Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
File:                     3139322e3138382e35332e302f32342d3234203d3e203233343837.roa (raw, json)
Hash identifier:          5LvJeTdlLQU3DOqDV0FZcrbbPWKmwrdfh0E3sLf2MZM=
Subject key identifier:   4D:22:42:BC:7B:4A:37:8B:84:6D:F2:55:0F:7F:0B:D7:CE:26:44:02
Certificate issuer:       /CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
Certificate serial:       7BFF021A5245D465DD6A1F9371890832C11B7C0E
Authority key identifier: D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa
Signing time:             Tue 04 Feb 2025 18:22:45 +0000
ROA not before:           Tue 04 Feb 2025 18:17:45 +0000
ROA not after:            Tue 03 Feb 2026 18:22:45 +0000
asID:                     23487
IP address blocks:        192.188.53.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:ff:02:1a:52:45:d4:65:dd:6a:1f:93:71:89:08:32:c1:1b:7c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D73871448A193F4B351257D5A2A9AA22FCFECBB4
        Validity
            Not Before: Feb  4 18:17:45 2025 GMT
            Not After : Feb  3 18:22:45 2026 GMT
        Subject: CN=4D2242BC7B4A378B846DF2550F7F0BD7CE264402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:87:b6:1e:ef:50:6f:a2:d3:8d:fd:46:45:
                    33:99:8f:24:db:28:e7:68:05:1d:1f:e2:ca:13:cb:
                    e3:0c:f3:9e:ac:3f:7d:33:cd:f7:62:8c:3c:12:71:
                    62:b2:69:6a:1c:97:cd:4f:7c:50:59:8a:b1:d5:f9:
                    0e:a8:53:75:4f:db:80:49:21:50:95:c5:27:cf:a6:
                    0d:6c:a7:79:7e:fb:8c:cb:47:6f:d0:70:7e:dc:56:
                    6c:61:f7:ab:c7:1e:4a:33:f8:d4:6e:33:38:f1:bc:
                    71:ab:73:1f:6d:85:6b:af:9f:01:6a:7d:ff:b7:7a:
                    df:79:76:1c:27:e2:08:c5:1a:2e:0b:ba:a6:78:dc:
                    d9:0c:fa:8b:bb:bd:3b:eb:27:5d:a3:5e:ae:5a:aa:
                    5f:5f:3b:98:b5:c7:0e:50:3d:55:51:61:ac:43:a1:
                    4c:62:3f:b0:e3:b7:84:82:41:20:d4:de:1f:4e:ea:
                    86:a1:46:54:fd:9d:d9:95:f7:8c:f1:33:78:54:d3:
                    bd:fc:a9:5b:cf:5f:7c:53:4f:2f:9c:9f:8f:30:47:
                    f3:8f:55:2e:12:e8:02:ca:4f:86:4c:a8:a9:19:85:
                    15:83:fc:13:58:1c:c2:ff:53:9c:ae:40:76:a7:79:
                    05:86:80:0d:31:e4:ec:4c:a8:67:f2:31:ff:96:da:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:22:42:BC:7B:4A:37:8B:84:6D:F2:55:0F:7F:0B:D7:CE:26:44:02
            X509v3 Authority Key Identifier:
                keyid:D7:38:71:44:8A:19:3F:4B:35:12:57:D5:A2:A9:AA:22:FC:FE:CB:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D73871448A193F4B351257D5A2A9AA22FCFECBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BDEA63C960B2FCA831D48432258A14C5EF2B4AD646EE9452D6357F4C7BBF0D54/0/3139322e3138382e35332e302f32342d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9d:c2:d0:73:39:62:3b:10:4d:a1:1e:d7:ec:cd:6e:fd:9c:
         2b:87:6f:81:4a:39:81:f6:f9:ab:b6:d8:05:b8:ec:5f:38:5a:
         0c:fd:1c:70:25:11:59:92:6d:9f:af:cb:f4:cc:f8:2a:23:dd:
         e2:27:2d:46:5f:2f:7f:6c:83:61:96:35:cb:d2:82:b0:07:a4:
         a2:1f:f0:f1:18:7f:40:3e:92:23:c4:56:06:9d:52:a0:4f:41:
         1e:19:1b:50:47:be:e1:3f:c1:39:b7:40:ed:65:81:bc:d3:eb:
         36:7f:a4:1d:bc:61:77:7d:bf:3e:a7:21:0f:e6:c7:26:4a:04:
         c2:de:4d:2d:3e:be:ca:3d:aa:18:a8:5d:53:58:18:d0:1f:fa:
         c0:a5:ae:a5:25:1f:7c:0e:e5:4e:a8:bd:02:a5:75:70:ba:8f:
         38:bc:5c:4d:00:65:86:74:a7:30:01:3f:8e:11:82:3c:34:79:
         15:44:e7:aa:c0:7b:33:66:79:54:1f:80:d1:30:2b:87:5f:6b:
         a8:46:f3:32:be:1f:d8:4d:35:a8:8e:b0:da:01:b3:cf:fa:32:
         5e:68:a9:bb:72:c1:48:97:e4:2e:d9:46:6a:b5:6f:74:0f:86:
         c8:db:54:04:3b:8b:21:56:f4:57:03:54:9a:02:3b:14:69:fa:
         ae:66:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:06 2025 by rpki-client