Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e3131342e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          aWpCL8c3RvKqpImZ6b8qyLtM875by1ccX22EHn/vEJI=
Subject key identifier:   19:9E:C2:61:B9:9C:CD:44:BA:31:F0:42:51:4C:21:6B:DF:BD:5F:63
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0C4736FE85340AA2FCAFFDC612C93B27229CFD53
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:33 +0000
ROA not before:           Tue 04 Feb 2025 18:46:33 +0000
ROA not after:            Tue 03 Feb 2026 18:51:33 +0000
asID:                     12127
IP address blocks:        190.57.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:47:36:fe:85:34:0a:a2:fc:af:fd:c6:12:c9:3b:27:22:9c:fd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:33 2025 GMT
            Not After : Feb  3 18:51:33 2026 GMT
        Subject: CN=199EC261B99CCD44BA31F042514C216BDFBD5F63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:9d:1b:2d:06:95:ac:4e:ab:03:57:dc:d8:
                    e9:f8:2e:1a:7e:54:9e:9f:b4:6b:9e:47:b0:cf:20:
                    fa:b9:22:f4:7e:b7:ec:de:f5:59:5c:e1:4a:b4:19:
                    7d:92:3d:75:8a:b9:72:4f:cb:78:a2:ee:94:62:cb:
                    3d:52:fb:c8:00:48:e8:5d:1b:09:c2:75:cb:ab:51:
                    76:4b:24:3b:00:71:f8:9f:c8:c8:0f:f6:7a:d0:d9:
                    9a:e5:78:01:43:08:23:6e:b8:8e:43:c7:46:77:23:
                    a4:3b:47:97:de:18:23:01:4e:e5:8a:67:86:0f:3f:
                    04:4a:05:8f:38:d4:3a:04:00:26:86:75:34:c2:c1:
                    87:db:13:b7:bf:0d:d6:6a:5a:5e:d1:d1:0c:6d:4a:
                    3c:67:36:8d:f9:66:72:51:5d:2f:12:d3:02:2f:c8:
                    85:35:a0:9d:df:8f:82:ac:83:b6:47:bd:97:1f:d2:
                    da:fa:bb:76:66:b3:a0:43:c8:8c:14:ac:eb:eb:98:
                    3e:3d:8c:73:72:53:71:9e:84:e8:43:67:e9:69:b0:
                    08:f1:51:04:13:9e:7b:c8:3a:5e:8a:f1:bf:49:96:
                    66:0a:67:c6:19:4d:9e:f0:05:0a:f3:04:ff:1d:c2:
                    d1:1b:ea:53:2e:18:85:13:c0:a0:f3:af:81:cf:27:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9E:C2:61:B9:9C:CD:44:BA:31:F0:42:51:4C:21:6B:DF:BD:5F:63
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3131342e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:75:35:60:a7:66:73:b9:57:57:3e:c8:af:63:eb:73:29:
         6f:a2:bf:17:d6:a2:37:44:1d:b4:59:35:ee:98:8f:f6:4b:2a:
         af:92:47:2c:a2:de:2e:54:0e:26:4a:5b:62:92:5f:67:a3:65:
         40:eb:d6:a3:7c:5e:53:85:be:3d:b9:4e:92:4b:eb:ef:4e:2b:
         92:df:b1:3b:62:24:c5:f1:5d:26:6a:64:44:89:64:50:5e:fb:
         32:c0:aa:33:89:c4:90:7b:9a:12:6d:41:b3:84:a1:49:03:6f:
         91:9e:8d:47:5c:b4:34:82:58:4a:dd:50:ef:7a:f2:db:7c:a3:
         03:0a:da:12:9a:90:ed:1a:6f:f7:83:18:28:66:2e:35:5e:cf:
         77:80:45:72:31:9e:9d:f8:e5:83:61:ae:0d:bd:d3:ce:b1:72:
         7b:35:a8:25:5e:79:24:0e:be:dc:3a:4a:07:7e:66:59:bb:dd:
         ba:77:97:06:95:b3:65:8a:07:ab:fa:b5:48:ee:dd:25:6d:8b:
         8d:88:0b:f1:7a:e8:ee:1f:b2:66:15:08:00:59:f5:7c:c3:5d:
         76:f5:8c:89:2d:96:fa:79:5e:38:4e:af:3c:48:b5:d2:ab:98:
         35:91:66:6c:f5:40:e1:45:c4:09:8b:d3:71:c3:9f:9c:ed:f8:
         a9:32:00:cf
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDEc2/oU0CqL8r/3GEsk7JyKc/VMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzNaFw0yNjAyMDMxODUxMzNaMDMxMTAvBgNV
BAMTKDE5OUVDMjYxQjk5Q0NENDRCQTMxRjA0MjUxNEMyMTZCREZCRDVGNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlp0bLQaVrE6rA1fc2On4Lhp+
VJ6ftGueR7DPIPq5IvR+t+ze9Vlc4Uq0GX2SPXWKuXJPy3ii7pRiyz1S+8gASOhd
GwnCdcurUXZLJDsAcfifyMgP9nrQ2ZrleAFDCCNuuI5Dx0Z3I6Q7R5feGCMBTuWK
Z4YPPwRKBY841DoEACaGdTTCwYfbE7e/DdZqWl7R0QxtSjxnNo35ZnJRXS8S0wIv
yIU1oJ3fj4Ksg7ZHvZcf0tr6u3Zms6BDyIwUrOvrmD49jHNyU3GehOhDZ+lpsAjx
UQQTnnvIOl6K8b9JlmYKZ8YZTZ7wBQrzBP8dwtEb6lMuGIUTwKDzr4HPJ2nvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUGZ7CYbmczUS6MfBCUUwha9+9X2MwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzEzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjMxMzIzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL45cjAN
BgkqhkiG9w0BAQsFAAOCAQEAUA51NWCnZnO5V1c+yK9j63Mpb6K/F9aiN0QdtFk1
7piP9ksqr5JHLKLeLlQOJkpbYpJfZ6NlQOvWo3xeU4W+PblOkkvr704rkt+xO2Ik
xfFdJmpkRIlkUF77MsCqM4nEkHuaEm1Bs4ShSQNvkZ6NR1y0NIJYSt1Q73ry23yj
AwraEpqQ7Rpv94MYKGYuNV7Pd4BFcjGenfjlg2GuDb3TzrFyezWoJV55JA6+3DpK
B35mWbvduneXBpWzZYoHq/q1SO7dJW2LjYgL8Xro7h+yZhUIAFn1fMNddvWMiS2W
+nleOE6vPEi10quYNZFmbPVA4UXECYvTccOfnO34qTIAzw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:08 2025 by rpki-client