f1:44:60:00:6e:81:70:ba:
                    d2:1f:4e:92:54:9c:29:dd:b2:96:65:0f:70:a1:2e:
                    32:14:a8:ce:26:50:14:70:d8:3d:a5:a7:e0:57:67:
                    28:c2:1a:c2:bf:a2:85:b3:f5:8f:2f:fc:b2:94:3c:
                    63:dc:39:fd:a8:58:03:12:d6:01:e4:81:a0:40:ae:
                    ee:07:4b:93:a3:3a:b3:2c:dc:5e:b9:fe:b1:80:ff:
                    ec:36:46:67:82:a0:67:d6:36:e4:f5:a8:ce:e8:5e:
                    32:de:ba:e0:35:92:1a:94:07:25:07:25:e1:e7:1a:
                    b6:45:de:d3:d1:04:0f:d6:77:6d:7d:05:e7:18:6b:
                    47:5c:00:84:4d:1e:df:a6:fb:68:55:5f:1f:c8:46:
                    68:0c:cb:a0:94:33:65:a1:d6:4d:13:fd:47:23:4e:
                    f2:37:de:db:f7:f4:f4:6d:5f:51:28:d1:39:88:4d:
                    de:9c:2c:78:ea:54:4c:e4:60:94:f1:71:c4:a7:2f:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3F:B6:0F:20:D6:D7:8D:94:C4:A6:7A:EC:95:E4:32:C3:AD:2C:E4
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e36382e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:af:d8:88:3a:5d:6b:7b:37:a1:de:80:4d:8b:53:08:30:
         ad:31:c3:7e:6e:43:49:1f:42:88:61:51:f1:d1:48:04:8e:5c:
         08:30:0f:b2:73:e3:07:34:c7:39:d0:0b:e5:3e:15:55:18:93:
         f0:22:66:3a:1a:f3:5f:10:2a:1a:d9:0f:67:9d:04:38:36:3e:
         3a:13:fd:ee:45:c4:ef:d8:88:94:f9:d0:4f:a0:76:d3:c0:86:
         ca:cc:d5:3f:7c:72:bb:5e:8a:a4:ab:04:50:b8:89:f0:63:a0:
         7d:99:65:29:ed:fa:5b:fd:7f:e3:6c:2a:48:5d:8d:8d:78:b9:
         e5:5b:2f:7e:36:c7:84:58:c0:ee:7b:db:ab:cd:80:30:f0:4e:
         52:7e:3d:0e:20:b8:f1:f8:c1:ca:f2:00:62:2d:3d:bc:89:4f:
         cc:84:9b:77:1d:b0:f1:1c:25:3e:2d:4c:22:36:1e:a3:60:d6:
         32:8b:2f:e3:8c:68:68:a8:49:df:cd:16:36:f4:55:a4:24:50:
         ea:e5:38:fd:f4:85:73:a9:7a:81:05:12:f7:e0:91:49:11:b9:
         94:54:dc:9c:af:be:77:42:c0:fc:91:8c:b8:da:eb:1b:5f:ab:
         17:0f:31:40:9f:6f:88:a3:76:b8:f3:45:6c:5f:3e:8a:cb:83:
         0f:23:33:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:20 2025 by rpki-client