Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/3139302e3132322e3138382e302f32322d3234203d3e20323633373539.roa
File:                     3139302e3132322e3138382e302f32322d3234203d3e20323633373539.roa (raw, json)
Hash identifier:          /qqIkP8q5/9T/Ql7tBNp116xDzVYSS1NbElfo9IX87Q=
Subject key identifier:   C1:EF:E6:0E:BE:CE:EF:52:C6:D3:C1:65:09:66:38:61:93:79:D7:28
Certificate issuer:       /CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE
Certificate serial:       112915C86ADBD31A57F021694F68A8B9BDDF7060
Authority key identifier: 8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/3139302e3132322e3138382e302f32322d3234203d3e20323633373539.roa
Signing time:             Tue 04 Feb 2025 20:05:45 +0000
ROA not before:           Tue 04 Feb 2025 20:00:45 +0000
ROA not after:            Tue 03 Feb 2026 20:05:45 +0000
asID:                     263759
IP address blocks:        190.122.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:15:c8:6a:db:d3:1a:57:f0:21:69:4f:68:a8:b9:bd:df:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE
        Validity
            Not Before: Feb  4 20:00:45 2025 GMT
            Not After : Feb  3 20:05:45 2026 GMT
        Subject: CN=C1EFE60EBECEEF52C6D3C165096638619379D728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:13:f5:d0:05:51:0a:77:2c:2b:55:dd:1a:26:
                    5e:07:6d:03:6e:d1:87:57:49:fe:d9:b1:ea:bb:b3:
                    64:dd:94:62:0f:5f:49:7c:25:d7:d8:32:b7:4a:f9:
                    86:13:ed:49:dc:93:a5:52:8c:6c:e9:b5:42:c6:d6:
                    e5:11:9a:83:a1:0f:b2:90:70:5b:c5:23:43:cc:36:
                    d3:78:a4:38:bb:0d:a5:a0:f7:3e:dd:5f:e3:92:34:
                    ec:e4:78:09:89:59:70:98:07:85:97:b8:aa:a2:f8:
                    98:f8:9b:a2:ba:d4:3b:93:6f:84:da:5d:69:a8:05:
                    a7:c2:41:7b:79:3f:eb:42:21:cc:20:1b:a6:22:0e:
                    c5:d8:3c:cd:bf:3e:21:1d:4d:d9:e0:e7:2f:97:51:
                    83:aa:7e:bd:70:04:4f:bd:b8:92:63:f7:f2:2d:9a:
                    6f:94:41:53:52:1d:7e:43:f2:88:e5:53:ff:8f:5f:
                    f6:ae:34:6b:92:53:ff:19:4c:80:78:73:a7:57:c4:
                    6e:ef:e4:4a:f2:46:d3:c3:fb:ca:4d:ce:41:7f:70:
                    a6:ce:a2:e5:76:8f:b0:dd:eb:12:44:33:50:1d:2c:
                    00:d4:bf:db:78:1c:00:75:4b:dd:71:d6:f0:7b:43:
                    37:34:ec:9d:9c:f2:a1:5c:4a:38:8c:dd:82:25:b6:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:E6:0E:BE:CE:EF:52:C6:D3:C1:65:09:66:38:61:93:79:D7:28
            X509v3 Authority Key Identifier:
                keyid:8B:75:AE:D6:9E:DD:3E:DC:FF:66:9A:1A:D7:1F:8B:9B:C5:30:40:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B75AED69EDD3EDCFF669A1AD71F8B9BC53040BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E92083FBD424D98BB7C69E11CFACDAC1AD2C342444BDF1C410A335BD5BC8602C/0/3139302e3132322e3138382e302f32322d3234203d3e20323633373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:95:cd:a2:4c:ea:fc:35:5a:fb:a3:66:a2:2c:ef:70:c4:76:
         6c:ac:4e:03:14:c4:4c:80:27:e0:d2:11:98:5d:31:6a:b3:42:
         fe:74:20:c9:b5:48:0f:58:63:b9:bc:a2:ad:c2:27:9b:da:69:
         e9:be:ed:e8:d3:a1:95:94:c5:f1:10:15:a0:ba:51:ee:6b:1d:
         c6:e8:ce:f1:3a:94:85:fe:22:b4:f7:bd:e3:f2:20:e7:d6:ba:
         e4:f4:9d:03:81:5d:13:ed:3c:1f:c7:5d:fa:47:bc:23:6d:da:
         0e:4e:ba:7e:56:d7:6c:9d:b1:22:aa:ea:60:5f:c1:1b:43:0d:
         89:bc:84:4e:1c:12:00:4c:62:d0:ce:27:7f:9e:b9:8e:be:b9:
         61:ce:ce:7f:52:1a:8f:da:38:5d:22:23:57:36:6a:d2:c3:52:
         8c:d2:8b:c3:27:60:4c:06:bf:82:a9:59:50:8b:bd:d3:91:43:
         5f:14:7f:a0:b8:0a:9a:14:68:ef:df:9f:fb:bc:10:2d:d7:34:
         76:66:58:bf:a6:a4:6d:ae:38:5f:b1:30:12:a4:77:52:ad:0f:
         08:a7:c5:88:c9:bc:e0:2f:90:09:4c:df:38:07:72:37:28:c2:
         dc:46:58:cd:ae:9e:05:d5:6f:3a:a6:20:fc:c0:d8:69:5f:f2:
         96:c1:1d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:26 2025 by rpki-client