Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa
File:                     3139302e31342e3232342e302f31392d3234203d3e203237393531.roa (raw, json)
Hash identifier:          NBRo35qiwFDMfOwM89eRx2R1qzsdyBxPczNbgSgS2+k=
Subject key identifier:   BD:D1:84:92:0E:C8:8F:E9:E3:F2:3D:88:6F:FC:43:61:7C:EE:4D:7E
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       16AAC4143EBB444A5F2978EC0D3DD9E8E025B79E
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa
Signing time:             Tue 04 Feb 2025 19:57:04 +0000
ROA not before:           Tue 04 Feb 2025 19:52:04 +0000
ROA not after:            Tue 03 Feb 2026 19:57:04 +0000
asID:                     27951
IP address blocks:        190.14.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:aa:c4:14:3e:bb:44:4a:5f:29:78:ec:0d:3d:d9:e8:e0:25:b7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:04 2025 GMT
            Not After : Feb  3 19:57:04 2026 GMT
        Subject: CN=BDD184920EC88FE9E3F23D886FFC43617CEE4D7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:0f:c5:c0:82:ff:2b:0e:c3:8a:da:c9:22:
                    80:1f:82:eb:19:1a:ab:6a:0f:a1:eb:86:74:e0:60:
                    3b:0e:2b:78:f5:55:92:fb:d8:a0:97:3d:30:e2:3a:
                    3e:bb:5c:ed:09:ad:f0:f4:1d:86:fe:6d:6f:23:74:
                    ee:e5:73:2e:1b:5a:67:ed:f8:0d:fc:de:85:46:86:
                    33:64:62:21:55:94:50:42:44:bb:ca:01:5c:cd:8f:
                    9c:ee:99:73:f5:14:46:32:c1:e0:8e:92:ac:73:fd:
                    5c:c9:5d:ec:e4:6e:b2:5d:88:f5:b2:1d:0e:c2:03:
                    80:d3:ff:11:9e:b6:37:44:00:21:a9:d2:50:c4:9f:
                    90:d9:5e:45:95:6a:30:50:ba:06:b0:59:b7:2f:98:
                    30:a1:dc:1c:d0:20:a7:3b:c5:f9:1d:9e:d1:4b:53:
                    13:84:7a:9b:de:b4:a0:2c:c4:8d:6f:12:1f:29:16:
                    88:1d:ef:80:be:81:fd:82:19:7e:ce:2b:e0:e4:78:
                    2a:23:ed:be:b7:05:25:c4:b0:a2:50:7c:e7:60:f5:
                    37:8d:16:e1:1b:75:da:9a:a2:4c:8f:43:86:38:73:
                    fa:d4:19:2d:4f:d4:18:af:01:0e:82:be:53:e2:14:
                    d6:44:ef:73:da:16:2d:3e:11:5a:17:c4:f7:49:cd:
                    ee:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D1:84:92:0E:C8:8F:E9:E3:F2:3D:88:6F:FC:43:61:7C:EE:4D:7E
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3232342e302f31392d3234203d3e203237393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:29:37:e5:92:3a:0a:4f:22:ce:95:e6:8e:67:38:fa:b6:
         2b:72:a1:9c:e5:8d:28:a0:2a:18:33:d1:f8:74:b9:79:9c:53:
         98:51:88:96:6e:e6:45:01:a2:ba:fb:e1:bc:6d:4a:58:f1:eb:
         29:e3:ce:e3:8e:a4:62:22:df:2e:c5:ce:65:07:ba:d5:ae:98:
         f3:0e:82:89:4a:4c:9a:ab:9f:2f:04:16:66:da:0b:86:f5:9f:
         76:dd:48:b3:9d:d8:f5:63:d9:d4:f9:51:68:d2:ff:06:2b:a7:
         5e:55:b4:57:d0:ab:66:83:5e:c3:d9:30:b3:8a:56:e6:70:1a:
         e9:27:54:59:ca:35:a1:a7:e2:63:3f:e3:61:1d:92:2f:0c:c7:
         21:fc:e0:15:eb:ec:ef:35:58:24:6f:19:01:e5:41:54:67:e9:
         db:31:76:52:9c:69:88:2f:0f:cd:0c:37:03:7a:cd:1d:28:09:
         9e:92:5e:dd:b3:98:36:c4:3e:1b:c7:6c:7e:03:e3:64:2f:4d:
         2e:69:89:2a:15:01:f5:45:51:26:69:39:4d:eb:a8:f4:93:70:
         b9:e1:fe:3d:f8:e9:36:25:9a:73:01:df:de:da:76:9f:c4:2b:
         ec:b7:a0:9d:27:4e:66:c0:c4:82:39:03:c6:84:44:11:ab:50:
         73:3b:d4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:30 2025 by rpki-client