Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9918127CB3B8AC58492C2D63DF21BAE25031701F8EBF86B88696C901C8D88507/0/3139322e3138382e35322e302f32342d3234203d3e203631343638.roa
File:                     3139322e3138382e35322e302f32342d3234203d3e203631343638.roa (raw, json)
Hash identifier:          IqM2neaSVcTEdVtbIAJxi2x33UGsu2FKR0DgJl9JfHU=
Subject key identifier:   1B:4D:48:99:5C:EF:79:92:49:D0:43:EA:88:F6:2B:FC:FC:E1:92:15
Certificate issuer:       /CN=49DDBE379A1148B96E8423502B94B4DA48404FC9
Certificate serial:       3C9B3D1928BA4064AADF89DD989726D2B1D3AA03
Authority key identifier: 49:DD:BE:37:9A:11:48:B9:6E:84:23:50:2B:94:B4:DA:48:40:4F:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49DDBE379A1148B96E8423502B94B4DA48404FC9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9918127CB3B8AC58492C2D63DF21BAE25031701F8EBF86B88696C901C8D88507/0/3139322e3138382e35322e302f32342d3234203d3e203631343638.roa
Signing time:             Tue 04 Feb 2025 20:08:50 +0000
ROA not before:           Tue 04 Feb 2025 20:03:50 +0000
ROA not after:            Tue 03 Feb 2026 20:08:50 +0000
asID:                     61468
IP address blocks:        192.188.52.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9b:3d:19:28:ba:40:64:aa:df:89:dd:98:97:26:d2:b1:d3:aa:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49DDBE379A1148B96E8423502B94B4DA48404FC9
        Validity
            Not Before: Feb  4 20:03:50 2025 GMT
            Not After : Feb  3 20:08:50 2026 GMT
        Subject: CN=1B4D48995CEF799249D043EA88F62BFCFCE19215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:3d:df:d5:38:17:b3:82:58:9e:36:ae:8d:
                    a1:51:ea:ce:86:9c:65:47:fe:7f:ae:c5:c0:02:4e:
                    ef:91:bd:97:48:97:1f:57:ba:c5:87:87:a9:57:b3:
                    29:47:25:bb:f3:fc:41:0b:ad:10:ba:7f:cb:76:3a:
                    fc:0c:d4:f4:14:44:ca:90:fc:a4:76:d5:6b:df:89:
                    f6:c4:b3:a8:cc:9e:41:84:70:42:1b:39:e4:d3:65:
                    c8:41:aa:13:55:8f:89:25:46:0c:66:5e:f6:b0:8d:
                    02:60:81:ac:4d:de:1a:1b:cd:c3:88:0c:0d:aa:2e:
                    57:c6:fc:86:6e:bb:b4:90:b0:9e:e5:30:79:0b:39:
                    24:d9:53:dd:c0:46:71:58:8b:cc:fc:9d:5f:d9:82:
                    43:ba:9e:99:eb:4e:db:80:96:f4:d0:95:38:18:7b:
                    c1:6c:e3:dc:b2:ad:33:d7:3b:d9:7c:32:66:2e:24:
                    8c:32:d1:01:4f:b2:1a:a6:04:fa:83:ba:dd:31:32:
                    a6:57:77:5f:c3:c5:a4:b9:0b:51:8e:2f:3c:dd:59:
                    07:03:60:a1:bd:55:d9:b7:42:57:f3:55:4b:b8:18:
                    6e:9a:67:67:98:27:68:0e:c7:44:18:db:64:9c:72:
                    d8:ff:82:0e:8a:91:3a:41:00:d6:16:08:83:bb:bf:
                    c1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4D:48:99:5C:EF:79:92:49:D0:43:EA:88:F6:2B:FC:FC:E1:92:15
            X509v3 Authority Key Identifier:
