Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32342d3332203d3e20323639393236.roa
File:                     3139302e38332e382e302f32342d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          x3oeRQHvE2WLiYASSHfl3VCeV0KFQbcEcmmRsW842Ro=
Subject key identifier:   5A:A4:A0:99:6E:B6:D7:C8:8F:36:C5:FB:49:37:C5:54:B3:47:69:00
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       363D5D12AD0AD62DB671C0A58D181E99A3D4C9C2
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32342d3332203d3e20323639393236.roa
Signing time:             Tue 04 Feb 2025 18:29:27 +0000
ROA not before:           Tue 04 Feb 2025 18:24:27 +0000
ROA not after:            Tue 03 Feb 2026 18:29:27 +0000
asID:                     269926
IP address blocks:        190.83.8.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3d:5d:12:ad:0a:d6:2d:b6:71:c0:a5:8d:18:1e:99:a3:d4:c9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Feb  4 18:24:27 2025 GMT
            Not After : Feb  3 18:29:27 2026 GMT
        Subject: CN=5AA4A0996EB6D7C88F36C5FB4937C554B3476900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:0e:a4:b6:df:f3:7f:88:88:72:82:6f:b0:
                    2e:6f:dd:7f:8a:c3:8a:7c:25:bd:24:5f:10:fd:0d:
                    1b:b4:94:43:22:1e:ad:b0:6f:62:3a:98:50:c6:ad:
                    06:55:30:29:97:76:75:65:81:b0:09:f5:37:f3:ba:
                    c4:36:b0:4c:7b:61:3f:6f:fa:79:ce:93:66:3c:da:
                    16:8f:45:2f:2c:9b:69:18:a9:88:5c:e5:97:8b:de:
                    a4:1f:c8:44:16:30:b8:81:6c:a6:15:e1:f5:b0:1b:
                    d5:4e:90:e9:60:12:28:ba:79:48:68:aa:22:56:04:
                    52:06:f9:7f:f4:5e:f7:9f:6c:fb:bb:ce:e2:81:15:
                    c0:f9:5b:2b:9c:95:62:8d:51:82:67:0f:4c:c8:8f:
                    80:f8:a9:44:71:be:01:30:0e:e6:7f:48:0b:b7:3a:
                    42:fc:54:fa:84:67:28:5b:e2:18:9a:b8:cc:ba:18:
                    36:e0:c0:bf:90:8c:ca:c6:6d:2f:7c:b5:3c:6c:28:
                    41:2c:ec:88:25:ce:21:f9:c4:6e:5b:36:55:ca:79:
                    53:fe:ff:1f:5a:c2:d3:1f:9f:4a:ed:3e:39:01:90:
                    fb:8a:70:0d:c6:44:82:70:2f:31:3c:98:e6:32:7d:
                    d7:68:bf:e7:9f:f4:71:fc:7e:2b:0a:2c:60:92:f1:
                    13:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A4:A0:99:6E:B6:D7:C8:8F:36:C5:FB:49:37:C5:54:B3:47:69:00
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32342d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:0c:8f:7e:4d:4f:28:8d:67:20:d3:c7:72:69:69:a4:8a:c3:
         9f:fe:59:35:59:b7:d0:c4:31:f8:a6:f7:0b:b3:93:24:7f:67:
