Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
File:                     3139302e39342e3132382e302f31392d3234203d3e203237363638.roa (raw, json)
Hash identifier:          wht5fvMnGxB5LYfoMYIEPOQvINRtelhLg19BiRGK7Ug=
Subject key identifier:   56:A6:58:96:6C:32:96:BF:31:B7:B4:23:CB:42:71:9F:C6:84:26:FC
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       7FCA0203C18B02C19B26BDCACDF549D3C08F7C99
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa
Signing time:             Tue 04 Feb 2025 19:57:45 +0000
ROA not before:           Tue 04 Feb 2025 19:52:45 +0000
ROA not after:            Tue 03 Feb 2026 19:57:45 +0000
asID:                     27668
IP address blocks:        190.94.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ca:02:03:c1:8b:02:c1:9b:26:bd:ca:cd:f5:49:d3:c0:8f:7c:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Feb  4 19:52:45 2025 GMT
            Not After : Feb  3 19:57:45 2026 GMT
        Subject: CN=56A658966C3296BF31B7B423CB42719FC68426FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f1:e9:96:c8:e7:3c:f3:4d:c8:d6:70:d8:df:
                    d5:56:f2:bf:57:d7:ac:d9:45:5d:b7:c1:be:13:1d:
                    93:a9:ad:b2:3d:80:3f:f1:d2:e1:15:11:cc:dc:b0:
                    03:d5:0d:9b:82:30:fd:c5:11:f4:e1:39:50:15:77:
                    e8:ba:3b:5e:dd:82:af:5a:ff:ad:dd:d7:2c:80:ad:
                    01:bd:77:f8:5b:49:11:70:71:98:a9:5e:a2:16:f3:
                    ae:a7:49:cf:6a:b4:d3:22:5a:66:57:c8:7e:0c:c5:
                    e6:17:b3:1a:e8:c5:9e:bf:68:a7:ed:9f:74:9b:10:
                    07:06:ed:7f:19:90:be:9c:5f:08:82:52:71:77:ff:
                    3f:a1:03:dd:ad:c2:b1:98:74:d4:52:21:f2:4e:89:
                    35:26:4f:db:e5:b6:7d:87:78:78:be:c0:18:7c:23:
                    1e:55:61:d8:c1:fb:0e:4a:92:35:b7:7c:74:1c:f0:
                    a2:27:c5:89:3a:f5:bd:7b:38:eb:69:62:29:e3:ad:
                    ca:9f:d9:c6:fb:4d:0c:d0:25:c4:a5:ee:ff:c9:70:
                    d3:34:70:88:d5:69:35:05:8d:5c:42:9b:c1:d6:91:
                    75:b0:35:89:00:d6:65:45:4e:b0:b1:86:5c:23:0e:
                    c7:66:cd:1f:25:5b:42:28:9a:2a:30:8a:fa:bd:fd:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A6:58:96:6C:32:96:BF:31:B7:B4:23:CB:42:71:9F:C6:84:26:FC
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f31392d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:3e:a6:33:e3:a9:93:c0:eb:54:58:13:63:ee:f9:d7:54:8b:
         27:ae:9e:f3:91:a1:44:01:b1:c5:1a:11:7a:3e:c8:58:e3:54:
         53:cb:56:0e:f9:4a:9c:2a:5b:4a:a6:b1:3a:fb:05:c6:62:2d:
         4c:1f:57:bf:29:b4:ed:00:1b:f5:8e:ee:f9:55:f4:b1:de:7c:
         e6:81:d2:b1:c0:15:98:05:b8:4e:44:2b:00:38:58:d4:99:19:
         38:8f:cb:e5:e0:7a:e0:5b:31:c5:9d:ea:6e:2b:b6:99:a7:3e:
         ff:ec:f1:1b:d5:62:82:ed:85:ec:aa:54:63:37:91:40:11:25:
         04:6a:44:da:ef:e4:64:ad:40:d1:54:cf:e0:ff:ed:47:64:c6:
         74:e8:ae:90:5b:ee:78:b8:51:1b:d5:63:b3:36:8b:64:56:de:
         a3:1f:54:62:3e:92:e8:c8:bf:68:a2:5c:4c:0d:9c:09:5d:b0:
         45:c9:04:48:73:04:6a:16:02:db:1b:f1:01:ae:93:97:9f:46:
         18:97:56:6e:1c:c3:c9:55:13:c2:f1:a6:7b:38:81:cf:5d:c3:
         c8:4c:3d:36:2d:2c:e2:27:80:72:10:2d:ed:46:70:78:55:a8:
         5a:6b:e6:d3:fb:9b:36:42:9c:f1:d3:07:87:89:be:c8:50:29:
         a4:46:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:11:48 2025 by rpki-client