                keyid:49:DD:BE:37:9A:11:48:B9:6E:84:23:50:2B:94:B4:DA:48:40:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9918127CB3B8AC58492C2D63DF21BAE25031701F8EBF86B88696C901C8D88507/0/49DDBE379A1148B96E8423502B94B4DA48404FC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/49DDBE379A1148B96E8423502B94B4DA48404FC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9918127CB3B8AC58492C2D63DF21BAE25031701F8EBF86B88696C901C8D88507/0/3139322e3138382e35322e302f32342d3234203d3e203631343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:56:fb:57:53:fb:35:bf:ab:60:95:e9:cd:b9:0d:b1:14:c8:
         8e:67:90:e9:a2:ac:88:66:46:95:54:02:10:22:11:8c:2a:40:
         10:ed:1e:df:30:e0:94:14:37:3c:92:06:11:24:a9:c5:f3:e7:
         99:bd:c1:5a:1e:04:0f:b8:9a:ad:e6:b6:22:22:27:cb:f3:ab:
         57:45:be:b0:8f:4a:e8:b4:5a:46:a9:78:e3:74:f5:f0:55:5d:
         b6:c0:d7:77:6b:dc:35:cc:07:21:5b:d9:4b:a6:39:f3:ae:87:
         bc:42:24:53:26:9b:7b:6c:51:22:e0:45:6d:23:3b:b8:34:e4:
         47:c7:e4:d3:b6:31:40:e1:34:35:22:5d:38:3b:14:72:fa:54:
         31:15:4d:da:d5:a8:76:37:99:7e:bb:bd:34:3d:46:12:09:2f:
         c0:87:20:21:e1:1b:8b:89:2b:9d:68:bd:10:5f:48:3f:ca:54:
         74:57:84:96:20:c9:2d:11:ee:f3:35:47:b5:fa:98:03:7c:fd:
         2d:8a:b9:4b:fb:69:8e:d8:51:bc:31:05:b3:f1:8b:7c:f4:95:
         c1:02:b1:52:38:cf:2a:e3:c8:33:5f:a5:da:e4:18:b8:78:e3:
         92:6e:32:44:1c:d8:29:28:32:26:b8:69:fa:9f:67:ac:89:be:
         2e:17:70:48
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPJs9GSi6QGSq34ndmJcm0rHTqgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlEREJFMzc5QTExNDhCOTZFODQyMzUwMkI5NEI0REE0
ODQwNEZDOTAeFw0yNTAyMDQyMDAzNTBaFw0yNjAyMDMyMDA4NTBaMDMxMTAvBgNV
BAMTKDFCNEQ0ODk5NUNFRjc5OTI0OUQwNDNFQTg4RjYyQkZDRkNFMTkyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgHT3f1TgXs4JYnjaujaFR6s6G
nGVH/n+uxcACTu+RvZdIlx9XusWHh6lXsylHJbvz/EELrRC6f8t2OvwM1PQURMqQ
/KR21WvfifbEs6jMnkGEcEIbOeTTZchBqhNVj4klRgxmXvawjQJggaxN3hobzcOI
DA2qLlfG/IZuu7SQsJ7lMHkLOSTZU93ARnFYi8z8nV/ZgkO6npnrTtuAlvTQlTgY
e8Fs49yyrTPXO9l8MmYuJIwy0QFPshqmBPqDut0xMqZXd1/DxaS5C1GOLzzdWQcD
YKG9Vdm3QlfzVUu4GG6aZ2eYJ2gOx0QY22Scctj/gg6KkTpBANYWCIO7v8ExAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUG01ImVzveZJJ0EPqiPYr/PzhkhUwHwYDVR0j
BBgwFoAUSd2+N5oRSLluhCNQK5S02khAT8kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85OTE4MTI3Q0IzQjhBQzU4NDkyQzJENjNERjIxQkFFMjUw
MzE3MDFGOEVCRjg2Qjg4Njk2QzkwMUM4RDg4NTA3LzAvNDlEREJFMzc5QTExNDhC
OTZFODQyMzUwMkI5NEI0REE0ODQwNEZDOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80OUREQkUzNzlBMTE0OEI5NkU4
NDIzNTAyQjk0QjREQTQ4NDA0RkM5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTkxODEyN0NCM0I4QUM1ODQ5MkMyRDYzREYyMUJBRTI1MDMxNzAxRjhF
QkY4NkI4ODY5NkM5MDFDOEQ4ODUwNy8wLzMxMzkzMjJlMzEzODM4MmUzNTMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTM0MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMC8NDAN
BgkqhkiG9w0BAQsFAAOCAQEAvVb7V1P7Nb+rYJXpzbkNsRTIjmeQ6aKsiGZGlVQC
ECIRjCpAEO0e3zDglBQ3PJIGESSpxfPnmb3BWh4ED7iarea2IiIny/OrV0W+sI9K
6LRaRql443T18FVdtsDXd2vcNcwHIVvZS6Y5866HvEIkUyabe2xRIuBFbSM7uDTk
R8fk07YxQOE0NSJdODsUcvpUMRVN2tWodjeZfru9ND1GEgkvwIcgIeEbi4krnWi9
EF9IP8pUdFeEliDJLRHu8zVHtfqYA3z9LYq5S/tpjthRvDEFs/GLfPSVwQKxUjjP
KuPIM1+l2uQYuHjjkm4yRBzYKSgyJrhp+p9nrIm+LhdwSA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:52 2025 by rpki-client