Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32322d3234203d3e203237393032.roa
File:                     3139302e3130372e36342e302f32322d3234203d3e203237393032.roa (raw, json)
Hash identifier:          lawMWScTibP0yeLWRtAhC/orC7ydKzHjn5tghHCNdRk=
Subject key identifier:   63:B5:9B:2C:E8:3D:90:4E:A7:46:FA:AD:E7:7F:39:3F:5E:B6:6B:CD
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       318ECA55ED9739DC8D168B947DB5929DDA708C3C
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32322d3234203d3e203237393032.roa
Signing time:             Tue 04 Feb 2025 18:42:11 +0000
ROA not before:           Tue 04 Feb 2025 18:37:11 +0000
ROA not after:            Tue 03 Feb 2026 18:42:11 +0000
asID:                     27902
IP address blocks:        190.107.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:ca:55:ed:97:39:dc:8d:16:8b:94:7d:b5:92:9d:da:70:8c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Feb  4 18:37:11 2025 GMT
            Not After : Feb  3 18:42:11 2026 GMT
        Subject: CN=63B59B2CE83D904EA746FAADE77F393F5EB66BCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ac:d3:8d:25:45:94:30:51:fc:60:08:ad:4f:
                    21:7a:9b:2e:cd:bf:ec:68:4b:51:b1:a3:be:b0:c5:
                    c0:09:a7:b8:fa:82:77:18:a6:13:c6:b9:0f:63:76:
                    81:4f:c2:f6:36:b9:21:dc:70:1d:56:74:c8:04:71:
                    19:1d:02:a1:3f:c4:f7:ba:a5:a6:94:39:9d:dc:01:
                    71:f9:0c:b9:0b:42:ef:b9:46:35:19:f6:f2:65:9d:
                    2f:61:5f:53:0f:d1:d3:cc:76:96:aa:ef:09:d4:c2:
                    36:75:cd:98:a5:50:19:8a:98:e0:bc:29:0f:f4:d6:
                    47:b6:d9:34:38:e9:d2:76:a7:4c:8b:cb:9c:71:bb:
                    00:dd:72:9f:8a:59:eb:22:31:60:2c:34:d9:2a:5a:
                    91:44:e5:fe:9a:4a:b1:69:a4:45:fb:65:17:e3:2e:
                    58:37:17:39:68:69:6e:2f:f4:2b:17:7e:98:eb:c5:
                    ef:4c:9a:14:b2:73:6e:15:38:44:52:fd:2c:ae:9c:
                    25:98:fe:80:6a:41:8d:d2:d4:73:b5:c9:c7:73:18:
                    a0:80:51:c7:51:9c:8e:d0:1e:a9:c1:6d:a6:22:19:
                    1d:8f:8d:70:d7:9a:53:06:4d:e3:f3:6b:9b:db:06:
                    75:e8:24:20:19:54:c7:9c:5c:b0:cb:5f:da:8d:49:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B5:9B:2C:E8:3D:90:4E:A7:46:FA:AD:E7:7F:39:3F:5E:B6:6B:CD
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32322d3234203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:67:42:a1:5e:3d:45:6d:62:97:a9:ef:41:4a:2a:bd:fa:d6:
         8a:38:2e:cd:c2:66:30:dd:c6:c6:46:34:e7:e8:a7:34:e7:0d:
         ac:ca:39:7b:d8:85:f1:b7:08:23:8e:a8:d0:2a:68:4e:2d:33:
