Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3138312e302f32342d3234203d3e203430333131.roa
File:                     3139302e39382e3138312e302f32342d3234203d3e203430333131.roa (raw, json)
Hash identifier:          m8adzTrffo/47Zm7lqriTeGFyoYglzlQvaFhTuaJv5A=
Subject key identifier:   74:BD:CA:BE:E9:1F:23:AA:13:F5:A9:78:79:A5:21:10:CF:F0:EC:88
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       483A0794E5EAE295698E7FF807F470013E0C5C5E
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3138312e302f32342d3234203d3e203430333131.roa
Signing time:             Fri 21 Feb 2025 14:10:35 +0000
ROA not before:           Fri 21 Feb 2025 14:05:35 +0000
ROA not after:            Fri 20 Feb 2026 14:10:35 +0000
asID:                     40311
IP address blocks:        190.98.181.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3a:07:94:e5:ea:e2:95:69:8e:7f:f8:07:f4:70:01:3e:0c:5c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Feb 21 14:05:35 2025 GMT
            Not After : Feb 20 14:10:35 2026 GMT
        Subject: CN=74BDCABEE91F23AA13F5A97879A52110CFF0EC88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:fd:4c:ba:3e:9e:4d:c5:86:6d:8c:69:03:
                    a9:7d:da:41:67:40:79:3a:5c:7e:b5:e5:f1:4e:be:
                    5a:17:c2:1f:03:e0:71:7a:e5:f4:46:99:ab:8c:6f:
                    8f:f3:f0:1a:d7:d1:c9:11:e5:78:b6:38:1d:93:ee:
                    db:e7:da:9e:c8:9f:a9:9f:46:50:e7:6d:bd:3b:ff:
                    4d:04:0d:0c:bd:08:e7:14:0f:b2:3b:7f:cb:68:31:
                    a7:75:f3:21:16:24:cb:c6:9c:bf:95:4a:f0:68:7c:
                    85:b3:f8:14:87:af:29:35:b3:e8:2c:bf:f0:35:9b:
                    bf:e2:2d:02:fc:84:3d:69:80:13:fa:cb:1f:61:2c:
                    13:40:49:ac:4e:3d:24:93:7a:d2:07:f5:d4:9f:49:
                    6c:de:13:9e:01:ea:bb:67:cf:fc:d5:91:4e:60:f1:
                    33:6b:a0:1d:70:26:1a:38:89:ed:46:0c:ce:e8:57:
                    6f:a4:ee:d4:2c:0c:2d:12:f2:3e:95:16:7d:d7:86:
                    d6:c5:96:37:27:5a:d3:4c:4e:c1:59:74:79:0d:5c:
                    b7:8b:d9:aa:46:7e:61:67:d5:73:68:f6:b6:d1:8a:
                    19:c8:dc:13:59:c8:98:f3:7e:17:67:67:35:5d:e1:
                    9a:c8:5f:84:93:30:9f:6e:ca:bf:39:ba:55:8d:d4:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BD:CA:BE:E9:1F:23:AA:13:F5:A9:78:79:A5:21:10:CF:F0:EC:88
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3138312e302f32342d3234203d3e203430333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:51:06:4b:f1:b5:13:de:7f:ec:0b:5a:0b:b4:a3:26:10:42:
         0c:18:14:5a:b6:c4:82:06:54:c3:b0:5c:b5:b1:bd:7b:38:36:
