Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa
File:                     3139302e31352e3134302e302f32342d3234203d3e203232373234.roa (raw, json)
Hash identifier:          ffkwAAqhv7T/aNswqGKse2aoj8jB4VQ9hwivlAjdL4I=
Subject key identifier:   78:55:8B:B8:8B:5D:25:72:24:4F:A0:C2:39:2E:C7:64:6C:81:D5:E7
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       1567663096978E14D2B011204901AF68D8E3723D
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 18:16:09 +0000
ROA not before:           Tue 04 Feb 2025 18:11:09 +0000
ROA not after:            Tue 03 Feb 2026 18:16:09 +0000
asID:                     22724
IP address blocks:        190.15.140.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:67:66:30:96:97:8e:14:d2:b0:11:20:49:01:af:68:d8:e3:72:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Feb  4 18:11:09 2025 GMT
            Not After : Feb  3 18:16:09 2026 GMT
        Subject: CN=78558BB88B5D2572244FA0C2392EC7646C81D5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:1b:7e:78:ce:98:fc:0e:61:f8:9c:39:06:
                    b7:cf:c7:07:17:51:e5:b7:27:09:bf:51:a2:2b:f8:
                    61:81:0c:16:99:db:f4:86:f6:77:85:28:5c:f2:3e:
                    85:38:e5:3c:48:94:8f:d7:c8:98:1e:88:6b:c9:f1:
                    64:7a:55:f7:d6:27:a9:30:8c:ba:1f:20:b8:66:79:
                    36:1d:41:ef:aa:b2:aa:e5:fb:c7:3d:51:21:af:5c:
                    12:cb:bf:21:57:a8:64:7c:b3:d6:f8:4c:96:a0:d7:
                    ce:da:62:e2:0a:3a:1b:fd:d1:0c:45:48:39:fa:be:
                    43:e2:b7:9e:e9:35:bc:f5:5d:f8:46:c0:dc:cd:17:
                    56:72:9f:5e:c3:17:e3:7a:54:d1:7d:5d:df:08:05:
                    64:75:bd:d7:cc:bc:ab:4c:7a:10:c6:cf:3f:f2:80:
                    3c:b5:5e:79:89:22:fc:91:61:35:f7:39:a6:92:b8:
                    8d:c2:a0:9c:d0:b0:98:9a:a3:6b:b7:20:6d:84:5a:
                    66:49:4e:87:cc:a2:1f:12:41:85:00:47:6f:3b:3f:
                    fe:cc:15:c0:a5:59:38:bc:66:08:45:ad:e3:df:ca:
                    69:9d:bb:a2:0d:aa:03:98:e6:ac:b0:f3:b8:87:72:
                    22:0f:99:ca:b7:c1:65:75:f0:77:6d:80:2a:a5:11:
                    8b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:55:8B:B8:8B:5D:25:72:24:4F:A0:C2:39:2E:C7:64:6C:81:D5:E7
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3134302e302f32342d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:68:53:98:6a:68:c8:c3:05:41:5a:3c:07:bf:b5:de:4b:
         d0:b5:4f:f9:92:76:fd:36:bb:ad:32:2b:97:79:dc:d4:c4:51:
         32:28:f3:6b:c5:e5:c1:b4:20:0c:e1:a6:f5:ca:ce:7b:20:d1:
         a6:fc:5c:9a:e5:35:0d:e2:8b:43:4b:b5:0c:e4:0b:c8:39:21:
         a4:01:44:6c:45:6a:28:29:c0:87:50:0d:74:c3:d1:53:b8:60:
         ab:93:b1:0a:cf:77:04:8c:b9:c0:db:ff:c0:c9:b5:74:60:6d:
         4c:ac:27:d2:4a:c5:84:2e:1e:70:f9:38:7a:dd:35:2a:9e:71:
         c8:f8:b2:64:25:a7:35:ad:59:58:b4:3d:3a:82:a5:6a:cc:9e:
         95:7e:e8:43:0c:7a:35:1d:eb:4d:29:c7:46:01:49:b2:a5:eb:
         4e:98:ae:30:88:4c:2b:39:bf:84:3a:49:87:c2:99:4e:53:b4:
         15:5e:43:45:a4:32:dc:17:fb:91:63:16:a8:bb:82:8c:32:6d:
         d9:85:b5:3c:b8:17:3d:e1:81:65:da:1f:15:cd:ef:5b:2b:e5:
         54:46:77:4c:1b:a0:4f:6b:cd:58:ef:0b:19:ea:06:c5:76:b5:
         de:54:8d:63:87:9d:80:87:e9:3a:65:0b:76:bf:ad:2a:ba:19:
         2a:49:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:25 2025 by rpki-client