Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/3139302e31342e3135322e302f32322d3234203d3e203532333536.roa
File:                     3139302e31342e3135322e302f32322d3234203d3e203532333536.roa (raw, json)
Hash identifier:          j2DjltdH26YdlG4/YdfKSztaNbI0NmVJ9I7gi1tkMXI=
Subject key identifier:   6C:D6:6F:38:A2:0F:EA:9A:43:AB:5E:B3:53:18:27:F0:47:47:FA:64
Certificate issuer:       /CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
Certificate serial:       56426BE1B2CA06F48EB250F2964732BBA837AC39
Authority key identifier: 1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/3139302e31342e3135322e302f32322d3234203d3e203532333536.roa
Signing time:             Tue 04 Feb 2025 18:34:35 +0000
ROA not before:           Tue 04 Feb 2025 18:29:35 +0000
ROA not after:            Tue 03 Feb 2026 18:34:35 +0000
asID:                     52356
IP address blocks:        190.14.152.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:42:6b:e1:b2:ca:06:f4:8e:b2:50:f2:96:47:32:bb:a8:37:ac:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD0C44277A0552FCFDC94E0225F8F0B715DDA73
        Validity
            Not Before: Feb  4 18:29:35 2025 GMT
            Not After : Feb  3 18:34:35 2026 GMT
        Subject: CN=6CD66F38A20FEA9A43AB5EB3531827F04747FA64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c6:f6:25:b7:c5:8d:21:32:1c:12:6a:bf:84:
                    7e:cc:f1:4e:ca:5e:3e:2b:e4:82:06:ac:f7:b7:e5:
                    80:9e:ee:45:e0:d1:06:a7:0f:62:f1:05:21:f3:8d:
                    60:72:8d:9f:f2:52:73:04:5a:d2:9c:50:18:75:82:
                    f7:70:05:ad:a5:a2:13:cf:44:a4:3e:ed:d2:7a:cc:
                    d4:c9:d5:f8:f9:87:4d:45:4e:77:04:d0:27:90:cc:
                    61:69:09:b1:d5:f4:fd:39:e9:ec:97:fa:c8:2c:99:
                    5c:70:e0:e8:86:d6:d1:a4:87:56:c7:2c:d1:87:2b:
                    29:81:0a:6f:96:eb:91:81:5a:d3:b6:08:f4:29:81:
                    a9:5a:61:b1:38:8f:8f:50:67:ff:c7:c0:11:d9:ff:
                    e3:db:d7:79:e3:d0:4e:b8:ee:e2:a8:fc:ae:a8:ff:
                    b7:da:31:9d:62:72:32:f7:a6:ed:43:ce:82:e4:67:
                    7d:8a:2f:05:39:b3:0a:20:3e:30:7f:0a:63:6c:5d:
                    aa:34:8c:e2:a9:71:59:ec:ff:38:49:bd:82:76:65:
                    cd:33:48:cb:56:58:11:a6:a1:a4:13:a4:47:7a:56:
                    5b:6b:7f:d1:b2:17:c1:f8:14:c7:74:cb:94:a1:46:
                    d9:ac:c0:a9:bd:d3:e3:74:7a:34:9c:3c:17:a1:be:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:6F:38:A2:0F:EA:9A:43:AB:5E:B3:53:18:27:F0:47:47:FA:64
            X509v3 Authority Key Identifier:
                keyid:1B:D0:C4:42:77:A0:55:2F:CF:DC:94:E0:22:5F:8F:0B:71:5D:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BD0C44277A0552FCFDC94E0225F8F0B715DDA73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A4759FC6D604410691ABB7592637D20FB49ED5CBCA4BC84739EBEBCD27BCD144/0/3139302e31342e3135322e302f32322d3234203d3e203532333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:24:71:56:89:6b:3e:d4:a6:52:0f:f0:66:18:84:ba:b6:
