Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203132303636.roa
File:                     3139302e39342e36342e302f31382d3234203d3e203132303636.roa (raw, json)
Hash identifier:          BSxUpuGBQke0j70FHJ7XOcgAi++RgGU7bHXUXmp1AvI=
Subject key identifier:   37:98:0E:19:C4:4D:BB:4D:0C:15:7B:44:DE:0B:42:D2:34:19:E4:A9
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       4719F1628F8DE5F945DB972CE0D8199E293DF796
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:46:58 +0000
ROA not before:           Tue 04 Feb 2025 18:41:58 +0000
ROA not after:            Tue 03 Feb 2026 18:46:58 +0000
asID:                     12066
IP address blocks:        190.94.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:19:f1:62:8f:8d:e5:f9:45:db:97:2c:e0:d8:19:9e:29:3d:f7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:58 2025 GMT
            Not After : Feb  3 18:46:58 2026 GMT
        Subject: CN=37980E19C44DBB4D0C157B44DE0B42D23419E4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:04:aa:47:e4:84:c3:28:96:a3:0a:b7:04:
                    5e:78:41:33:00:17:eb:20:8b:65:66:24:5c:1b:75:
                    1a:b9:45:87:4e:94:6b:d6:ed:36:d9:b0:6e:2d:28:
                    02:ee:b7:ad:5a:90:1a:05:79:7f:37:8d:b3:bc:8d:
                    f9:2d:91:e4:fe:53:49:a3:f3:36:6b:00:a3:29:15:
                    f7:b5:a7:c3:7f:24:2c:40:f3:ed:ed:ba:95:86:e4:
                    a9:eb:5c:6f:35:4f:61:f9:29:e3:88:46:de:24:b5:
                    08:a6:42:a1:4a:80:d5:0d:6a:82:43:6a:ef:9d:dd:
                    60:84:c6:48:3a:1c:32:eb:da:2b:53:f7:6d:a8:e0:
                    6c:1b:67:10:16:f2:30:29:5a:53:71:9d:ac:6c:a7:
                    a6:cb:27:9d:b0:d1:aa:80:bd:48:84:b6:7f:b8:0b:
                    bf:50:07:40:29:e6:78:2c:cd:2d:2f:f1:eb:1f:a7:
                    45:c4:b7:d9:0c:61:05:51:bb:70:06:5e:09:00:80:
                    26:a2:a6:14:c9:93:36:8f:2f:6a:42:01:c0:17:9a:
                    0f:cd:d1:86:c1:92:cb:cf:33:7c:0a:f0:f3:50:8d:
                    2b:c2:a6:97:fc:58:aa:c4:7e:02:a9:94:cf:d4:a0:
                    ed:8c:86:a4:98:cb:96:a0:e3:d0:7f:1b:4b:21:60:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:98:0E:19:C4:4D:BB:4D:0C:15:7B:44:DE:0B:42:D2:34:19:E4:A9
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e36342e302f31382d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         61:80:bf:3c:75:14:c6:f8:95:24:a5:33:d9:80:c7:94:5c:a4:
         22:3f:e2:db:06:32:9d:ea:99:df:95:b0:e3:14:ca:2c:e7:49:
         47:3e:08:24:93:6a:ae:a3:ca:b4:5c:39:0d:a9:b8:91:7e:2d:
         7e:b4:8f:2d:cc:b1:37:d2:f0:59:2f:38:6c:ac:cf:10:34:92:
         e2:43:de:51:7c:70:02:e6:17:80:42:a3:66:4c:e7:7a:39:2e:
         50:ac:7f:d9:85:c8:20:0e:69:82:82:9a:02:8f:e8:59:fc:d1:
         de:00:69:d0:2d:84:20:b4:41:32:08:3a:6a:2c:be:76:70:4f:
         4c:86:21:00:39:38:a6:ef:81:ad:f3:7e:18:68:6d:43:60:73:
         fd:4c:76:de:d7:0c:1d:5f:11:c5:f7:a7:21:ed:4f:96:42:be:
         0d:32:5a:66:98:2d:cd:2e:69:1d:17:68:78:ce:3f:07:30:06:
         72:0a:bb:fb:73:18:01:8c:df:30:40:f8:c6:5b:2a:2b:ec:7b:
         c0:df:c9:74:a0:7a:fa:1a:a9:1a:20:83:28:16:cc:7b:ab:a7:
         e5:9d:db:22:29:92:da:b8:19:15:73:e3:a9:5b:e5:38:de:71:
         f5:7f:b7:1a:fd:e6:09:75:e0:d4:de:af:ab:a2:0e:21:0c:e2:
         22:73:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:45 2025 by rpki-client