         a8:49:4c:1f:4c:58:91:69:29:68:de:1c:02:e4:3b:eb:4c:31:
         a4:91:c7:0e:86:52:7d:8d:75:b9:a9:7f:80:bf:5a:44:4a:c8:
         04:93:ac:7b:f0:a9:e3:f4:e2:ce:0c:98:ea:66:c3:df:c3:dc:
         9d:c2:60:8a:17:33:4f:1f:08:a5:d1:b7:3e:f1:08:86:d1:57:
         1d:16:08:ce:30:e7:0f:cd:13:3a:42:49:84:00:3b:49:49:c6:
         42:02:9d:fa:d0:c9:28:fa:a1:43:35:19:b4:55:f5:e7:1e:c5:
         83:2f:3b:2f:1d:84:2b:da:82:21:27:e8:64:f3:9d:f6:14:a9:
         a9:0e:c2:fc:64:9c:63:ca:fe:ab:1a:ff:60:b3:be:07:05:cb:
         7b:96:b4:24:46:ff:44:33:16:62:a5:7e:f4:51:cc:d2:45:45:
         5e:da:ff:04:58:eb:c2:71:4b:ea:51:bc:4c:c4:a4:15:4b:b1:
         b1:14:61:0a:79:91:ee:97:0c:22:bd:5a:06:a5:2d:90:0f:a1:
         72:30:5c:72:45:bd:d3:f5:d0:d7:42:8d:90:93:ca:59:72:48:
         2c:5d:23:5e
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUSDoHlOXq4pVpjn/4B/RwAT4MXF4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYxQUJGMjM3Mjc3RkVBRjI0MTE3RUJCRTI4RDlENTdF
NDQyNDMzQTAeFw0yNTAyMjExNDA1MzVaFw0yNjAyMjAxNDEwMzVaMDMxMTAvBgNV
BAMTKDc0QkRDQUJFRTkxRjIzQUExM0Y1QTk3ODc5QTUyMTEwQ0ZGMEVDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqtP1Muj6eTcWGbYxpA6l92kFn
QHk6XH615fFOvloXwh8D4HF65fRGmauMb4/z8BrX0ckR5Xi2OB2T7tvn2p7In6mf
RlDnbb07/00EDQy9COcUD7I7f8toMad18yEWJMvGnL+VSvBofIWz+BSHryk1s+gs
v/A1m7/iLQL8hD1pgBP6yx9hLBNASaxOPSSTetIH9dSfSWzeE54B6rtnz/zVkU5g
8TNroB1wJho4ie1GDM7oV2+k7tQsDC0S8j6VFn3XhtbFljcnWtNMTsFZdHkNXLeL
2apGfmFn1XNo9rbRihnI3BNZyJjzfhdnZzVd4ZrIX4STMJ9uyr85ulWN1MUJAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUdL3KvukfI6oT9al4eaUhEM/w7IgwHwYDVR0j
BBgwFoAUthq/I3J3/q8kEX674o2dV+RCQzowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRDlEODEwOUI1QjBFRDg2RkY5MUMwMjJEOTY0MTJENkRB
MDg2Qjg2NDlDNTk3NUJBREVCMzY5RjUwRjIzOTIzLzAvQjYxQUJGMjM3Mjc3RkVB
RjI0MTE3RUJCRTI4RDlENTdFNDQyNDMzQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjFBQkYyMzcyNzdGRUFGMjQx
MTdFQkJFMjhEOUQ1N0U0NDI0MzNBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUQ5RDgxMDlCNUIwRUQ4NkZGOTFDMDIyRDk2NDEyRDZEQTA4NkI4NjQ5
QzU5NzVCQURFQjM2OUY1MEYyMzkyMy8wLzMxMzkzMDJlMzkzODJlMzEzODMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMzMzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5itTAN
BgkqhkiG9w0BAQsFAAOCAQEAK1EGS/G1E95/7AtaC7SjJhBCDBgUWrbEggZUw7Bc
tbG9ezg2qElMH0xYkWkpaN4cAuQ760wxpJHHDoZSfY11ual/gL9aRErIBJOse/Cp
4/TizgyY6mbD38PcncJgihczTx8IpdG3PvEIhtFXHRYIzjDnD80TOkJJhAA7SUnG
QgKd+tDJKPqhQzUZtFX15x7Fgy87Lx2EK9qCISfoZPOd9hSpqQ7C/GScY8r+qxr/
YLO+BwXLe5a0JEb/RDMWYqV+9FHM0kVFXtr/BFjrwnFL6lG8TMSkFUuxsRRhCnmR
7pcMIr1aBqUtkA+hcjBcckW90/XQ10KNkJPKWXJILF0jXg==
-----END CERTIFICATE-----
Generated at Fri Apr 11 16:31:24 2025 by rpki-client