         ff:b4:68:04:06:32:b7:65:7c:7e:c2:01:83:66:8f:a5:38:98:
         b6:78:37:a6:41:cd:69:77:16:be:21:0d:e2:53:7b:61:de:08:
         9d:ab:03:0f:a9:79:55:56:8d:68:d9:e6:d0:91:a4:82:b9:a8:
         a3:d1:4d:a0:17:8d:d9:48:58:24:d2:66:1b:0f:34:ff:a8:b6:
         4c:75:89:78:2a:82:5c:67:6c:b5:a3:3e:73:1f:ed:ef:fd:80:
         34:1a:e2:41:20:7a:3f:62:ef:3f:4a:51:ca:8e:de:ee:60:db:
         9e:2c:84:19:24:4b:ef:b6:0c:03:33:62:05:39:2d:53:2e:8f:
         cb:dd:e6:ac:39:d7:97:4b:d7:8e:8b:dc:1c:29:11:17:07:52:
         c9:86:e0:74:06:d6:2c:42:a2:10:1a:62:46:61:ea:57:12:62:
         f7:98:0e:3f:44:5a:d2:83:a1:34:a2:97:2a:9b:8b:b6:83:c8:
         20:c0:6e:39:1b:d6:57:ed:f2:66:5a:b7:36:6a:d2:92:80:10:
         12:e4:7f:1f:10:22:6c:56:6d:ff:bd:3d:eb:6e:7d:a3:a1:74:
         de:82:d0:91
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNj1dEq0K1i22ccCljRgemaPUycIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDQ0VDNDNBOTJCNEJDQzlCNzkyRDc1N0M3MTZGOTND
NTEzM0I2RjAeFw0yNTAyMDQxODI0MjdaFw0yNjAyMDMxODI5MjdaMDMxMTAvBgNV
BAMTKDVBQTRBMDk5NkVCNkQ3Qzg4RjM2QzVGQjQ5MzdDNTU0QjM0NzY5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjzg6ktt/zf4iIcoJvsC5v3X+K
w4p8Jb0kXxD9DRu0lEMiHq2wb2I6mFDGrQZVMCmXdnVlgbAJ9TfzusQ2sEx7YT9v
+nnOk2Y82haPRS8sm2kYqYhc5ZeL3qQfyEQWMLiBbKYV4fWwG9VOkOlgEii6eUho
qiJWBFIG+X/0XvefbPu7zuKBFcD5WyuclWKNUYJnD0zIj4D4qURxvgEwDuZ/SAu3
OkL8VPqEZyhb4hiauMy6GDbgwL+QjMrGbS98tTxsKEEs7IglziH5xG5bNlXKeVP+
/x9awtMfn0rtPjkBkPuKcA3GRIJwLzE8mOYyfddov+ef9HH8fisKLGCS8RPHAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUWqSgmW6218iPNsX7STfFVLNHaQAwHwYDVR0j
BBgwFoAUKMzsQ6krS8ybeS11fHFvk8UTO28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRDgxQkQ1RjYwOTZBNkFENTIxNzgyODZDRDY5MkJGQTMz
NTAwNkNCMTZERjBFNUZCQjhFMUNBOTczNzJFODAwLzAvMjhDQ0VDNDNBOTJCNEJD
QzlCNzkyRDc1N0M3MTZGOTNDNTEzM0I2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOENDRUM0M0E5MkI0QkNDOUI3
OTJENzU3QzcxNkY5M0M1MTMzQjZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUQ4MUJENUY2MDk2QTZBRDUyMTc4Mjg2Q0Q2OTJCRkEzMzUwMDZDQjE2
REYwRTVGQkI4RTFDQTk3MzcyRTgwMC8wLzMxMzkzMDJlMzgzMzJlMzgyZTMwMmYz
MjM0MmQzMzMyMjAzZDNlMjAzMjM2MzkzOTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+UwgwDQYJ
KoZIhvcNAQELBQADggEBAJgMj35NTyiNZyDTx3JpaaSKw5/+WTVZt9DEMfim9wuz
kyR/Z/+0aAQGMrdlfH7CAYNmj6U4mLZ4N6ZBzWl3Fr4hDeJTe2HeCJ2rAw+peVVW
jWjZ5tCRpIK5qKPRTaAXjdlIWCTSZhsPNP+otkx1iXgqglxnbLWjPnMf7e/9gDQa
4kEgej9i7z9KUcqO3u5g254shBkkS++2DAMzYgU5LVMuj8vd5qw515dL146L3Bwp
ERcHUsmG4HQG1ixCohAaYkZh6lcSYveYDj9EWtKDoTSilyqbi7aDyCDAbjkb1lft
8mZatzZq0pKAEBLkfx8QImxWbf+9PetufaOhdN6C0JE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:26:01 2025 by rpki-client