Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31362e302f32302d3234203d3e203237393531.roa
File:                     3139302e3130372e31362e302f32302d3234203d3e203237393531.roa (raw, json)
Hash identifier:          gymJR5zpX2HJ1uar/Va7fsxf8o6oPGDlUUf6+/ZYWzo=
Subject key identifier:   92:B4:C4:F9:F1:57:9C:C1:E0:38:06:E2:97:E8:A6:76:22:94:F2:72
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       25673C59E1E8A0D69E5E13AF8F265B08FBDE7C00
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31362e302f32302d3234203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:57:08 +0000
ROA not before:           Tue 04 Feb 2025 19:52:08 +0000
ROA not after:            Tue 03 Feb 2026 19:57:08 +0000
asID:                     27951
IP address blocks:        190.107.16.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:67:3c:59:e1:e8:a0:d6:9e:5e:13:af:8f:26:5b:08:fb:de:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:08 2025 GMT
            Not After : Feb  3 19:57:08 2026 GMT
        Subject: CN=92B4C4F9F1579CC1E03806E297E8A6762294F272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:97:a2:a3:50:15:28:7b:c4:96:29:0d:39:
                    c9:72:1c:86:aa:fc:82:7f:b0:13:01:0a:05:27:49:
                    72:e7:ec:f9:de:8f:cf:57:0c:71:46:19:88:5d:45:
                    b6:ec:31:b7:0e:dd:45:00:38:b0:81:50:6d:75:14:
                    60:38:23:1c:36:50:f0:27:a7:70:94:81:1c:d8:d0:
                    8d:18:24:97:91:c0:c8:b9:67:55:ed:31:ae:66:c3:
                    54:dc:5d:95:ae:6e:c6:5e:e2:60:03:c7:04:5f:90:
                    ee:77:a9:07:31:5c:6f:90:a2:19:b5:cb:23:3c:4d:
                    04:dc:c7:da:c8:bc:7f:c8:4a:ea:06:2c:dd:08:62:
                    18:ac:d1:27:c3:7a:f1:a2:48:12:cb:d1:7e:45:05:
                    fa:d1:84:de:8e:b5:88:1b:d1:5e:e4:e3:b8:98:dd:
                    f8:83:39:ee:f6:62:5c:9f:3d:1f:5e:e7:11:45:93:
                    82:99:52:00:3b:f2:03:34:47:c6:66:a9:a9:d7:95:
                    22:a2:f9:7d:6c:b2:15:e4:78:40:87:ec:39:98:b5:
                    09:06:80:e1:26:ea:f0:d3:f2:48:bf:cd:6b:bb:a8:
                    32:cf:bd:bc:dd:6a:35:b9:dc:87:b0:4d:c2:98:34:
                    ac:ad:8f:54:e7:bc:a4:b7:06:26:29:2e:02:08:28:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:C4:F9:F1:57:9C:C1:E0:38:06:E2:97:E8:A6:76:22:94:F2:72
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e31362e302f32302d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         77:06:c4:c9:0c:69:96:9e:4b:7c:ac:1a:e3:29:00:2d:0c:cd:
         a9:89:9f:d9:fa:46:26:b6:e4:dd:1f:97:96:a6:39:d3:27:d7:
         cc:0b:9c:05:ae:2e:0a:3c:87:78:46:5b:28:08:92:df:72:e1:
         4f:d1:8d:f5:a5:3b:41:e5:13:de:10:fe:be:74:ff:66:84:60:
         dc:fa:a1:83:7f:60:34:f9:d6:b1:93:aa:77:6d:08:90:e7:49:
         7f:f0:cc:17:62:52:37:17:6a:c9:6a:9c:e2:4a:bc:66:e9:f9:
         84:03:8d:38:b1:b3:05:56:c3:d5:25:9d:d1:98:16:c7:5e:f9:
         e1:43:e5:e4:bd:c4:86:3f:00:a2:eb:ff:a7:12:14:aa:c0:ee:
         03:28:00:76:df:26:6b:df:b4:b6:fb:22:78:22:21:f3:f2:4f:
         ce:79:67:7d:bf:c6:c6:de:bd:f5:72:44:f3:87:57:f1:22:3d:
         ac:0d:cd:9c:ea:0b:47:c4:ad:f0:74:c6:65:eb:72:29:7b:d0:
         58:d9:f6:30:43:90:ed:8d:1b:a4:9b:7d:76:63:32:e9:fd:79:
         eb:9b:95:e8:0d:0b:65:ab:2b:59:d5:dd:ca:e4:de:f7:8a:29:
         35:8f:1a:ac:4d:e9:38:e2:55:e3:22:5c:0a:4d:32:13:4f:d8:
         4d:e1:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:21 2025 by rpki-client