Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa
File:                     3139312e3131322e302e302f31342d3234203d3e2037343138.roa (raw, json)
Hash identifier:          IOryaCy/1kIc0AqpXcOfZnKX8XxkMjAXBfCg5Os5wjg=
Subject key identifier:   7B:A2:32:4C:38:5C:48:17:EF:C3:E5:28:58:FA:51:EA:93:C8:91:92
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       21F052AD3B7B268826549A535E68146E52BA9CA7
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:53 +0000
ROA not before:           Tue 04 Feb 2025 18:24:53 +0000
ROA not after:            Tue 03 Feb 2026 18:29:53 +0000
asID:                     7418
IP address blocks:        191.112.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f0:52:ad:3b:7b:26:88:26:54:9a:53:5e:68:14:6e:52:ba:9c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:53 2025 GMT
            Not After : Feb  3 18:29:53 2026 GMT
        Subject: CN=7BA2324C385C4817EFC3E52858FA51EA93C89192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ef:c6:45:fd:a0:c2:1f:ee:70:b9:01:4b:07:
                    03:a3:da:81:c4:55:dc:19:47:73:7d:c2:e4:d7:87:
                    56:78:26:ed:1e:af:e8:65:c6:d9:13:a5:9d:37:cc:
                    3f:66:c7:aa:c8:c9:45:42:15:1c:71:f5:47:e4:55:
                    00:50:73:38:d4:23:2e:83:02:02:d2:24:cb:87:1b:
                    a9:18:ec:a5:21:4b:03:2b:5f:20:aa:a8:f0:16:e8:
                    e6:8e:57:bb:06:16:83:29:e6:7f:78:d6:39:9a:a9:
                    9d:a4:45:3e:ef:c3:f8:5f:20:c0:ff:b8:15:26:d0:
                    a5:0c:4d:bc:e5:60:c0:19:6a:64:8c:00:8b:47:ea:
                    e6:b2:a6:7c:da:51:de:96:6a:76:e1:60:df:9e:e6:
                    fb:fd:14:32:c9:c1:b3:16:2f:9a:93:59:ef:ee:2e:
                    ac:bc:c7:f8:db:d0:29:80:05:6a:ca:7b:82:5c:d6:
                    a8:ab:5c:66:89:b0:e5:51:e1:92:db:fa:c2:10:73:
                    7b:2c:f9:f9:7f:73:81:4a:f9:da:23:d3:cc:62:fe:
                    52:2b:8e:77:56:3f:0d:7b:df:71:6d:74:8c:20:af:
                    99:ed:a3:ca:a8:25:e6:38:ef:12:f0:60:65:25:69:
                    4f:06:12:c0:1a:ab:27:15:32:0e:d8:9a:06:81:d9:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:32:4C:38:5C:48:17:EF:C3:E5:28:58:FA:51:EA:93:C8:91:92
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139312e3131322e302e302f31342d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.112.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         00:07:03:9c:47:63:fd:62:09:e2:b1:d9:86:b6:85:29:62:e1:
         c8:b2:6b:91:dc:58:7a:6e:ce:26:53:58:22:31:ac:cb:a7:6d:
         dd:41:e6:5a:5f:83:ca:e1:b8:b0:c7:e4:f1:fc:fb:d2:b3:6e:
