Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa
File:                     3139302e3231302e35342e302f32342d3234203d3e203238303335.roa (raw, json)
Hash identifier:          8mGjxMPjEGUxANxNu+6KtNg0n0QbDoZN2Lxju+8l03Y=
Subject key identifier:   86:71:12:E1:7A:C8:CE:41:FD:33:47:A7:8D:2C:8D:52:4E:89:75:80
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       0EB6D9F4DB9D5D8901CDE67057400760ABA9B530
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa
Signing time:             Tue 04 Feb 2025 20:04:13 +0000
ROA not before:           Tue 04 Feb 2025 19:59:13 +0000
ROA not after:            Tue 03 Feb 2026 20:04:13 +0000
asID:                     28035
IP address blocks:        190.210.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:d9:f4:db:9d:5d:89:01:cd:e6:70:57:40:07:60:ab:a9:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:13 2025 GMT
            Not After : Feb  3 20:04:13 2026 GMT
        Subject: CN=867112E17AC8CE41FD3347A78D2C8D524E897580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b8:04:a0:f5:3b:32:b9:7d:7c:5d:c1:ec:c9:
                    35:9d:7b:5f:be:5e:31:75:75:4e:e7:d1:5a:0e:d1:
                    20:f6:55:27:60:b0:34:6c:f3:d7:3c:08:c1:b3:0d:
                    03:86:54:a2:b5:01:70:f4:80:3d:ea:1c:f5:bb:7a:
                    55:53:21:4e:57:08:05:1f:ce:3c:2e:5a:18:53:7c:
                    07:62:6e:8c:cb:1e:fd:a5:d5:2e:ca:47:4a:8b:1d:
                    60:68:c3:50:5d:07:81:cd:c4:bd:8a:70:a3:95:39:
                    cb:67:ff:36:39:24:50:48:f1:41:8d:ff:70:12:a3:
                    71:02:e5:ca:28:21:31:69:83:85:49:4d:0f:6a:ee:
                    34:59:b7:ae:45:f0:a6:57:c8:8b:b7:d2:3e:1b:76:
                    3e:32:d5:34:d3:66:df:1a:47:e7:be:f2:b6:13:40:
                    d4:ce:e8:63:cc:16:8c:9a:9d:69:27:67:b9:a1:18:
                    b5:8b:be:7b:5d:be:52:5c:99:48:1a:ee:79:80:ad:
                    65:99:f4:d3:b5:14:19:50:4f:cd:2a:3d:be:00:dc:
                    ce:73:9b:f5:38:e2:7c:37:b7:e3:ff:e6:8b:a8:ce:
                    6c:60:5f:1f:83:54:f8:55:2e:de:af:5e:aa:c8:71:
                    cf:29:48:5c:86:fa:a7:2b:34:c6:7d:92:7b:a7:3a:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:71:12:E1:7A:C8:CE:41:FD:33:47:A7:8D:2C:8D:52:4E:89:75:80
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e35342e302f32342d3234203d3e203238303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:05:88:38:37:f1:dd:93:ad:f0:60:c5:26:e0:3a:1e:a7:34:
         a2:4c:99:2f:a1:ce:89:54:ef:fe:6f:48:09:19:79:c1:c5:f4:
         bd:8f:40:3b:6f:ab:f1:a8:8f:83:ec:4b:3a:44:1e:4c:5e:29:
