Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130372e33322e302f31392d3234203d3e203237383339.roa
File:                     3139302e3130372e33322e302f31392d3234203d3e203237383339.roa (raw, json)
Hash identifier:          YdkIp31gRlK47KbfA9pYJ/GX9I/AQt6G45MdmWUFAhs=
Subject key identifier:   80:CD:7C:5D:12:95:B8:AF:1E:95:AB:05:56:85:22:8E:60:DE:A1:49
Certificate issuer:       /CN=21B4A6594D293307A54FC67EA972CF9E807930DF
Certificate serial:       2969197F5ECE1E444A94E2E8BBC6E4DFFED8FB9E
Authority key identifier: 21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130372e33322e302f31392d3234203d3e203237383339.roa
Signing time:             Tue 04 Feb 2025 18:16:42 +0000
ROA not before:           Tue 04 Feb 2025 18:11:42 +0000
ROA not after:            Tue 03 Feb 2026 18:16:42 +0000
asID:                     27839
IP address blocks:        190.107.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:69:19:7f:5e:ce:1e:44:4a:94:e2:e8:bb:c6:e4:df:fe:d8:fb:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B4A6594D293307A54FC67EA972CF9E807930DF
        Validity
            Not Before: Feb  4 18:11:42 2025 GMT
            Not After : Feb  3 18:16:42 2026 GMT
        Subject: CN=80CD7C5D1295B8AF1E95AB055685228E60DEA149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:9c:c1:fc:1f:a0:4c:83:c7:41:5c:b5:eb:
                    96:38:bd:05:f2:dc:98:b6:00:ce:f9:8c:9a:18:e3:
                    18:78:ff:2a:d0:7b:50:ec:a6:a4:a5:e8:ff:5c:4b:
                    8f:c9:58:a5:8a:80:f4:d3:0d:a3:7a:58:6d:45:60:
                    fc:f2:9c:9f:6a:62:78:61:f3:ef:09:22:60:34:50:
                    d6:68:9a:95:18:95:49:e7:ed:79:57:17:a9:63:79:
                    87:56:b0:c5:5d:97:a5:0a:39:b5:7f:41:3e:75:77:
                    6d:06:a3:e5:d1:a7:e1:de:f0:cb:45:e3:48:ec:20:
                    af:80:32:6d:f8:41:96:cb:83:34:fd:df:9b:3a:70:
                    87:d7:4a:f9:f1:dc:8c:24:f5:a4:f9:53:27:8b:b8:
                    6c:1c:77:57:95:f6:f5:81:44:2b:55:4d:30:19:b8:
                    59:b4:b2:5a:25:fe:00:f1:6f:07:ce:63:8d:71:da:
                    73:0a:8e:d7:af:ba:02:04:47:97:6c:2a:e4:a2:68:
                    cd:61:d9:09:77:3f:95:1d:fe:32:9c:01:78:a5:da:
                    1c:0c:21:5f:72:c0:4a:0a:2d:36:6b:50:46:4b:aa:
                    ef:10:66:f7:81:d7:21:a6:41:ee:88:33:83:7f:66:
                    c6:ea:51:d8:7e:ef:c5:97:d8:3b:3c:d7:55:ac:ba:
                    9e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CD:7C:5D:12:95:B8:AF:1E:95:AB:05:56:85:22:8E:60:DE:A1:49
            X509v3 Authority Key Identifier:
                keyid:21:B4:A6:59:4D:29:33:07:A5:4F:C6:7E:A9:72:CF:9E:80:79:30:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/21B4A6594D293307A54FC67EA972CF9E807930DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/21B4A6594D293307A54FC67EA972CF9E807930DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C71E9B6EEE78F12B15E3BEBF954942DBC0CDCA94DA317B83F0CD62B2FDB26ECE/0/3139302e3130372e33322e302f31392d3234203d3e203237383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:44:e0:fe:3d:dd:e4:73:19:d0:4a:82:01:d2:ce:c8:99:
         af:90:84:87:46:11:f4:ee:cb:bb:94:89:75:65:c0:ee:ac:4f:
         c4:34:43:28:fd:ec:ca:a4:71:db:4b:fc:55:5d:93:62:a3:da:
         52:eb:13:f7:06:5f:3a:92:c6:cc:11:cb:32:2c:13:13:17:11:
         1d:b6:ec:23:87:96:e9:27:16:46:ff:d5:c4:b8:53:0b:34:a6:
         87:38:2c:35:62:34:ef:9b:1b:fc:c7:62:75:12:84:d9:9b:76:
         bf:41:1d:67:32:95:74:f8:fd:93:82:9d:60:6d:a9:de:55:f4:
         c0:5b:c2:1d:4f:7d:ec:d0:ff:cb:57:d7:33:7d:3c:15:72:12:
         6c:62:c3:52:1b:32:7b:2e:42:ce:20:84:24:98:59:42:82:b6:
         6c:96:60:49:37:eb:7e:6c:e1:78:93:a8:75:ec:e7:d2:bd:c0:
         e0:57:e2:42:8f:b3:1e:fe:8c:b8:18:3e:18:a1:46:6c:a5:88:
         0a:8c:11:d6:c3:1b:d1:db:ad:11:fd:45:9b:e3:06:92:27:89:
         6a:fc:6e:2c:af:c2:96:ac:8e:1f:8a:f8:98:c8:f5:cc:88:67:
         b5:03:9b:46:7a:fa:55:65:65:16:63:48:99:b7:b1:fb:08:3f:
         bb:3d:f0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:35:32 2025 by rpki-client