Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa
File:                     3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa (raw, json)
Hash identifier:          f660PTLDT2nhjTTrtpq5KZyVrpDQDuQ7Rpbsyr0rhws=
Subject key identifier:   CA:B9:AB:5D:5A:65:84:24:6C:F7:F5:76:9D:F6:5F:5B:67:DD:61:CE
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       7146E663A03A85C47E8C34CFC4B109F241F570C9
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa
Signing time:             Tue 04 Feb 2025 18:35:01 +0000
ROA not before:           Tue 04 Feb 2025 18:30:01 +0000
ROA not after:            Tue 03 Feb 2026 18:35:01 +0000
asID:                     271926
IP address blocks:        190.113.50.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:46:e6:63:a0:3a:85:c4:7e:8c:34:cf:c4:b1:09:f2:41:f5:70:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Feb  4 18:30:01 2025 GMT
            Not After : Feb  3 18:35:01 2026 GMT
        Subject: CN=CAB9AB5D5A6584246CF7F5769DF65F5B67DD61CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:16:52:a8:dd:2b:91:e4:36:45:ad:51:50:
                    d8:4b:18:03:7d:d4:45:1f:8b:cf:b0:a9:f2:c3:a4:
                    a8:6d:61:21:90:36:fb:5c:16:72:83:6d:0a:8f:01:
                    1d:bb:38:a3:76:92:25:a9:4f:f6:b0:98:df:25:f2:
                    b9:e2:5a:af:33:58:d6:d5:45:3f:d5:5d:aa:e7:9a:
                    08:b9:9f:f1:2d:0a:d3:b3:ab:a6:23:fa:13:7c:63:
                    fb:1a:65:44:2f:28:65:a4:4b:33:63:57:69:3a:ce:
                    fe:f2:32:21:c2:ea:68:8c:cc:50:ae:97:ae:6a:68:
                    51:76:ad:db:1b:27:c1:a9:48:92:01:6c:a1:2d:9f:
                    0f:3e:ed:f4:b1:c5:6d:9e:28:d3:a8:2b:c3:0e:c8:
                    a8:47:56:54:e0:8f:8d:0d:a7:6d:d2:b2:f5:f2:96:
                    0f:1c:fb:3d:d1:c8:59:b0:8b:58:c8:b2:76:10:4d:
                    3d:1b:dc:37:81:46:b0:d5:59:9e:4c:0c:58:5d:db:
                    9d:16:6c:ba:fb:cb:b6:1d:b9:fc:5b:f2:59:13:2f:
                    ce:5c:3c:9e:61:d4:c4:df:4c:df:a5:5a:22:33:10:
                    71:7e:b5:ab:72:45:82:75:75:00:ba:37:9a:0c:03:
                    3f:d8:7a:9b:1e:ed:08:b3:5c:ba:19:a2:e7:cc:ea:
                    ca:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B9:AB:5D:5A:65:84:24:6C:F7:F5:76:9D:F6:5F:5B:67:DD:61:CE
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e35302e302f32342d3234203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a7:12:ea:00:9b:f8:25:bb:47:e7:23:8b:12:55:7c:d8:2f:
         51:02:22:0f:7a:9e:4f:4f:14:76:12:92:16:f9:b3:87:0b:c4:
         fe:de:21:1d:3e:87:f4:68:0e:25:fa:61:3d:15:71:82:b0:40:
         3a:01:83:2a:88:c6:68:fc:25:1e:57:93:9a:7a:59:36:45:1b:
         69:b5:8a:16:95:bb:06:a3:48:0f:dd:da:1b:6a:be:7a:c9:55:
         ba:73:28:cf:98:29:d1:52:44:c9:cd:3b:12:ec:a0:48:cf:3c:
         b5:b3:5c:70:da:13:42:51:6a:3c:de:2a:c9:bd:dc:3c:fc:c7:
         4c:ae:ba:61:05:31:e0:1a:b5:77:fb:71:12:8e:fc:a3:8c:c4:
         18:be:7e:d8:8b:2b:00:b3:27:f2:bf:9a:c4:73:70:e0:48:73:
         db:83:0a:35:db:3e:44:cc:09:ee:2f:07:c8:19:5d:87:84:ca:
         2a:80:30:20:ca:29:ca:39:d6:aa:cb:d1:77:cf:c4:27:86:40:
         12:37:ce:9f:0b:8a:19:20:ab:e1:65:51:a0:5b:32:32:73:8a:
         15:1c:f7:35:8d:0d:6f:16:20:90:95:c2:12:66:f3:a3:f6:c1:
         9e:77:53:07:d4:c8:a9:28:be:1c:76:8c:05:a9:a3:7b:6f:e3:
         28:af:29:65
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUcUbmY6A6hcR+jDTPxLEJ8kH1cMkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODY2QjdEQzVCRDlFOUNENTlGMzE2OTNDMzI3QUI3RTBB
RURCODQwRjAeFw0yNTAyMDQxODMwMDFaFw0yNjAyMDMxODM1MDFaMDMxMTAvBgNV
BAMTKENBQjlBQjVENUE2NTg0MjQ2Q0Y3RjU3NjlERjY1RjVCNjdERDYxQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuNRZSqN0rkeQ2Ra1RUNhLGAN9
1EUfi8+wqfLDpKhtYSGQNvtcFnKDbQqPAR27OKN2kiWpT/awmN8l8rniWq8zWNbV
RT/VXarnmgi5n/EtCtOzq6Yj+hN8Y/saZUQvKGWkSzNjV2k6zv7yMiHC6miMzFCu
l65qaFF2rdsbJ8GpSJIBbKEtnw8+7fSxxW2eKNOoK8MOyKhHVlTgj40Np23SsvXy
lg8c+z3RyFmwi1jIsnYQTT0b3DeBRrDVWZ5MDFhd250WbLr7y7Ydufxb8lkTL85c
PJ5h1MTfTN+lWiIzEHF+tatyRYJ1dQC6N5oMAz/Yepse7QizXLoZoufM6sqfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUyrmrXVplhCRs9/V2nfZfW2fdYc4wHwYDVR0j
BBgwFoAUhmt9xb2enNWfMWk8Mnq34K7bhA8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DN0VERTI5RUJCQ0YzM0REOTA1RDU3MTczRTRCMEM4M0M1
RTM3RDY1RTBGRTM2RjlBNzQ2M0FGRDMxRUZFNEFGLzAvODY2QjdEQzVCRDlFOUNE
NTlGMzE2OTNDMzI3QUI3RTBBRURCODQwRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NjZCN0RDNUJEOUU5Q0Q1OUYz
MTY5M0MzMjdBQjdFMEFFREI4NDBGLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzdFREUyOUVCQkNGMzNERDkwNUQ1NzE3M0U0QjBDODNDNUUzN0Q2NUUw
RkUzNkY5QTc0NjNBRkQzMUVGRTRBRi8wLzMxMzkzMDJlMzEzMTMzMmUzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMjM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnEy
MA0GCSqGSIb3DQEBCwUAA4IBAQB4pxLqAJv4JbtH5yOLElV82C9RAiIPep5PTxR2
EpIW+bOHC8T+3iEdPof0aA4l+mE9FXGCsEA6AYMqiMZo/CUeV5Oaelk2RRtptYoW
lbsGo0gP3dobar56yVW6cyjPmCnRUkTJzTsS7KBIzzy1s1xw2hNCUWo83irJvdw8
/MdMrrphBTHgGrV3+3ESjvyjjMQYvn7YiysAsyfyv5rEc3DgSHPbgwo12z5EzAnu
LwfIGV2HhMoqgDAgyinKOdaqy9F3z8QnhkASN86fC4oZIKvhZVGgWzIyc4oVHPc1
jQ1vFiCQlcISZvOj9sGed1MH1MipKL4cdowFqaN7b+Moryll
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:39 2025 by rpki-client