Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137322e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          TPjvNTRSR4ufYXbbhrS+4CCd0b3Ku2DabUVr1HLR44k=
Subject key identifier:   F1:B5:54:7F:E3:3E:F8:E6:0A:6B:F8:50:2A:A3:86:94:3A:A8:A6:08
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       32929FD0AE9319326B7751C3EEA0328D10787FDE
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:48 +0000
ROA not before:           Tue 04 Feb 2025 18:22:48 +0000
ROA not after:            Tue 03 Feb 2026 18:27:48 +0000
asID:                     28099
IP address blocks:        190.3.172.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:92:9f:d0:ae:93:19:32:6b:77:51:c3:ee:a0:32:8d:10:78:7f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:48 2025 GMT
            Not After : Feb  3 18:27:48 2026 GMT
        Subject: CN=F1B5547FE33EF8E60A6BF8502AA386943AA8A608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:ba:36:b4:42:9a:66:60:4f:b0:99:7b:6e:
                    0d:08:f2:3e:fe:d6:3a:f6:f1:80:9c:99:c3:03:be:
                    d5:1b:02:90:1c:34:57:7d:40:74:1a:e9:06:02:d0:
                    26:73:7d:26:98:c4:ef:86:d8:ea:38:b5:21:47:d7:
                    ce:81:38:cf:a1:a4:87:0e:f7:94:81:c8:72:55:2a:
                    c7:15:32:10:02:90:2b:4c:f0:de:62:9c:d1:48:eb:
                    a0:a5:82:53:c1:15:b8:57:01:5c:cb:f6:5e:25:ca:
                    d0:a5:fe:5f:79:7d:54:4b:ca:87:04:db:33:7f:d0:
                    65:c8:0b:bc:9a:9d:f1:2e:14:41:1b:d8:3f:c1:ea:
                    ee:d3:1b:af:62:b0:ad:26:82:a7:83:47:65:1d:61:
                    f4:2c:80:ad:d8:6c:f7:0a:d6:5f:fe:ae:f8:2b:d4:
                    0a:e1:31:8e:4b:bd:97:f7:af:09:8c:41:84:21:c7:
                    ea:b8:22:a1:a3:84:53:b1:4c:a8:ce:1f:e6:cf:4b:
                    72:a6:33:2f:1e:8a:91:2b:05:55:03:e9:59:e9:af:
                    7c:54:16:10:9e:88:a0:5d:eb:88:0f:19:0c:ad:0c:
                    c8:57:0b:b5:de:e0:ee:6b:b3:65:96:17:a7:0b:c0:
                    68:e8:f4:f5:4f:69:7a:61:96:9e:c7:8c:18:10:d6:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B5:54:7F:E3:3E:F8:E6:0A:6B:F8:50:2A:A3:86:94:3A:A8:A6:08
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137322e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:24:c3:d3:da:92:da:c6:04:0c:d8:cc:60:93:f3:34:80:f0:
         a3:f2:20:74:2c:43:5b:bb:1d:94:33:13:f2:1e:81:7a:a5:0b:
         f3:91:5a:96:ec:4e:ab:b2:67:ae:c6:b3:c5:a7:af:1a:82:61:
         0b:15:a4:18:e6:63:09:91:86:3a:d8:18:5c:4a:97:60:71:f7:
         4d:51:9f:2f:37:c6:3c:62:ae:5f:fb:c4:a7:ff:e9:0d:fd:8b:
         b3:b9:bd:b8:c0:98:6d:99:72:bf:42:8b:57:29:7b:24:5b:9d:
         b8:0a:aa:8d:62:cf:cd:cd:b8:13:f8:37:b3:9b:30:dd:20:2d:
         2b:0f:f2:ee:f0:18:1f:d6:bb:7c:66:e3:ca:23:5a:4a:63:3f:
         43:f1:e3:f1:7c:19:cc:94:94:25:90:a2:e4:2c:2e:ca:0c:a1:
         6f:da:77:a5:9e:33:6b:d2:c8:53:31:ca:33:36:2c:8f:1f:a1:
         76:d4:97:4c:78:6c:8b:81:ac:65:c2:24:8d:d3:24:a6:5c:9e:
         eb:f6:83:07:dc:df:57:06:3f:35:56:04:eb:59:d7:d0:a4:29:
         eb:46:c6:f5:9b:d4:7f:23:ee:47:0a:ec:44:31:5c:c6:0f:a9:
         d3:0e:04:60:8f:8d:04:e7:c8:8b:ac:7a:fe:8c:13:10:7f:c4:
         ba:1f:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:49 2025 by rpki-client