Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
File:                     3139302e3132342e32342e302f32332d3234203d3e203237363738.roa (raw, json)
Hash identifier:          BpVG8HbDg+gFEvZ3G7bjSgp18sYK2xlyKtq0LNVQk5Q=
Subject key identifier:   2E:AA:B0:05:49:75:CB:32:45:B0:89:19:B4:F9:5F:F3:70:59:6F:A7
Certificate issuer:       /CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
Certificate serial:       1865194B4F383126125D42984F4F8E7C45B1F9BB
Authority key identifier: E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa
Signing time:             Tue 04 Feb 2025 20:05:53 +0000
ROA not before:           Tue 04 Feb 2025 20:00:53 +0000
ROA not after:            Tue 03 Feb 2026 20:05:53 +0000
asID:                     27678
IP address blocks:        190.124.24.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:65:19:4b:4f:38:31:26:12:5d:42:98:4f:4f:8e:7c:45:b1:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35FC2646A9FC8929B694AAAE04D52023AA4680C
        Validity
            Not Before: Feb  4 20:00:53 2025 GMT
            Not After : Feb  3 20:05:53 2026 GMT
        Subject: CN=2EAAB0054975CB3245B08919B4F95FF370596FA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:2e:e5:99:5d:ca:9c:26:ac:01:6c:b1:52:
                    75:54:e5:94:6d:3f:96:f0:ba:d9:e2:8c:c3:ae:21:
                    0a:d3:41:09:34:96:8e:4e:f1:86:71:5e:df:db:2e:
                    04:5f:39:21:27:32:b0:99:23:83:90:13:50:58:2c:
                    76:7a:7e:87:3b:77:b4:28:fb:19:ce:ce:1a:f1:02:
                    c0:63:46:53:4e:34:ad:b5:fa:bd:ef:48:27:af:ae:
                    d0:d8:2c:36:8a:41:4d:10:07:48:77:d6:99:78:a5:
                    b6:69:b2:d6:ba:f4:6e:0a:01:9f:8d:f9:ce:c3:5c:
                    01:99:79:94:e4:8b:8c:ff:8d:c5:c8:e1:af:ba:5a:
                    02:ce:ca:9f:01:27:bc:04:18:65:32:68:b7:c1:bb:
                    02:5f:6a:0e:31:3b:90:43:d4:2f:0a:81:23:1d:d5:
                    db:2a:f5:c2:f7:52:ee:a3:b0:ca:b7:d2:b2:c8:17:
                    44:98:86:2f:6a:4f:25:27:03:b8:50:a1:61:18:60:
                    90:c2:26:62:0b:2d:69:37:3f:98:63:e6:1f:1c:e6:
                    84:cc:e0:f1:b5:76:7d:c7:13:83:96:b7:88:75:dc:
                    cc:f2:b1:78:4c:a0:fc:d4:2c:be:bb:44:2a:6c:5d:
                    6a:ce:1c:09:0a:88:ff:90:8e:25:a4:be:71:ce:65:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AA:B0:05:49:75:CB:32:45:B0:89:19:B4:F9:5F:F3:70:59:6F:A7
            X509v3 Authority Key Identifier:
                keyid:E3:5F:C2:64:6A:9F:C8:92:9B:69:4A:AA:E0:4D:52:02:3A:A4:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35FC2646A9FC8929B694AAAE04D52023AA4680C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD0E054623AC9043C0E299C2C90B143803BD89125B0E863855C49C3B73F7BAA1/0/3139302e3132342e32342e302f32332d3234203d3e203237363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:4e:d8:76:bb:54:b7:3e:b1:f6:6f:1d:32:68:cf:12:e9:90:
         f4:82:6f:de:84:d9:41:2b:00:87:5f:5c:9d:7f:92:cd:0e:57:
         72:a0:7b:ab:40:6d:25:84:cb:df:f9:9c:b2:16:5d:44:b3:a9:
         f2:8e:85:5d:a4:15:c6:b0:c8:00:78:4b:54:a7:0b:cf:0f:6d:
         2e:25:b7:ec:29:85:ef:e6:8d:49:0c:c8:f6:45:7b:78:9a:8a:
         6e:db:9b:50:94:80:f7:a2:4c:34:87:66:17:84:70:b1:b6:c6:
         ab:4d:b4:9a:ff:cb:fb:dd:3f:bf:14:bb:46:a0:03:f8:ad:a1:
         58:58:a5:e5:e8:3a:42:bb:a7:47:77:b4:90:17:54:ad:c1:96:
         f6:48:66:b5:6c:3e:89:e7:df:dc:22:3d:22:27:42:8b:68:8e:
         44:5f:75:cf:57:9c:6f:32:e2:bc:78:90:79:20:e7:ca:ee:42:
         d6:ce:19:27:73:a5:4b:50:54:7d:b9:60:81:da:0d:72:92:97:
         da:ce:5d:a7:4c:bd:ca:6a:5e:13:6c:f7:7f:fd:b3:99:80:1b:
         d4:4d:05:7a:8e:4a:9f:4c:3b:fb:c3:4f:a9:0b:07:5c:0c:e5:
         8e:10:60:30:83:39:9b:8b:0f:51:bd:de:40:a1:6b:a9:ff:ae:
         6d:35:e3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:55:40 2025 by rpki-client