Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa
File:                     3139302e322e31372e302f32342d3234203d3e20323634363338.roa (raw, json)
Hash identifier:          eH7tySZrdr37SbH5FntZzdjuOhsIAKPA43Y8CRC/Q+M=
Subject key identifier:   3E:DC:92:31:23:27:69:56:08:78:9E:CF:CA:90:67:15:F3:96:27:8B
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       5FECAE5A8FDD4B59C2ED2ADC69CA504D792B7374
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa
Signing time:             Tue 04 Feb 2025 20:04:11 +0000
ROA not before:           Tue 04 Feb 2025 19:59:11 +0000
ROA not after:            Tue 03 Feb 2026 20:04:11 +0000
asID:                     264638
IP address blocks:        190.2.17.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ec:ae:5a:8f:dd:4b:59:c2:ed:2a:dc:69:ca:50:4d:79:2b:73:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:11 2025 GMT
            Not After : Feb  3 20:04:11 2026 GMT
        Subject: CN=3EDC92312327695608789ECFCA906715F396278B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:82:16:7a:8f:20:be:0e:91:31:ef:27:15:b5:
                    3b:1e:0f:d2:0b:54:d9:78:d1:4b:e6:68:b3:65:6e:
                    f7:3a:95:96:eb:9f:8a:e9:a5:43:fb:81:cd:4f:86:
                    48:7c:60:bd:5e:38:8b:8f:30:39:ba:9b:bb:4c:ce:
                    01:81:77:28:01:69:b2:92:92:0d:46:09:cf:f8:d5:
                    e5:02:42:e2:9d:ec:10:2d:58:e6:75:26:b6:31:00:
                    00:11:14:4e:bb:7d:b7:b2:13:7b:47:8b:4a:ff:de:
                    f1:8b:52:65:07:17:04:89:e6:e9:fb:25:0a:b4:3d:
                    c7:bc:8a:b0:b9:ec:8d:3f:23:9f:90:81:19:7c:90:
                    21:89:92:8d:0a:5e:66:4e:c4:14:4b:61:05:a4:21:
                    97:e4:31:89:10:9e:9e:26:19:60:86:6e:f6:58:69:
                    e2:37:55:59:6a:da:45:b5:a3:a4:46:83:4c:de:2b:
                    6f:45:3a:78:28:74:45:6c:9d:a0:82:67:8c:64:ff:
                    b0:85:01:63:0b:66:f6:71:fa:34:67:07:75:1f:fc:
                    c6:c2:b6:fb:a8:e6:ca:88:d1:b4:bd:d7:f5:29:47:
                    63:56:c0:70:d4:f3:1b:37:b0:64:04:9d:44:e1:a5:
                    9a:0a:c3:c4:40:bd:97:6a:2f:12:ec:6d:6b:2c:e4:
                    06:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:DC:92:31:23:27:69:56:08:78:9E:CF:CA:90:67:15:F3:96:27:8B
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e31372e302f32342d3234203d3e20323634363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:09:27:5f:43:44:6c:23:a3:8c:90:fc:70:ae:1d:c5:36:
         2e:74:6d:64:83:86:0d:01:e2:c4:dd:c2:28:86:e1:25:bf:07:
         d5:ad:c5:20:3e:43:a9:21:12:c8:1b:04:02:84:26:28:55:70:
         85:1e:36:47:ef:c9:a8:59:2e:4a:ae:4c:fc:59:89:58:65:3c:
         a7:c2:dd:28:f9:b0:6e:93:8e:0b:c1:7e:a9:a1:92:94:f5:cf:
         66:b3:2f:02:04:af:07:4c:11:fd:08:de:07:8e:de:fa:1a:90:
         95:02:f7:64:c1:14:7b:1e:34:35:c9:a6:10:25:6e:3c:aa:95:
         c7:43:3d:e3:56:0a:6c:0b:8a:7f:38:e1:d8:3d:a7:ce:3c:f2:
         63:8b:db:77:8f:bc:de:43:51:35:7f:cb:7e:27:9c:28:18:5b:
         8e:34:97:36:5b:60:7f:6e:0b:f3:d8:83:aa:87:ff:e8:ad:3b:
         a9:f1:50:93:f8:b2:a5:1d:89:1d:ef:70:2a:2f:20:3d:75:d7:
         aa:ee:14:52:c8:c4:24:b2:f0:ff:37:63:a0:ca:71:e2:04:3d:
         4f:bc:62:37:a1:16:77:22:18:85:96:79:32:2b:11:44:65:23:
         04:d9:81:28:a0:a5:c7:b9:f8:5a:78:f8:1d:cb:25:c4:56:89:
         c4:23:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:27 2025 by rpki-client