         8a:35:77:b1:54:0b:8f:be:41:a7:03:95:b1:45:0b:61:2a:20:
         91:76:64:e9:89:9e:41:50:56:ea:b8:6a:f2:b9:d8:ba:c5:9d:
         b1:71:6e:94:08:cb:19:fa:2c:5a:44:54:e9:67:5f:69:4b:45:
         c0:a2:2b:74:e5:99:2c:ff:ce:4d:0b:d6:58:68:b4:4d:38:c8:
         72:49:e2:94:91:9d:5d:b0:af:ba:55:ca:e2:8f:71:5c:b3:41:
         65:6d:d6:63:8a:61:12:32:1d:20:87:e6:14:0b:21:94:75:a3:
         9c:66:54:fe:a1:9c:52:ae:a7:da:bd:46:ec:5e:c8:d8:9f:35:
         b3:c0:30:1f:b9:84:cd:93:2a:97:49:fa:ef:72:0f:46:09:df:
         a5:41:03:49:23:31:9a:03:a8:21:af:1c:b7:c2:3d:e4:a8:6c:
         5d:aa:69:c9:7d:98:c7:30:52:77:dd:8f:23:08:81:95:e1:c9:
         c1:c4:58:9b:84:98:f1:9a:83:82:9b:68:db:59:88:ca:ef:9c:
         e7:8a:64:d2
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDrbZ9NudXYkBzeZwV0AHYKuptTAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTcxRjE0RDVBRUVDODlGNEFFNDEwNEMwRjYwOURFMjc3
RDFEM0NENzAeFw0yNTAyMDQxOTU5MTNaFw0yNjAyMDMyMDA0MTNaMDMxMTAvBgNV
BAMTKDg2NzExMkUxN0FDOENFNDFGRDMzNDdBNzhEMkM4RDUyNEU4OTc1ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuASg9TsyuX18XcHsyTWde1++
XjF1dU7n0VoO0SD2VSdgsDRs89c8CMGzDQOGVKK1AXD0gD3qHPW7elVTIU5XCAUf
zjwuWhhTfAdibozLHv2l1S7KR0qLHWBow1BdB4HNxL2KcKOVOctn/zY5JFBI8UGN
/3ASo3EC5cooITFpg4VJTQ9q7jRZt65F8KZXyIu30j4bdj4y1TTTZt8aR+e+8rYT
QNTO6GPMFoyanWknZ7mhGLWLvntdvlJcmUga7nmArWWZ9NO1FBlQT80qPb4A3M5z
m/U44nw3t+P/5ouozmxgXx+DVPhVLt6vXqrIcc8pSFyG+qcrNMZ9knunOtkVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhnES4XrIzkH9M0enjSyNUk6JdYAwHwYDVR0j
BBgwFoAUFx8U1a7sifSuQQTA9gneJ30dPNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMTM4MkIxQTRDQ0FCNjZEQTYxOEIxRUY5QUI0QzYzMDg2
RUFBQTE4RTdGMEM5NUJEOTQxODAzQzQ2RjVENTY3LzAvMTcxRjE0RDVBRUVDODlG
NEFFNDEwNEMwRjYwOURFMjc3RDFEM0NENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNzFGMTRENUFFRUM4OUY0QUU0
MTA0QzBGNjA5REUyNzdEMUQzQ0Q3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzEzODJCMUE0Q0NBQjY2REE2MThCMUVGOUFCNEM2MzA4NkVBQUExOEU3
RjBDOTVCRDk0MTgwM0M0NkY1RDU2Ny8wLzMxMzkzMDJlMzIzMTMwMmUzNTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzODMwMzMzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7SNjAN
BgkqhkiG9w0BAQsFAAOCAQEAMQWIODfx3ZOt8GDFJuA6Hqc0okyZL6HOiVTv/m9I
CRl5wcX0vY9AO2+r8aiPg+xLOkQeTF4pijV3sVQLj75BpwOVsUULYSogkXZk6Yme
QVBW6rhq8rnYusWdsXFulAjLGfosWkRU6WdfaUtFwKIrdOWZLP/OTQvWWGi0TTjI
cknilJGdXbCvulXK4o9xXLNBZW3WY4phEjIdIIfmFAshlHWjnGZU/qGcUq6n2r1G
7F7I2J81s8AwH7mEzZMql0n673IPRgnfpUEDSSMxmgOoIa8ct8I95KhsXappyX2Y
xzBSd92PIwiBleHJwcRYm4SY8ZqDgpto21mIyu+c54pk0g==
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:40:25 2025 by rpki-client