         94:73:3f:10:63:7f:79:cc:b0:6b:81:10:94:ac:bc:94:eb:7f:
         20:90:94:5d:96:17:7c:23:2e:ab:9c:c8:11:5b:ba:3f:22:da:
         0a:13:63:a9:a2:ce:d9:c7:71:e1:44:90:98:03:06:03:8e:d4:
         45:4a:d4:f4:bb:0c:9a:26:5c:36:e3:5e:8f:37:dc:09:04:8e:
         85:b6:b4:06:20:6d:d3:00:fb:f3:51:6e:ee:65:60:c9:cf:8a:
         f4:3e:a0:c1:8b:e1:1d:3a:6e:c9:ef:5c:94:04:43:91:53:58:
         f9:0d:32:87:1f:e9:0f:3d:7c:4f:ab:98:00:76:ef:ce:93:b1:
         9c:75:8e:0a:90:8a:0c:1c:4a:6d:ba:ba:8e:0b:33:2e:a0:1a:
         f1:35:9f:a2:be:13:af:57:96:97:85:8d:8e:9e:a2:4c:29:61:
         29:9b:e2:58:40:da:52:62:6f:44:4b:e2:27:87:92:25:84:08:
         29:e1:5a:15:20:a3:f3:bc:28:76:d8:0e:ea:ee:ef:cf:a9:39:
         4e:03:8a:80
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMY7KVe2XOdyNFouUfbWSndpwjDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGMzhDNkNCODNBMzMwQ0M2RDVBODczODNDNjEyMzE5
RUE2MjY3MzAeFw0yNTAyMDQxODM3MTFaFw0yNjAyMDMxODQyMTFaMDMxMTAvBgNV
BAMTKDYzQjU5QjJDRTgzRDkwNEVBNzQ2RkFBREU3N0YzOTNGNUVCNjZCQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrNONJUWUMFH8YAitTyF6my7N
v+xoS1Gxo76wxcAJp7j6gncYphPGuQ9jdoFPwvY2uSHccB1WdMgEcRkdAqE/xPe6
paaUOZ3cAXH5DLkLQu+5RjUZ9vJlnS9hX1MP0dPMdpaq7wnUwjZ1zZilUBmKmOC8
KQ/01ke22TQ46dJ2p0yLy5xxuwDdcp+KWesiMWAsNNkqWpFE5f6aSrFppEX7ZRfj
Llg3FzloaW4v9CsXfpjrxe9MmhSyc24VOERS/SyunCWY/oBqQY3S1HO1ycdzGKCA
UcdRnI7QHqnBbaYiGR2PjXDXmlMGTePza5vbBnXoJCAZVMecXLDLX9qNSSPVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUY7WbLOg9kE6nRvqt5385P162a80wHwYDVR0j
BBgwFoAU/vOMbLg6MwzG1ahzg8YSMZ6mJnMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzM2MTc4OTI1MEJBOTlGRjYzNjRGQkNGRDlDQkZGREY4
MDBCNDlDNkQxQTFCNDJDNTFFNEE3MDE2QkUxOTAyLzAvRkVGMzhDNkNCODNBMzMw
Q0M2RDVBODczODNDNjEyMzE5RUE2MjY3My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRUYzOEM2Q0I4M0EzMzBDQzZE
NUE4NzM4M0M2MTIzMTlFQTYyNjczLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDczNjE3ODkyNTBCQTk5RkY2MzY0RkJDRkQ5Q0JGRkRGODAwQjQ5QzZE
MUExQjQyQzUxRTRBNzAxNkJFMTkwMi8wLzMxMzkzMDJlMzEzMDM3MmUzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM5MzAzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr5rQDAN
BgkqhkiG9w0BAQsFAAOCAQEANmdCoV49RW1il6nvQUoqvfrWijguzcJmMN3GxkY0
5+inNOcNrMo5e9iF8bcII46o0CpoTi0zlHM/EGN/ecywa4EQlKy8lOt/IJCUXZYX
fCMuq5zIEVu6PyLaChNjqaLO2cdx4USQmAMGA47URUrU9LsMmiZcNuNejzfcCQSO
hba0BiBt0wD781Fu7mVgyc+K9D6gwYvhHTpuye9clARDkVNY+Q0yhx/pDz18T6uY
AHbvzpOxnHWOCpCKDBxKbbq6jgszLqAa8TWfor4Tr1eWl4WNjp6iTClhKZviWEDa
UmJvREviJ4eSJYQIKeFaFSCj87wodtgO6u7vz6k5TgOKgA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:18 2025 by rpki-client