         d7:f6:40:a5:51:e9:e2:c8:2c:ba:a2:95:06:2b:26:4c:00:33:
         2e:e0:ed:cc:b0:44:31:18:fe:bd:4d:b7:7b:1b:66:97:90:fa:
         5c:ac:24:cb:0e:05:f4:45:2a:7a:12:85:14:be:9b:19:39:57:
         a4:de:72:68:79:ed:92:0c:b3:f7:5e:1e:63:79:a0:03:d4:75:
         69:b6:c3:5e:28:12:ec:71:61:16:d2:5b:de:a8:01:90:c1:91:
         ba:00:6f:92:e1:24:0c:e1:16:fb:aa:f4:2b:ff:ed:0c:c8:97:
         80:31:12:47:db:d5:2c:9c:88:74:db:69:02:72:73:c4:a1:6d:
         98:4c:49:33:31:66:2d:15:6e:49:a6:34:40:af:b6:1b:a8:10:
         7c:10:60:82:eb:83:2e:35:c3:fa:2c:ad:c0:83:c1:6b:e7:5e:
         43:fa:59:bb:12:04:9a:fb:ca:e4:f0:83:b0:d3:ae:87:e3:d0:
         4c:be:67:51:a0:6f:3b:b0:bd:5f:8b:64:a1:ef:99:cd:f1:ea:
         57:b3:71:ce
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUIfBSrTt7JogmVJpTXmgUblK6nKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjVDRDZBNEZCQzhCRUUzNEEyREMzNzE3OTNBMDlFMjc0
RTBFMzY2MTAeFw0yNTAyMDQxODI0NTNaFw0yNjAyMDMxODI5NTNaMDMxMTAvBgNV
BAMTKDdCQTIzMjRDMzg1QzQ4MTdFRkMzRTUyODU4RkE1MUVBOTNDODkxOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR78ZF/aDCH+5wuQFLBwOj2oHE
VdwZR3N9wuTXh1Z4Ju0er+hlxtkTpZ03zD9mx6rIyUVCFRxx9UfkVQBQczjUIy6D
AgLSJMuHG6kY7KUhSwMrXyCqqPAW6OaOV7sGFoMp5n941jmaqZ2kRT7vw/hfIMD/
uBUm0KUMTbzlYMAZamSMAItH6uaypnzaUd6WanbhYN+e5vv9FDLJwbMWL5qTWe/u
Lqy8x/jb0CmABWrKe4Jc1qirXGaJsOVR4ZLb+sIQc3ss+fl/c4FK+doj08xi/lIr
jndWPw1733FtdIwgr5nto8qoJeY47xLwYGUlaU8GEsAaqycVMg7YmgaB2akrAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUe6IyTDhcSBfvw+UoWPpR6pPIkZIwHwYDVR0j
BBgwFoAUJc1qT7yL7jSi3DcXk6CeJ04ONmEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EOTUyQkFDQjZEMjdFNDgyNjcwMzZGN0NCRDZDQzRBREVF
NjBCQTFEMUNGRjVFRjU5NDgxQTkwQkEyMDcxREQ3LzAvMjVDRDZBNEZCQzhCRUUz
NEEyREMzNzE3OTNBMDlFMjc0RTBFMzY2MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNUNENkE0RkJDOEJFRTM0QTJE
QzM3MTc5M0EwOUUyNzRFMEUzNjYxLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDk1MkJBQ0I2RDI3RTQ4MjY3MDM2RjdDQkQ2Q0M0QURFRTYwQkExRDFD
RkY1RUY1OTQ4MUE5MEJBMjA3MURENy8wLzMxMzkzMTJlMzEzMTMyMmUzMDJlMzAy
ZjMxMzQyZDMyMzQyMDNkM2UyMDM3MzQzMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCv3AwDQYJKoZI
hvcNAQELBQADggEBAAAHA5xHY/1iCeKx2Ya2hSli4ciya5HcWHpuziZTWCIxrMun
bd1B5lpfg8rhuLDH5PH8+9Kzbtf2QKVR6eLILLqilQYrJkwAMy7g7cywRDEY/r1N
t3sbZpeQ+lysJMsOBfRFKnoShRS+mxk5V6Tecmh57ZIMs/deHmN5oAPUdWm2w14o
EuxxYRbSW96oAZDBkboAb5LhJAzhFvuq9Cv/7QzIl4AxEkfb1SyciHTbaQJyc8Sh
bZhMSTMxZi0VbkmmNECvthuoEHwQYILrgy41w/osrcCDwWvnXkP6WbsSBJr7yuTw
g7DTrofj0Ey+Z1GgbzuwvV+LZKHvmc3x6lezcc4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:13 2025 by rpki-client