Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa
File:                     3139302e35372e3139322e302f31392d3234203d3e203139383839.roa (raw, json)
Hash identifier:          TXiJryGil3Xj2iTnXBwdqVRw2tjrb6uEFr1efGKV0GY=
Subject key identifier:   86:C1:25:D4:BD:D7:ED:52:B8:42:C0:6C:BE:93:30:8D:BB:F7:A7:CB
Certificate issuer:       /CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
Certificate serial:       1ECF63A041E6A1AD5225E44071A227941966F1C1
Authority key identifier: AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa
Signing time:             Tue 04 Feb 2025 20:06:30 +0000
ROA not before:           Tue 04 Feb 2025 20:01:30 +0000
ROA not after:            Tue 03 Feb 2026 20:06:30 +0000
asID:                     19889
IP address blocks:        190.57.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:cf:63:a0:41:e6:a1:ad:52:25:e4:40:71:a2:27:94:19:66:f1:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB
        Validity
            Not Before: Feb  4 20:01:30 2025 GMT
            Not After : Feb  3 20:06:30 2026 GMT
        Subject: CN=86C125D4BDD7ED52B842C06CBE93308DBBF7A7CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:ec:d0:4e:87:0f:52:c1:79:19:c0:4a:8b:
                    db:f4:72:8a:86:07:af:11:9d:44:50:42:a6:e3:a2:
                    4b:27:7a:06:bf:44:a5:30:68:94:5e:cc:ce:87:79:
                    f1:a3:8c:34:55:65:25:5d:da:e4:ee:f4:d0:9d:c9:
                    d3:d8:c7:ae:7b:78:52:26:6d:6e:86:29:30:fd:f7:
                    2a:76:b0:73:97:68:ad:f3:ff:d4:40:90:31:91:85:
                    0d:1e:11:f0:5c:e4:f2:ed:64:00:25:43:45:87:28:
                    0b:d4:2e:15:6a:ad:7c:1e:03:c3:67:60:5b:f8:48:
                    46:2d:9d:6b:ed:88:10:b9:07:02:19:5b:c3:11:25:
                    f6:af:3e:70:12:7f:09:50:2a:a3:02:1c:fb:9a:11:
                    ec:e2:3d:c8:6d:56:ab:f3:cb:c8:af:ad:6a:b6:17:
                    cd:61:15:83:18:8c:75:69:92:8a:68:37:c1:8f:5e:
                    83:70:1a:fe:38:90:3f:ef:47:b4:6c:88:03:fc:68:
                    ee:59:b0:c8:5a:cd:1d:9e:62:a8:d3:4a:22:77:f4:
                    52:5e:d9:49:06:d0:05:20:1a:51:cd:5a:60:98:4b:
                    41:18:06:71:e5:30:74:8a:d4:71:82:1f:44:21:9b:
                    fb:96:99:62:bf:53:fa:04:09:10:de:67:11:76:9f:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:25:D4:BD:D7:ED:52:B8:42:C0:6C:BE:93:30:8D:BB:F7:A7:CB
            X509v3 Authority Key Identifier:
                keyid:AB:6F:C2:B3:BE:D1:DA:F0:5E:7F:5D:F4:45:D0:88:BB:39:64:58:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6FC2B3BED1DAF05E7F5DF445D088BB396458EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD0733128B2D86E84D2C1FAD22C761A373AF8A24F0F9708FBDB55DC17603D7BA/0/3139302e35372e3139322e302f31392d3234203d3e203139383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:2b:bf:87:fa:c3:02:a8:34:11:1b:14:5e:8c:13:ef:77:91:
         fd:77:af:68:f7:8e:73:73:bd:9d:69:68:32:ec:b5:45:7f:6d:
         53:cc:f6:1b:e5:38:ce:ce:ea:9d:49:e7:ae:51:1d:8e:64:b6:
         bb:c7:3f:b2:31:b9:12:a8:64:9e:ad:b9:c0:3c:12:ef:23:00:
         00:ef:97:7b:4d:a1:4e:51:fb:16:27:9c:a1:a8:e4:5d:da:73:
         6a:51:39:8c:3e:47:c9:1a:b9:05:6f:92:13:9e:b5:84:b4:5c:
         fd:98:40:96:f4:eb:af:b3:bb:4c:51:bd:be:9f:fb:1a:de:8b:
         71:c7:d2:2d:8d:87:d6:ea:6c:b6:b9:72:3d:b5:03:51:8f:18:
         cb:4e:d7:61:7e:e3:54:f3:78:14:c6:74:a6:7b:95:0b:ac:76:
         09:c5:91:e2:ae:0a:b7:19:0b:a0:c9:31:26:6c:cc:b4:fd:27:
         2b:1e:a0:7b:54:06:ea:c8:19:66:dc:cb:c6:6a:1c:68:57:87:
         c0:96:26:40:15:c6:90:64:48:00:ac:bd:32:0c:aa:03:c8:c4:
         59:9d:16:7e:ec:64:26:1e:5b:d5:61:d3:c0:80:42:14:53:f4:
         58:42:64:1a:08:40:c3:fb:40:f5:96:f3:6b:e3:17:d8:99:de:
         c4:ef:04:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:58 2025 by rpki-client