Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa
File:                     3139302e3135312e302e302f31372d3234203d3e203237363531.roa (raw, json)
Hash identifier:          jMt27gLMAll1q/Zl/MiaUmGUHBfU6DFyDChzD06bVSk=
Subject key identifier:   81:10:82:BB:44:ED:60:45:20:B3:1E:69:1E:D2:87:9D:D2:72:B9:DD
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       262819795AC540B2768B1F34221374022100F0A8
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa
Signing time:             Tue 04 Feb 2025 19:56:32 +0000
ROA not before:           Tue 04 Feb 2025 19:51:32 +0000
ROA not after:            Tue 03 Feb 2026 19:56:32 +0000
asID:                     27651
IP address blocks:        190.151.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:28:19:79:5a:c5:40:b2:76:8b:1f:34:22:13:74:02:21:00:f0:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Feb  4 19:51:32 2025 GMT
            Not After : Feb  3 19:56:32 2026 GMT
        Subject: CN=811082BB44ED604520B31E691ED2879DD272B9DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:2d:4e:bb:ff:d8:48:28:fc:d0:cf:3a:04:
                    e4:da:82:9d:19:72:11:df:aa:27:f9:07:35:ac:6e:
                    22:34:7e:c3:4d:0d:de:f0:1e:56:e4:a1:2e:b9:93:
                    9e:40:85:26:5a:5b:17:6f:15:f6:6f:4c:a5:d0:b2:
                    5b:73:ab:09:a0:70:b8:3c:b6:5e:61:81:5c:e6:b8:
                    51:21:4f:75:52:bd:16:ad:3b:8b:b3:9d:e2:3f:bd:
                    7b:9f:d8:06:18:ad:e2:f8:fc:8f:92:cf:8c:10:cd:
                    28:ec:3b:be:18:21:70:d7:4d:cd:35:4b:1a:a2:43:
                    b0:0f:36:88:f7:1a:e4:02:7b:d9:fa:c4:9b:81:0b:
                    5f:ac:6a:02:0c:ad:ac:58:6d:ef:a1:79:3e:85:50:
                    e2:6e:9f:4b:04:35:66:f4:cf:5b:fd:19:c8:82:11:
                    d5:a0:81:5b:42:a8:f4:4b:30:86:9f:94:72:6b:9e:
                    64:7c:ab:cb:ed:21:91:b4:fb:ed:a1:6b:87:fe:16:
                    26:a8:54:f4:a0:38:33:9e:d5:b4:d6:18:e6:16:b5:
                    9d:d4:02:29:17:a2:57:2a:e2:fb:ce:4b:79:d1:6f:
                    0a:3c:f6:c9:c9:4e:5a:73:e4:27:47:31:f4:8e:11:
                    c6:9e:ca:9e:c9:bd:7c:a0:71:76:d9:47:05:a0:4a:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:10:82:BB:44:ED:60:45:20:B3:1E:69:1E:D2:87:9D:D2:72:B9:DD
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:00:64:5f:46:0a:1a:8b:d6:c7:2f:e9:0c:7e:fc:cc:e8:ad:
         96:ec:00:de:45:12:7c:ff:c9:2f:76:dc:8f:68:4f:0c:b7:39:
         0d:62:80:57:de:66:12:72:1a:c5:c1:e5:57:eb:18:e9:bf:bd:
         54:5e:a7:c9:6a:9f:e1:04:cc:c3:21:e7:88:e3:21:e5:db:1c:
         9d:e7:de:64:ca:fc:0d:de:3c:2c:3b:25:44:f8:8b:be:77:8d:
         75:c4:b9:cf:6e:14:8a:45:ad:c8:65:4f:8d:96:57:7a:31:8c:
         57:43:11:3d:d0:df:e6:2e:fc:39:71:97:4b:b9:58:b0:0b:95:
         b8:6c:38:b3:f5:43:cc:46:cd:23:77:32:b3:ce:67:76:be:37:
         ce:1a:35:43:33:f5:f0:86:1d:ad:df:c3:96:6d:45:66:01:76:
         1a:8c:ef:c9:3b:cb:ca:f6:1b:b0:35:88:31:d8:40:1a:b3:7a:
         95:92:41:d6:85:8b:f5:40:5c:11:e7:ad:af:e2:38:c0:b6:44:
         8a:99:33:e5:9f:5e:c9:7c:d7:9a:be:21:50:6a:bf:75:ab:0b:
         ab:f0:b3:8c:e3:16:16:5f:c6:a5:cf:30:d5:ad:ec:ba:cd:7f:
         af:a3:5c:7e:d5:5d:9a:a4:a3:9b:9b:74:31:c2:45:ac:96:41:
         f7:58:54:90
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJigZeVrFQLJ2ix80IhN0AiEA8KgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZEQjQ0RDE4QkMxNkFCMDM5QzJCMUI2QkQzODY2QUIy
OUUxMjJBNzAeFw0yNTAyMDQxOTUxMzJaFw0yNjAyMDMxOTU2MzJaMDMxMTAvBgNV
BAMTKDgxMTA4MkJCNDRFRDYwNDUyMEIzMUU2OTFFRDI4NzlERDI3MkI5REQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaji1Ou//YSCj80M86BOTagp0Z
chHfqif5BzWsbiI0fsNNDd7wHlbkoS65k55AhSZaWxdvFfZvTKXQsltzqwmgcLg8
tl5hgVzmuFEhT3VSvRatO4uzneI/vXuf2AYYreL4/I+Sz4wQzSjsO74YIXDXTc01
SxqiQ7APNoj3GuQCe9n6xJuBC1+sagIMraxYbe+heT6FUOJun0sENWb0z1v9GciC
EdWggVtCqPRLMIaflHJrnmR8q8vtIZG0++2ha4f+FiaoVPSgODOe1bTWGOYWtZ3U
AikXolcq4vvOS3nRbwo89snJTlpz5CdHMfSOEcaeyp7JvXygcXbZRwWgStQRAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUgRCCu0TtYEUgsx5pHtKHndJyud0wHwYDVR0j
BBgwFoAUP9tE0YvBarA5wrG2vThmqynhIqcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DODYyQzkyRkU3OTU3MUNEQ0U4MzRBNjA5MDUzMDAyQTEy
MTJDOUI3MDc5NkFGQUQwMUM2MTkzRDdGMERBQUFCLzAvM0ZEQjQ0RDE4QkMxNkFC
MDM5QzJCMUI2QkQzODY2QUIyOUUxMjJBNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRkRCNDREMThCQzE2QUIwMzlD
MkIxQjZCRDM4NjZBQjI5RTEyMkE3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzg2MkM5MkZFNzk1NzFDRENFODM0QTYwOTA1MzAwMkExMjEyQzlCNzA3
OTZBRkFEMDFDNjE5M0Q3RjBEQUFBQi8wLzMxMzkzMDJlMzEzNTMxMmUzMDJlMzAy
ZjMxMzcyZDMyMzQyMDNkM2UyMDMyMzczNjM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe+lwAwDQYJ
KoZIhvcNAQELBQADggEBAGoAZF9GChqL1scv6Qx+/MzorZbsAN5FEnz/yS923I9o
Twy3OQ1igFfeZhJyGsXB5VfrGOm/vVRep8lqn+EEzMMh54jjIeXbHJ3n3mTK/A3e
PCw7JUT4i753jXXEuc9uFIpFrchlT42WV3oxjFdDET3Q3+Yu/Dlxl0u5WLALlbhs
OLP1Q8xGzSN3MrPOZ3a+N84aNUMz9fCGHa3fw5ZtRWYBdhqM78k7y8r2G7A1iDHY
QBqzepWSQdaFi/VAXBHnra/iOMC2RIqZM+WfXsl815q+IVBqv3WrC6vws4zjFhZf
xqXPMNWt7LrNf6+jXH7VXZqko5ubdDHCRayWQfdYVJA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:42 2025 by rpki-client