Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137312e302f32342d3234203d3e20323637383438.roa
File:                     3139302e39372e3137312e302f32342d3234203d3e20323637383438.roa (raw, json)
Hash identifier:          dPSoeHQxaWINPiQ2T8WaIMU/2Per2DnHgMWkIgcyHpk=
Subject key identifier:   1B:B8:C3:CB:ED:30:1C:3E:03:DF:BA:31:E8:3F:06:C1:EF:90:AB:30
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       3B75E1170A974F73F178C4AEF2031433F290E277
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137312e302f32342d3234203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:48 +0000
ROA not before:           Tue 04 Feb 2025 19:56:48 +0000
ROA not after:            Tue 03 Feb 2026 20:01:48 +0000
asID:                     267848
IP address blocks:        190.97.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:75:e1:17:0a:97:4f:73:f1:78:c4:ae:f2:03:14:33:f2:90:e2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:48 2025 GMT
            Not After : Feb  3 20:01:48 2026 GMT
        Subject: CN=1BB8C3CBED301C3E03DFBA31E83F06C1EF90AB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:c7:d5:99:e1:7a:20:97:a0:6c:b8:16:c3:
                    72:4c:9d:94:92:35:f0:96:c2:91:fe:2f:07:06:6d:
                    e2:b1:2b:97:88:ce:f5:9f:e0:93:fd:ec:7e:2d:9a:
                    9d:55:c4:a6:96:b4:48:98:72:19:ab:d7:64:78:b3:
                    85:c2:3f:f7:75:5d:b8:a2:dd:f2:62:d8:b1:4f:0e:
                    8f:f0:9c:70:70:8b:bf:41:1c:c0:da:c5:93:12:c6:
                    55:92:25:ab:bc:02:fe:75:bb:b8:0a:cb:e4:23:72:
                    e3:a8:93:b0:78:95:df:f8:78:e2:4e:9b:bd:2f:c8:
                    fb:03:30:3e:15:dc:d1:62:38:64:cf:84:5c:cf:2a:
                    9b:5f:da:59:e2:5f:fa:6d:bd:9c:e6:4e:4e:4e:0b:
                    e5:ce:87:0a:27:59:d2:e6:e2:00:ed:ac:6a:c8:a1:
                    ec:2f:7d:73:8b:36:d5:75:ee:83:3a:1b:e3:01:a6:
                    f8:64:4d:3e:bd:f9:30:e2:ba:85:b2:10:ad:91:2c:
                    25:64:7f:26:50:3c:b8:b6:55:b7:2c:ec:04:b2:89:
                    b2:ef:2a:ba:00:90:1e:f1:1c:5d:64:d5:f1:fc:92:
                    b4:1c:d2:ec:c2:94:ef:b6:0a:21:42:fb:5b:fa:21:
                    cb:ed:65:c3:66:6a:37:87:45:0d:7a:9f:64:a9:9e:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B8:C3:CB:ED:30:1C:3E:03:DF:BA:31:E8:3F:06:C1:EF:90:AB:30
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/3139302e39372e3137312e302f32342d3234203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:d6:d7:cc:e8:cc:56:9c:df:07:57:80:be:03:3e:34:b8:
         85:6b:db:82:8c:2e:83:7e:24:5c:9a:5a:b3:de:3b:b8:4e:5e:
         51:b6:e2:f7:1c:d5:ef:27:e8:64:a1:da:e9:cf:85:e3:3b:29:
         92:d4:2d:98:df:45:2d:1a:fd:7b:83:f3:8a:5c:74:d0:c0:4b:
         38:2c:d3:3f:ee:6a:0d:61:07:75:a1:2f:b3:9b:38:c5:0f:60:
         e9:cc:2e:09:f6:cf:9c:e3:a6:7d:61:80:1a:01:62:83:6d:84:
         26:b5:01:d0:b3:bc:9d:08:06:44:d5:99:53:9c:6c:ba:59:67:
         73:1d:49:22:c1:81:4b:46:54:93:f3:ea:29:6a:de:2d:b1:ce:
         d0:d0:29:c8:e3:d4:df:2c:3e:83:09:a5:d9:af:67:e8:97:f7:
         45:79:1d:d9:07:91:90:8a:74:6f:a8:38:a9:ba:9a:7a:59:d7:
         51:32:c2:8b:28:c0:cd:78:b8:22:19:48:ec:9b:07:a6:66:91:
         db:b3:97:27:a9:57:34:75:72:69:4f:77:38:99:90:50:cb:48:
         74:40:57:ad:c1:b3:4a:fd:f3:bd:2b:aa:95:2f:d0:3a:40:34:
         f3:0b:7c:96:09:59:b0:e9:42:c0:b2:1f:42:92:0e:54:f1:78:
         f8:71:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:44 2025 by rpki-client