         cd:9d:c1:e3:4a:a8:a4:a9:af:a2:5f:db:1c:28:b0:75:5c:a4:
         a7:82:dd:6b:d1:6f:6d:75:d9:60:31:fb:90:c1:9c:f9:b5:b3:
         0f:2a:d8:b4:09:66:89:fe:5d:ff:e8:80:29:10:5f:ef:f3:d4:
         5d:2c:36:f1:16:fe:02:98:ec:a3:a0:04:3f:91:17:2e:a5:4d:
         e2:9c:cb:38:d9:87:c8:98:2b:15:95:4a:84:54:72:49:92:68:
         bd:50:20:f7:e7:7e:7e:13:83:dd:ca:e5:7b:26:c1:c1:4d:5f:
         14:93:93:16:9c:51:19:de:74:ac:36:74:61:2a:25:53:ad:13:
         18:dd:cd:2e:e3:ba:e4:29:3f:5b:6c:5f:71:63:7e:f6:ac:9d:
         51:16:19:bf:3b:2a:53:37:48:57:31:6d:fc:e4:16:1d:c6:69:
         07:f2:0c:97:c3:a0:1d:1b:a2:6f:5e:50:6f:a4:26:c1:5d:ba:
         c5:de:d7:b1:10:3b:51:3e:d6:8f:ac:cb:98:64:2c:89:32:82:
         6b:4b:be:4d:15:ae:3d:a2:14:31:06:4c:cf:d5:dc:a3:52:76:
         a1:fd:9e:81:a4:d6:e0:48:8d:aa:f2:5c:8b:8b:42:5f:fb:33:
         2f:0f:3d:5d
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUVkJr4bLKBvSOslDylkcyu6g3rDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJEMEM0NDI3N0EwNTUyRkNGREM5NEUwMjI1RjhGMEI3
MTVEREE3MzAeFw0yNTAyMDQxODI5MzVaFw0yNjAyMDMxODM0MzVaMDMxMTAvBgNV
BAMTKDZDRDY2RjM4QTIwRkVBOUE0M0FCNUVCMzUzMTgyN0YwNDc0N0ZBNjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQxvYlt8WNITIcEmq/hH7M8U7K
Xj4r5IIGrPe35YCe7kXg0QanD2LxBSHzjWByjZ/yUnMEWtKcUBh1gvdwBa2lohPP
RKQ+7dJ6zNTJ1fj5h01FTncE0CeQzGFpCbHV9P056eyX+sgsmVxw4OiG1tGkh1bH
LNGHKymBCm+W65GBWtO2CPQpgalaYbE4j49QZ//HwBHZ/+Pb13nj0E647uKo/K6o
/7faMZ1icjL3pu1DzoLkZ32KLwU5swogPjB/CmNsXao0jOKpcVns/zhJvYJ2Zc0z
SMtWWBGmoaQTpEd6Vltrf9GyF8H4FMd0y5ShRtmswKm90+N0ejScPBehvszVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUbNZvOKIP6ppDq16zUxgn8EdH+mQwHwYDVR0j
BBgwFoAUG9DEQnegVS/P3JTgIl+PC3Fd2nMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNDc1OUZDNkQ2MDQ0MTA2OTFBQkI3NTkyNjM3RDIwRkI0
OUVENUNCQ0E0QkM4NDczOUVCRUJDRDI3QkNEMTQ0LzAvMUJEMEM0NDI3N0EwNTUy
RkNGREM5NEUwMjI1RjhGMEI3MTVEREE3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkQwQzQ0Mjc3QTA1NTJGQ0ZE
Qzk0RTAyMjVGOEYwQjcxNUREQTczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTQ3NTlGQzZENjA0NDEwNjkxQUJCNzU5MjYzN0QyMEZCNDlFRDVDQkNB
NEJDODQ3MzlFQkVCQ0QyN0JDRDE0NC8wLzMxMzkzMDJlMzEzNDJlMzEzNTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjMzMzUzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr4OmDAN
BgkqhkiG9w0BAQsFAAOCAQEAesMkcVaJaz7UplIP8GYYhLq2zZ3B40qopKmvol/b
HCiwdVykp4Lda9FvbXXZYDH7kMGc+bWzDyrYtAlmif5d/+iAKRBf7/PUXSw28Rb+
Apjso6AEP5EXLqVN4pzLONmHyJgrFZVKhFRySZJovVAg9+d+fhOD3crleybBwU1f
FJOTFpxRGd50rDZ0YSolU60TGN3NLuO65Ck/W2xfcWN+9qydURYZvzsqUzdIVzFt
/OQWHcZpB/IMl8OgHRuib15Qb6QmwV26xd7XsRA7UT7Wj6zLmGQsiTKCa0u+TRWu
PaIUMQZMz9Xco1J2of2egaTW4EiNqvJci4tCX/szLw89XQ==
-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:20 2025 by rpki-client