Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa
File:                     3139302e31352e38302e302f32302d3234203d3e203532333532.roa (raw, json)
Hash identifier:          TgC91cxa/Vj4HcF69EFgFvflVtSxSmjHYbx8DFbxkCw=
Subject key identifier:   E5:F0:91:3F:97:BE:75:D6:0D:4D:05:EA:A3:36:0D:09:CF:81:FE:76
Certificate issuer:       /CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
Certificate serial:       1123AE0B283381A3567137EA0C3C50C8AE238727
Authority key identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa
Signing time:             Tue 04 Feb 2025 18:47:39 +0000
ROA not before:           Tue 04 Feb 2025 18:42:39 +0000
ROA not after:            Tue 03 Feb 2026 18:47:39 +0000
asID:                     52352
IP address blocks:        190.15.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:23:ae:0b:28:33:81:a3:56:71:37:ea:0c:3c:50:c8:ae:23:87:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8
        Validity
            Not Before: Feb  4 18:42:39 2025 GMT
            Not After : Feb  3 18:47:39 2026 GMT
        Subject: CN=E5F0913F97BE75D60D4D05EAA3360D09CF81FE76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:60:74:c3:53:64:a3:b1:b7:2a:f2:40:b1:
                    73:51:f3:b5:6f:56:c4:54:ab:c7:bc:da:69:69:f9:
                    a8:1a:80:92:de:11:de:e0:94:e3:4f:88:9c:6c:14:
                    28:41:bb:44:b5:69:db:c5:f7:a5:94:14:de:bd:5e:
                    e3:7e:94:a1:ca:f8:64:d0:95:1f:c2:3c:4a:71:cc:
                    ea:cf:60:5f:6f:a0:e0:c6:b0:ad:2a:a0:06:5c:9a:
                    6d:f8:95:b6:5a:99:42:e0:67:bd:a3:a5:db:d8:30:
                    99:d2:60:14:58:6c:1e:79:20:6a:2d:66:8a:70:0d:
                    72:e3:37:3c:34:b9:6c:a8:41:46:76:cb:df:77:78:
                    52:14:c2:3a:37:e7:e0:c2:21:d3:64:6b:ef:af:bb:
                    f5:89:ce:56:e6:76:6b:49:b1:dc:bc:a9:b2:67:84:
                    95:15:13:f4:3b:99:b8:26:0a:fe:39:0f:c2:db:6f:
                    d8:d2:a9:1b:ff:49:80:7c:fc:85:46:c9:23:66:58:
                    35:69:d3:a8:96:ca:f8:76:1c:0b:3c:21:ea:13:ae:
                    ff:ee:bd:f3:05:47:45:46:c9:57:f8:da:8c:24:25:
                    b8:58:34:54:9b:2c:7a:7b:e0:bf:18:cb:54:08:dd:
                    18:af:03:d4:7d:23:72:c5:78:c1:8e:c1:ae:b6:69:
                    9b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:91:3F:97:BE:75:D6:0D:4D:05:EA:A3:36:0D:09:CF:81:FE:76
            X509v3 Authority Key Identifier:
                keyid:A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/3139302e31352e38302e302f32302d3234203d3e203532333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:21:bc:31:b5:90:56:96:fd:d3:13:d0:a2:d2:6d:6b:fb:d3:
         12:15:bf:7e:32:4f:c1:0c:15:85:2f:a3:de:19:b0:16:d8:64:
         ee:7b:04:3a:67:b6:ac:e7:2a:3c:3a:33:85:14:cb:f0:d7:fb:
         fb:1a:7c:f4:df:13:98:92:08:68:43:90:61:6e:ee:67:9a:c8:
         22:bf:cb:e8:15:fa:0b:ab:1a:a2:aa:6b:a4:7b:86:fb:24:c8:
         3d:34:c9:57:f0:a6:22:49:78:81:5e:c6:50:5a:3b:79:d8:d4:
         d8:be:52:ff:4d:26:35:f9:fe:71:b5:5d:c2:b6:a8:3e:24:23:
         41:1f:bf:f9:50:0c:7f:43:4c:24:3f:22:f8:5b:f9:b3:9c:bd:
         16:19:37:04:d6:98:ea:0a:8f:59:69:ef:f6:4e:b6:2a:a2:99:
         80:02:b1:59:c9:63:a8:fc:9c:0f:58:92:3b:09:a9:62:5d:40:
         72:ec:8b:29:62:b5:06:36:0d:c3:15:0e:4e:be:a7:59:9d:f6:
         88:46:2b:5e:0b:71:e8:8b:5e:0e:a1:85:ed:13:df:4b:47:b4:
         b6:6b:40:3e:37:ce:2f:3f:37:8a:d0:c1:40:37:34:a7:6c:b7:
         77:6e:7c:66:bb:7c:cf:e9:66:15:22:24:c2:28:b1:a5:1a:f0:
         0d:11:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:50 2025 by rpki-client