Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa
File:                     3139302e362e3231362e302f32312d3234203d3e203238303135.roa (raw, json)
Hash identifier:          uBWafr1HCCRtM0CI6Kdpdx9+IxNxHRqQXVhv+pkxbRU=
Subject key identifier:   5C:5A:F8:72:A1:25:FB:F1:47:C0:00:D8:D8:BE:9B:17:4D:A4:3E:89
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       14FA39E4D4832FA89E1A594EF507BD5B11CAE201
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:07 +0000
ROA not before:           Tue 04 Feb 2025 20:01:07 +0000
ROA not after:            Tue 03 Feb 2026 20:06:07 +0000
asID:                     28015
IP address blocks:        190.6.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:39:e4:d4:83:2f:a8:9e:1a:59:4e:f5:07:bd:5b:11:ca:e2:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:07 2025 GMT
            Not After : Feb  3 20:06:07 2026 GMT
        Subject: CN=5C5AF872A125FBF147C000D8D8BE9B174DA43E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:62:34:3c:06:93:b6:72:59:e8:48:bb:a0:2f:
                    c9:68:ce:bf:b1:b9:8c:8c:27:f1:33:9f:59:58:65:
                    33:37:67:e5:a4:88:a0:ab:19:83:58:99:58:61:f9:
                    f2:18:ea:a2:61:5f:37:83:5f:ab:5c:38:19:5a:bf:
                    14:5f:26:ba:30:56:80:0c:c7:fd:af:e6:0e:77:9e:
                    31:e5:10:4b:c5:d5:1a:7c:a5:f4:f4:bd:0b:33:b1:
                    d8:52:0c:42:d3:a7:7c:68:3a:32:eb:b6:63:40:9f:
                    d6:5d:cd:29:57:56:25:88:5b:23:5c:6a:4d:f0:53:
                    06:25:9c:9c:23:78:27:04:1c:38:97:04:3e:49:b8:
                    37:b6:7d:c3:ff:54:ea:78:c2:5f:a8:91:e1:f5:85:
                    82:b2:47:75:16:0c:c6:11:e3:1c:3f:52:3a:ba:32:
                    33:10:af:a2:43:2e:f0:c7:d8:8f:6c:72:30:33:33:
                    6a:86:0b:a8:a1:11:85:30:bc:94:40:b2:76:a0:1d:
                    34:19:4c:11:09:75:a1:40:3a:2a:77:b5:d2:17:e9:
                    29:40:25:1e:e7:90:56:91:1b:6f:fc:a7:bd:cc:f8:
                    f6:b7:fa:3f:a8:14:60:70:95:2e:c4:30:f7:24:70:
                    b1:83:06:46:29:be:f1:fc:87:b0:e1:14:2c:54:89:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:5A:F8:72:A1:25:FB:F1:47:C0:00:D8:D8:BE:9B:17:4D:A4:3E:89
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:3f:03:00:65:13:bd:4a:c5:5e:21:15:3e:50:cf:c2:de:
         e5:d6:51:0d:f4:53:1c:98:3f:0c:70:97:c6:86:40:8f:98:d1:
         f8:91:f1:04:b1:22:44:70:f4:3f:fb:4b:aa:c3:75:38:b4:52:
         15:0a:c8:18:80:6e:e8:0f:28:5a:40:60:d2:41:e2:ee:c5:12:
         2c:a2:10:f4:c6:c4:2b:f3:5d:6f:ab:8a:18:b3:64:1f:f7:be:
         9d:17:b3:25:f9:a8:cd:d0:ad:29:0b:bd:99:6e:98:f2:b0:ee:
         8c:93:19:b7:4c:de:7b:8c:3b:06:30:03:7e:37:c6:1f:cc:79:
         f5:bd:5c:e7:e6:45:b3:2a:bb:10:09:6f:97:38:03:f3:b0:ec:
         cd:87:6a:07:14:14:52:19:19:ff:2a:02:92:bd:4e:e4:08:ca:
         05:af:ca:7f:58:64:09:3e:f8:bf:00:e1:5a:a1:2f:ee:b3:9c:
         41:d6:6a:0d:9c:3f:b2:60:a1:1f:93:53:27:0d:01:3f:29:1c:
         bb:22:03:aa:20:24:d3:76:1d:51:b7:1b:63:3f:54:f6:a8:63:
         1b:9d:35:26:ce:64:eb:b8:68:dd:12:d9:8b:89:83:52:bb:be:
         07:1b:8a:ec:83:81:16:39:70:dd:24:70:66:62:c0:84:72:98:
         a0:c0:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:36 2025 by rpki-client