Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa
File:                     3139302e35372e39362e302f32312d3234203d3e203132313237.roa (raw, json)
Hash identifier:          RftOQJ3uCI+MM0TZlyKydWoO+QpfLXKvzNcat9BcYl0=
Subject key identifier:   97:30:7A:C3:B6:48:2A:A4:AC:DE:4E:48:E2:05:D3:00:20:19:C3:6C
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       4ACD9B500CCEF2EC3F68D9336F9F325B1E1DF4AE
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:35 +0000
ROA not before:           Tue 04 Feb 2025 18:46:35 +0000
ROA not after:            Tue 03 Feb 2026 18:51:35 +0000
asID:                     12127
IP address blocks:        190.57.96.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cd:9b:50:0c:ce:f2:ec:3f:68:d9:33:6f:9f:32:5b:1e:1d:f4:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:35 2025 GMT
            Not After : Feb  3 18:51:35 2026 GMT
        Subject: CN=97307AC3B6482AA4ACDE4E48E205D3002019C36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9e:ca:87:1d:06:64:5d:77:05:48:1f:dd:da:
                    7c:b7:dc:b1:10:8b:67:9a:90:5c:38:91:07:69:1d:
                    46:fd:40:c6:91:68:10:f7:22:9e:84:85:37:12:1e:
                    34:3c:d6:f7:25:d9:72:fd:bd:38:14:31:ca:7b:2d:
                    73:04:57:21:e7:60:30:1f:b0:b5:2e:13:d0:bb:70:
                    f2:7c:c1:ee:ba:b9:32:b7:da:e8:95:67:6c:e8:fb:
                    4a:04:97:67:1a:d8:c5:1b:6f:ec:b6:18:8e:33:d1:
                    f9:8a:b4:df:06:3e:3b:c4:7e:80:2a:ae:c5:8b:bf:
                    5a:19:ba:d6:ef:e5:a0:e5:df:6b:d3:4d:a8:38:56:
                    e7:98:f3:3a:ca:eb:85:30:cf:38:35:36:a4:24:c0:
                    ae:4a:92:2d:89:07:aa:4c:03:53:4c:a4:12:71:34:
                    bc:7b:ba:e6:e6:9d:9d:a4:e8:ff:fd:1e:95:6a:ba:
                    04:3a:43:d1:7a:ee:00:39:79:9e:30:39:38:49:26:
                    a5:f4:ff:de:a8:cf:14:00:6a:a7:4d:bb:fa:75:02:
                    7d:3d:86:f2:2a:a2:ce:a9:ef:06:bc:36:7f:c8:3d:
                    8b:84:ef:6a:0b:d7:b6:1e:89:d0:e1:c2:93:a3:e7:
                    cf:e4:88:0e:31:84:2d:a8:d3:24:3a:67:7a:f5:38:
                    2a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:30:7A:C3:B6:48:2A:A4:AC:DE:4E:48:E2:05:D3:00:20:19:C3:6C
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e39362e302f32312d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1b:58:5d:87:c4:52:09:8d:a4:54:29:cc:0f:73:33:e9:15:38:
         74:90:4b:6d:cb:ff:18:a8:fd:ad:f3:5d:bf:d4:ac:26:3d:90:
         94:a2:0d:65:a1:c2:ef:43:6e:da:eb:d0:85:3b:9e:49:1e:e7:
         57:3c:e7:e3:3f:b1:bc:a4:81:a7:89:d6:78:71:4f:39:75:2d:
         c8:0c:41:8d:c9:ab:4e:de:ec:47:9f:02:7d:35:ea:42:b7:8c:
         f4:e4:09:8f:d8:f2:92:65:43:fa:7f:89:c4:5d:78:dd:2c:26:
         11:7a:fa:ea:19:99:be:8c:98:a3:3c:f2:57:e1:fd:b8:ce:0d:
         2e:96:3b:f1:6a:73:ff:12:dc:7e:71:a5:b1:36:3b:9b:9e:ac:
         a9:7b:39:7d:57:a2:e9:8c:49:5f:1a:7c:62:8c:87:61:28:37:
         67:d7:e3:d6:f2:c6:5f:a3:76:bf:fd:d8:e3:86:8a:94:2e:cf:
         53:7b:09:bc:f5:35:6a:9d:51:ba:9f:fb:63:58:75:dd:ed:46:
         2a:36:83:3f:f4:cb:2f:f2:6a:e0:b6:16:a0:95:7d:30:53:f9:
         f5:c0:6f:16:37:b2:4c:81:18:e4:39:d9:f9:b8:44:a0:55:bf:
         69:16:09:7c:cb:e0:e4:15:49:34:5f:60:1b:f6:a6:4e:ef:d3:
         27:c6:ef:57
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSs2bUAzO8uw/aNkzb58yWx4d9K4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNTAyMDQxODQ2MzVaFw0yNjAyMDMxODUxMzVaMDMxMTAvBgNV
BAMTKDk3MzA3QUMzQjY0ODJBQTRBQ0RFNEU0OEUyMDVEMzAwMjAxOUMzNkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnsqHHQZkXXcFSB/d2ny33LEQ
i2eakFw4kQdpHUb9QMaRaBD3Ip6EhTcSHjQ81vcl2XL9vTgUMcp7LXMEVyHnYDAf
sLUuE9C7cPJ8we66uTK32uiVZ2zo+0oEl2ca2MUbb+y2GI4z0fmKtN8GPjvEfoAq
rsWLv1oZutbv5aDl32vTTag4VueY8zrK64Uwzzg1NqQkwK5Kki2JB6pMA1NMpBJx
NLx7uubmnZ2k6P/9HpVqugQ6Q9F67gA5eZ4wOThJJqX0/96ozxQAaqdNu/p1An09
hvIqos6p7wa8Nn/IPYuE72oL17YeidDhwpOj58/kiA4xhC2o0yQ6Z3r1OCr1AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUlzB6w7ZIKqSs3k5I4gXTACAZw2wwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzkzNjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzIzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+OWAwDQYJ
KoZIhvcNAQELBQADggEBABtYXYfEUgmNpFQpzA9zM+kVOHSQS23L/xio/a3zXb/U
rCY9kJSiDWWhwu9Dbtrr0IU7nkke51c85+M/sbykgaeJ1nhxTzl1LcgMQY3Jq07e
7EefAn016kK3jPTkCY/Y8pJlQ/p/icRdeN0sJhF6+uoZmb6MmKM88lfh/bjODS6W
O/Fqc/8S3H5xpbE2O5uerKl7OX1XoumMSV8afGKMh2EoN2fX49byxl+jdr/92OOG
ipQuz1N7Cbz1NWqdUbqf+2NYdd3tRio2gz/0yy/yauC2FqCVfTBT+fXAbxY3skyB
GOQ52fm4RKBVv2kWCXzL4OQVSTRfYBv2pk7v0yfG71c=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:42 2025 by rpki-client