Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
File:                     3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa (raw, json)
Hash identifier:          vlRqo7Sc47iuX8BJILgb1XLI+LYfac9Uj2uc9+9f/58=
Subject key identifier:   57:CA:A5:F1:3E:F5:34:C1:61:0E:0F:95:73:76:F0:C7:2E:2C:75:7B
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       2099D76673C9CD698D8D69DF80316C83D0D03AA0
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
Signing time:             Tue 04 Feb 2025 18:46:08 +0000
ROA not before:           Tue 04 Feb 2025 18:41:08 +0000
ROA not after:            Tue 03 Feb 2026 18:46:08 +0000
asID:                     28509
IP address blocks:        201.139.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:d7:66:73:c9:cd:69:8d:8d:69:df:80:31:6c:83:d0:d0:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: Feb  4 18:41:08 2025 GMT
            Not After : Feb  3 18:46:08 2026 GMT
        Subject: CN=57CAA5F13EF534C1610E0F957376F0C72E2C757B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:5c:f5:6a:7b:2d:e6:23:8d:29:99:0b:44:
                    25:3e:dd:a1:30:a9:b6:03:36:3f:41:85:41:35:55:
                    0a:80:a5:39:ea:83:7d:af:1d:ce:7f:26:06:30:05:
                    b4:fa:3e:72:56:40:e2:40:91:19:64:3d:bd:b9:c3:
                    31:32:ef:cb:9c:c7:c1:b7:21:f4:8e:ef:bc:5d:34:
                    e6:96:53:ec:fb:07:f9:b5:50:dc:6a:4f:56:2a:f2:
                    71:b1:2a:0d:42:37:2c:15:c2:22:69:ed:42:c0:5e:
                    21:31:f0:57:f8:ab:c7:c3:59:64:36:4b:ad:ea:b1:
                    b7:f1:35:b1:3e:27:54:54:ab:ca:bb:7f:89:a6:96:
                    d3:f7:4a:17:b4:c8:3b:3c:c5:13:dc:15:a1:d0:86:
                    fc:68:da:ba:7e:73:52:cf:82:83:e9:98:57:e2:fb:
                    53:39:e0:6e:2c:6c:8d:9a:ec:cc:bc:bc:a6:5a:f5:
                    aa:e8:8d:ea:69:a8:30:df:51:21:82:61:f9:5f:a6:
                    bc:8d:8e:6e:89:fa:4b:a3:56:1e:69:56:18:47:1e:
                    61:28:9d:d1:54:dc:88:1a:4f:3d:fa:43:3d:6a:c1:
                    4e:86:aa:1a:35:c9:59:5f:4f:2b:9d:53:7a:af:9f:
                    17:bc:41:20:f9:a3:ed:81:2b:b2:5a:b0:dd:17:3f:
                    06:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CA:A5:F1:3E:F5:34:C1:61:0E:0F:95:73:76:F0:C7:2E:2C:75:7B
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:33:d1:cd:17:5d:52:af:80:db:3a:43:22:de:aa:76:4a:07:
         61:f4:0f:29:f1:84:fa:81:58:64:b6:e2:1b:9d:b6:82:20:3a:
         87:91:1f:d9:45:7f:d1:70:ac:51:1e:27:01:da:e2:93:59:29:
         c1:3a:08:9b:6c:25:bb:95:73:ab:84:0f:a3:ae:90:43:a8:62:
         0c:36:52:3f:61:ae:71:03:70:42:3d:0a:b4:f3:a5:fc:19:d9:
         9e:4f:6a:e7:84:98:8f:00:b6:ed:31:ad:61:e9:44:dd:70:12:
         e5:ea:3a:f0:a9:6b:a7:08:71:13:c0:1d:13:f8:0a:a8:2c:9d:
         4b:04:8d:cb:84:f1:c3:f5:57:95:54:24:86:86:4a:7d:cf:c4:
         b8:82:30:e6:0e:73:57:13:c6:af:9d:24:aa:e9:6c:72:84:26:
         0c:32:be:2f:f5:60:ad:a5:72:35:6b:48:be:56:25:b5:5c:86:
         af:eb:eb:cb:2d:fb:c8:b1:26:14:57:4a:f4:59:9f:70:58:8e:
         65:6c:9e:e4:6b:45:2f:77:6b:59:85:49:44:a1:89:e6:bc:17:
         55:49:00:48:f2:20:7e:b5:b1:7c:3c:0b:9f:fc:dc:ce:81:6f:
         a0:50:1b:21:5e:3b:64:9b:8e:98:24:6b:e1:27:f1:77:2a:3f:
         2c:46:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:24 2025 by rpki-client