Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          dfUdLR1ZD0V6GW0ff7cXlsz5CZtAHoB2qKEN/CpR/Lk=
Subject key identifier:   72:3C:E4:0A:7A:90:73:13:B6:83:0C:D7:FA:EF:80:0B:9F:CA:2E:B6
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       10086A4E40D83910575DC41358ACA1DEB14A069B
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:25 +0000
ROA not before:           Tue 04 Feb 2025 18:32:25 +0000
ROA not after:            Tue 03 Feb 2026 18:37:25 +0000
asID:                     264688
IP address blocks:        190.107.245.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:6a:4e:40:d8:39:10:57:5d:c4:13:58:ac:a1:de:b1:4a:06:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:25 2025 GMT
            Not After : Feb  3 18:37:25 2026 GMT
        Subject: CN=723CE40A7A907313B6830CD7FAEF800B9FCA2EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:c6:66:65:fa:66:0d:ab:36:a7:5d:24:59:
                    55:e2:e5:4f:53:eb:c5:0c:71:e4:eb:c3:c5:e9:dc:
                    96:95:78:ee:a6:77:ae:45:bf:c4:39:cd:de:f2:bc:
                    9b:e7:c5:21:e7:a1:75:5e:2d:a3:32:84:3f:94:2d:
                    0b:3c:01:02:68:1a:eb:0b:64:f7:33:7f:71:05:fc:
                    bb:ae:83:4b:5c:b4:d9:e6:2e:ed:45:6d:2d:54:5e:
                    b2:72:f1:c6:fd:c2:f4:0f:b7:de:03:01:a6:dd:c5:
                    2c:1b:82:4e:da:82:b8:0b:fa:ed:93:e9:e8:10:42:
                    4c:df:24:ed:ce:ee:7a:02:51:9d:7d:45:e2:3c:04:
                    27:14:fd:e3:a3:16:f7:9f:5d:fa:d5:52:3d:0b:97:
                    4f:fb:b9:f1:f8:63:35:f0:f9:6f:6b:16:8f:73:6b:
                    91:d4:77:bd:9d:60:9a:83:75:5a:4a:dc:d1:6f:f4:
                    9d:bd:dc:19:68:80:3c:35:c2:67:e5:13:57:7a:58:
                    6f:7a:94:09:f7:02:59:3c:33:10:5b:47:60:99:3a:
                    c8:3c:7b:3c:52:7d:c2:53:61:e6:ad:8b:65:d7:90:
                    35:64:56:5a:2a:a3:31:39:a5:c1:9e:25:85:73:2c:
                    80:f4:95:64:f1:54:da:6b:15:79:81:9f:a4:3c:85:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:E4:0A:7A:90:73:13:B6:83:0C:D7:FA:EF:80:0B:9F:CA:2E:B6
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234352e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:b6:e8:07:26:8c:36:d5:4a:14:cd:a6:c6:91:db:23:d7:
         5b:f9:08:69:ce:2b:4d:07:28:5a:21:e1:61:0c:ad:4b:9f:8c:
         62:13:e9:45:c3:f9:a2:6f:ac:e0:b7:9c:05:de:2a:92:e0:6d:
         84:22:54:ce:69:95:ba:ec:00:a0:76:9e:d6:50:cd:85:b9:e5:
         0a:5c:a0:b8:81:30:fe:a2:ac:e0:bb:b7:e1:f4:94:23:8f:72:
         39:12:41:a3:0b:41:6e:13:ce:68:77:37:2c:74:ef:c5:01:99:
         da:c6:fb:43:cd:60:00:da:67:cf:a4:2b:9d:47:b5:02:e3:f1:
         c8:b6:33:45:a7:ca:de:3e:61:75:42:d8:78:d5:8b:63:04:93:
         17:c3:42:26:14:69:bb:d8:38:fb:bb:04:5a:82:00:51:d6:0c:
         7c:2b:9e:65:98:7d:4f:b4:21:f2:fe:92:a9:c8:e7:d5:c5:58:
         88:f7:16:cb:98:7b:78:f8:aa:c4:d7:d4:34:61:44:96:ac:7c:
         f2:ba:17:c5:d6:b3:8e:5a:52:08:52:c6:9e:2e:8e:e8:d2:e5:
         5c:40:68:af:c9:a0:44:db:5c:ed:f6:1f:46:f8:d5:34:17:c4:
         80:6a:63:bb:32:4b:aa:dd:61:a3:86:2f:f4:35:d9:cc:8a:42:
         a8:16:cf:d7
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEAhqTkDYORBXXcQTWKyh3rFKBpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTgxNTdCQkYzNTg0NDY5MzE3RUI0MDU4RDFCOUIzNzlE
QzlEMTdEOTAeFw0yNTAyMDQxODMyMjVaFw0yNjAyMDMxODM3MjVaMDMxMTAvBgNV
BAMTKDcyM0NFNDBBN0E5MDczMTNCNjgzMENEN0ZBRUY4MDBCOUZDQTJFQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjusZmZfpmDas2p10kWVXi5U9T
68UMceTrw8Xp3JaVeO6md65Fv8Q5zd7yvJvnxSHnoXVeLaMyhD+ULQs8AQJoGusL
ZPczf3EF/Luug0tctNnmLu1FbS1UXrJy8cb9wvQPt94DAabdxSwbgk7agrgL+u2T
6egQQkzfJO3O7noCUZ19ReI8BCcU/eOjFvefXfrVUj0Ll0/7ufH4YzXw+W9rFo9z
a5HUd72dYJqDdVpK3NFv9J293BlogDw1wmflE1d6WG96lAn3Alk8MxBbR2CZOsg8
ezxSfcJTYeati2XXkDVkVloqozE5pcGeJYVzLID0lWTxVNprFXmBn6Q8hezLAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUcjzkCnqQcxO2gwzX+u+AC5/KLrYwHwYDVR0j
BBgwFoAUqBV7vzWERpMX60BY0bmzedydF9kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDkzOTREQjAwNzJGQkJENUVBRkM1NEM1QzU2MjE1REY2
ODA3Rjg2NkI0QzcyNTVBODJCMUQ3MkM5RTk3RDZELzAvQTgxNTdCQkYzNTg0NDY5
MzE3RUI0MDU4RDFCOUIzNzlEQzlEMTdEOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BODE1N0JCRjM1ODQ0NjkzMTdF
QjQwNThEMUI5QjM3OURDOUQxN0Q5LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ5Mzk0REIwMDcyRkJCRDVFQUZDNTRDNUM1NjIxNURGNjgwN0Y4NjZC
NEM3MjU1QTgyQjFENzJDOUU5N0Q2RC8wLzMxMzkzMDJlMzEzMDM3MmUzMjM0MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM4Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
a/UwDQYJKoZIhvcNAQELBQADggEBALnutugHJow21UoUzabGkdsj11v5CGnOK00H
KFoh4WEMrUufjGIT6UXD+aJvrOC3nAXeKpLgbYQiVM5plbrsAKB2ntZQzYW55Qpc
oLiBMP6irOC7t+H0lCOPcjkSQaMLQW4Tzmh3Nyx078UBmdrG+0PNYADaZ8+kK51H
tQLj8ci2M0Wnyt4+YXVC2HjVi2MEkxfDQiYUabvYOPu7BFqCAFHWDHwrnmWYfU+0
IfL+kqnI59XFWIj3FsuYe3j4qsTX1DRhRJasfPK6F8XWs45aUghSxp4ujujS5VxA
aK/JoETbXO32H0b41TQXxIBqY7syS6rdYaOGL/Q12cyKQqgWz9c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:02 2025 by rpki-client