Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa
File:                     3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa (raw, json)
Hash identifier:          ONlpK8TmxSMyNW39aYa30GnuBHkSfDLnAr6WdEbZP5w=
Subject key identifier:   41:37:05:DA:75:EC:74:76:93:15:27:12:CA:10:0D:46:B2:59:98:E0
Certificate issuer:       /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial:       44C2E70D0A4B735CAACEE90E2222F3336A013B93
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa
Signing time:             Tue 04 Feb 2025 18:52:44 +0000
ROA not before:           Tue 04 Feb 2025 18:47:44 +0000
ROA not after:            Tue 03 Feb 2026 18:52:44 +0000
asID:                     265615
IP address blocks:        189.206.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c2:e7:0d:0a:4b:73:5c:aa:ce:e9:0e:22:22:f3:33:6a:01:3b:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
        Validity
            Not Before: Feb  4 18:47:44 2025 GMT
            Not After : Feb  3 18:52:44 2026 GMT
        Subject: CN=413705DA75EC747693152712CA100D46B25998E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:75:ed:1a:8e:db:90:b8:cb:06:26:d8:f2:
                    00:eb:58:52:42:50:86:69:f7:13:26:b1:e7:ab:85:
                    41:ba:13:20:80:84:a1:e9:72:8d:bd:6d:cd:4a:6b:
                    c2:02:d8:37:68:25:ba:db:54:d4:5b:93:74:4b:a6:
                    a0:89:79:be:ef:f2:37:52:cd:a1:1e:92:85:75:8a:
                    b6:14:e5:2e:4b:92:6d:20:06:61:be:7c:4b:90:87:
                    d4:9e:2d:ce:cb:dd:35:c1:26:6c:64:8f:27:2d:41:
                    10:41:45:e6:bf:d9:c0:ea:33:2d:27:de:c4:24:f7:
                    37:62:a7:48:19:c4:f5:2f:31:bf:2a:d1:19:ab:9c:
                    51:99:17:c3:ff:6a:e2:a2:e4:2b:26:76:0d:1b:77:
                    3b:37:5c:0d:59:d1:00:00:7b:72:d0:1c:ea:71:13:
                    44:fc:ac:9f:41:9c:bb:2c:5f:17:ef:41:ad:f0:6b:
                    cf:57:72:1f:e3:b4:c3:28:80:4a:73:0a:06:fa:f4:
                    cc:75:fe:36:fb:45:3f:ab:a0:5c:99:07:70:e3:9d:
                    2f:c0:a8:cf:f2:f8:c0:35:a5:35:2f:5d:0c:ba:ca:
                    2f:2b:fd:58:6e:21:2a:4f:ee:dd:ae:2b:02:7e:2b:
                    b8:92:fc:9d:d8:b5:04:24:32:9f:b3:77:fd:03:e5:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:37:05:DA:75:EC:74:76:93:15:27:12:CA:10:0D:46:B2:59:98:E0
            X509v3 Authority Key Identifier:
                keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3138392e3230362e32322e302f32342d3234203d3e20323635363135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.206.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:4a:9e:14:0b:56:57:51:33:78:70:47:1e:78:ec:94:b6:41:
         91:bc:40:23:cb:31:f2:66:25:97:3d:6e:02:25:ad:2a:e1:65:
         09:ff:8b:2d:4a:8d:11:71:6b:73:82:ae:ea:d7:06:46:87:7d:
         89:19:19:bd:07:72:d9:f6:2e:47:c8:12:b2:69:07:41:94:b3:
         14:6e:62:3b:eb:b8:b5:df:6d:f4:8f:0d:ac:03:bc:67:16:46:
         f4:91:f0:16:1b:9b:50:8e:00:54:72:15:62:db:93:59:5f:51:
         b2:69:38:20:ff:b6:12:97:b3:0c:bb:bb:a5:cc:77:26:0d:0d:
         d4:85:48:f4:a8:33:48:29:18:4c:0c:3a:fb:96:01:92:69:c3:
         a5:60:46:82:46:94:fc:39:c2:54:7d:97:51:5b:eb:80:4b:0f:
         79:e5:03:4d:c8:b1:ad:18:04:bd:54:81:29:78:bd:45:56:d0:
         01:37:8f:f9:8f:8a:a5:3f:86:27:9c:71:68:46:fa:dc:9d:1f:
         14:cc:45:f2:a3:6c:56:23:2d:11:f7:b0:ef:e9:39:38:31:b2:
         44:8a:a5:87:4b:2a:f4:2c:60:72:4d:54:a9:0d:48:9c:07:a4:
         7a:d2:50:7c:2c:bb:79:37:3c:57:36:cd:13:99:6d:32:c1:d4:
         65:5a:bf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:33 2025 by rpki-client