Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f32302d3234203d3e203237363638.roa
File:                     3139302e39342e3132382e302f32302d3234203d3e203237363638.roa (raw, json)
Hash identifier:          nyu15z3qVvP/yEhf/vqrJ4rnI4vfPb5XPUh2emJJ2gM=
Subject key identifier:   C5:B1:C9:53:70:FE:79:49:87:47:49:51:34:6B:F7:1D:B1:FE:F9:86
Certificate issuer:       /CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
Certificate serial:       638B78E3E1EA1110F7D266B11CD6F869808E3CEF
Authority key identifier: 61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f32302d3234203d3e203237363638.roa
Signing time:             Tue 04 Feb 2025 19:57:44 +0000
ROA not before:           Tue 04 Feb 2025 19:52:44 +0000
ROA not after:            Tue 03 Feb 2026 19:57:44 +0000
asID:                     27668
IP address blocks:        190.94.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8b:78:e3:e1:ea:11:10:f7:d2:66:b1:1c:d6:f8:69:80:8e:3c:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61672627CE7E727EFF60A56D0A466F15315B7FD0
        Validity
            Not Before: Feb  4 19:52:44 2025 GMT
            Not After : Feb  3 19:57:44 2026 GMT
        Subject: CN=C5B1C95370FE794987474951346BF71DB1FEF986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f5:f9:12:38:46:f1:f8:16:93:49:86:7e:9f:
                    15:2a:e8:24:e3:8f:7e:f9:91:13:b7:a3:66:5e:d3:
                    00:11:9c:69:3d:49:e2:0b:e9:9f:89:cf:56:ac:11:
                    68:e2:08:2f:5c:58:1c:5f:cc:79:e5:eb:d1:a3:a7:
                    1f:fd:af:bf:82:da:d3:38:17:4c:84:55:95:26:16:
                    3c:bd:25:a2:f9:c6:7d:36:73:da:ea:13:39:7c:62:
                    2d:45:35:18:51:35:e4:c9:19:1f:f1:c7:c9:2f:25:
                    47:57:c9:53:00:9e:83:51:8e:1f:a7:15:d2:a7:86:
                    ce:ca:40:ff:b6:3c:04:60:84:e5:01:c7:0d:db:32:
                    a8:8b:7a:a6:47:cb:0e:f3:05:bf:ef:34:28:b4:4d:
                    d2:b9:91:e1:4d:53:5f:74:6b:32:85:45:8e:38:e1:
                    af:ee:fb:fe:86:6a:ad:f1:3e:6a:9c:7d:d2:1b:12:
                    13:de:0e:0a:31:cd:1b:1a:21:c5:07:06:6d:4d:ed:
                    43:b0:2d:c4:1e:18:5f:ff:11:22:12:b2:33:10:65:
                    19:7c:ae:7a:8d:45:3b:35:45:59:37:66:e4:b9:19:
                    ed:2b:0b:36:78:03:44:a4:a7:6e:67:7b:3d:be:53:
                    bb:8c:48:75:41:5f:90:5e:93:1f:1f:08:63:4b:18:
                    77:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:C9:53:70:FE:79:49:87:47:49:51:34:6B:F7:1D:B1:FE:F9:86
            X509v3 Authority Key Identifier:
                keyid:61:67:26:27:CE:7E:72:7E:FF:60:A5:6D:0A:46:6F:15:31:5B:7F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/61672627CE7E727EFF60A56D0A466F15315B7FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC8A462074B98D3F9638821F9060DECDE1637FCAB7B5FCD6A69D9450167A2798/0/3139302e39342e3132382e302f32302d3234203d3e203237363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:59:96:62:44:ed:a6:26:d2:4a:9c:6b:de:2f:59:10:85:7d:
         e0:3f:16:e5:4b:25:bd:7e:82:6d:21:32:b4:6a:20:da:0e:ed:
         2c:5a:5c:7c:99:db:33:00:67:bc:4f:d0:27:16:71:81:e1:d8:
         28:66:c3:7e:2c:8c:41:92:02:6c:ad:6f:36:16:d9:1b:10:2a:
         4e:9a:38:d0:bb:aa:c0:01:9f:ac:86:03:cb:76:b8:f6:ec:40:
         10:40:3a:a3:c4:6a:d4:2f:9e:c0:ce:04:33:cf:92:3f:bc:45:
         f5:7f:f0:7b:52:de:5b:f4:07:2d:d7:85:db:27:54:14:ae:7c:
         6e:49:86:ea:b6:fb:00:ad:ae:53:e1:68:4a:11:e5:9e:04:10:
         12:3b:63:10:54:1a:09:79:50:55:6e:a2:59:ea:d6:cf:87:3c:
         fd:eb:9f:32:58:8d:30:47:fb:18:71:f2:5e:c9:9b:ef:a4:d1:
         09:80:b3:66:91:07:72:c0:eb:4f:93:e5:6c:f1:3c:06:9e:25:
         4d:2c:12:df:3b:df:10:ff:59:77:54:24:13:7d:c9:74:27:ff:
         68:bb:01:5a:67:30:f6:7a:4a:08:76:94:b6:a7:89:0f:05:76:
         eb:b0:7d:2e:b7:09:59:49:43:5b:f1:58:13:00:3b:54:ed:9f:
         e7:61:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----