Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          3+MB7T99p5y/DbLUKMNTwR+mP2J9sn/36EU7/BWt8GI=
Subject key identifier:   C0:5A:61:54:0B:28:EA:29:57:C6:73:41:29:AD:F8:E9:A8:25:E0:3D
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       261B8FAA3AE07808DCB677E811FA8E800FF62873
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:24 +0000
ROA not before:           Tue 04 Feb 2025 18:32:24 +0000
ROA not after:            Tue 03 Feb 2026 18:37:24 +0000
asID:                     264688
IP address blocks:        190.107.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1b:8f:aa:3a:e0:78:08:dc:b6:77:e8:11:fa:8e:80:0f:f6:28:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:24 2025 GMT
            Not After : Feb  3 18:37:24 2026 GMT
        Subject: CN=C05A61540B28EA2957C6734129ADF8E9A825E03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:c0:1d:e3:30:89:e0:8d:a4:53:06:c6:1e:
                    82:0c:28:e6:02:aa:a9:15:1a:3f:03:15:c7:ba:e5:
                    f6:68:4b:29:8f:4a:ef:f4:ba:29:55:ac:e3:00:74:
                    f4:c2:7b:db:90:e5:88:1a:a6:cc:6e:ac:b9:0d:bb:
                    a5:e5:b9:10:60:92:48:ca:03:ee:e8:b4:6d:ff:93:
                    b2:82:07:a9:af:46:98:b3:34:16:e3:bd:36:19:d7:
                    4b:5f:52:a8:ff:c2:bb:60:30:7e:68:da:d4:eb:93:
                    34:85:10:ea:96:f1:a8:e3:4b:a4:c1:24:ea:b8:c7:
                    d9:ac:5b:0b:01:4a:b0:55:5a:37:e4:e6:ae:8a:3a:
                    94:c3:95:a9:e1:c0:71:0a:ab:92:80:ae:a8:08:72:
                    7c:76:8d:34:6b:74:5b:fd:40:a6:5a:6c:f9:aa:71:
                    5a:63:e0:b8:63:d5:7c:b8:c1:3b:74:ac:8c:ac:30:
                    b7:c5:a8:f0:5e:80:b2:93:3b:4c:3b:86:17:3f:03:
                    67:af:4b:4a:f4:dc:78:44:17:29:59:05:c5:4f:61:
                    0d:05:21:bc:15:dc:8e:49:bc:af:c2:87:93:74:47:
                    a2:83:b9:02:ba:ed:29:6d:c0:4a:ce:b4:c3:ad:59:
                    76:2c:e5:a1:7b:6e:c9:b1:c5:82:89:38:8f:dc:8a:
                    29:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5A:61:54:0B:28:EA:29:57:C6:73:41:29:AD:F8:E9:A8:25:E0:3D
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234332e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:c3:13:a6:16:e8:2e:90:cc:65:bd:70:e2:e9:f6:5a:29:d6:
         76:6a:4f:c1:5d:5c:1a:57:ee:89:a9:39:dd:95:d1:04:eb:b3:
         ba:c0:8d:94:4c:7a:da:40:e9:d5:d9:af:d0:82:8b:56:24:ee:
         01:98:c7:0a:2d:f9:45:61:dc:a1:b5:10:76:1e:29:63:0a:e3:
         51:06:19:e9:85:d1:07:38:a5:e5:97:c3:2c:bf:ad:60:cb:81:
         f8:c6:88:ef:75:42:ac:29:f7:f0:ad:34:d6:fd:f8:7c:45:af:
         30:0e:d7:7f:1f:be:12:9f:73:cb:67:f8:f9:17:60:bf:98:15:
         70:a5:81:5b:ac:5b:0f:a4:8b:f8:1e:13:b1:2f:c9:af:31:e2:
         9f:a5:f2:01:43:3f:b6:b2:eb:55:66:41:eb:de:7e:b4:e3:8e:
         56:85:c7:82:3a:71:15:47:66:af:3a:33:d9:7a:ae:16:2d:86:
         d8:12:d4:b6:0e:3f:8c:8f:e6:ca:f7:d9:e3:ea:0e:a5:86:7b:
         31:5d:5e:24:8f:d0:84:2a:68:ae:51:7d:a4:50:02:df:13:47:
         3c:b0:4e:eb:97:b6:bd:86:cb:f4:a7:65:6b:ca:5e:1e:1c:cd:
         41:4d:b9:45:19:d0:54:39:de:8c:2a:86:03:32:ec:a3:d5:e3:
         59:6a:eb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:05 2025 by rpki-client