Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa
File:                     3139302e35372e342e302f32332d3234203d3e203132313237.roa (raw, json)
Hash identifier:          zeWlT5b4ZwDL+6dHFh74uPqxOmDk0qSOSkTFeISn+Kk=
Subject key identifier:   28:76:8E:E5:71:19:03:A0:F8:32:0F:C1:0D:21:FC:44:EC:ED:F2:E6
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       50E88E762BA5C7217402506B63CB0E2F8D790017
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:47 +0000
ROA not before:           Tue 05 Mar 2024 18:01:47 +0000
ROA not after:            Tue 04 Mar 2025 18:06:47 +0000
asID:                     12127
IP address blocks:        190.57.4.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e8:8e:76:2b:a5:c7:21:74:02:50:6b:63:cb:0e:2f:8d:79:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:47 2024 GMT
            Not After : Mar  4 18:06:47 2025 GMT
        Subject: CN=28768EE5711903A0F8320FC10D21FC44ECEDF2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:a4:7c:0d:28:7d:c8:a2:3e:c7:55:c6:dc:
                    06:51:56:4b:d2:42:7c:7e:1d:bf:97:0c:b2:83:3b:
                    67:70:d0:1f:2f:25:6a:4c:fa:80:c3:c0:2c:43:0d:
                    13:0c:2e:2d:e5:7a:03:16:d7:6b:e0:16:d6:e5:45:
                    d7:c2:d3:a9:e5:f3:f4:13:4c:6f:04:6d:77:66:d0:
                    c0:de:ca:8c:a9:32:82:73:d9:25:2f:cb:91:3c:19:
                    88:d8:16:a8:7f:7a:92:b5:c7:7d:6b:2c:57:db:01:
                    ec:e7:42:d3:96:27:3d:26:28:37:6f:6f:7f:ec:42:
                    18:c2:ec:ef:30:df:14:57:b2:56:31:4c:d0:10:d1:
                    e0:2f:f4:99:59:44:2b:9c:44:d6:d6:0e:bc:39:04:
                    86:85:b6:4b:0d:9b:2b:e7:98:d0:89:a4:f5:21:c7:
                    bd:61:d0:a9:6f:a1:52:0e:57:1a:ab:57:3f:38:73:
                    01:95:da:91:27:e0:22:82:8a:4f:dc:71:1d:0f:3f:
                    90:42:e1:c4:34:c3:e9:ef:47:ec:22:b6:f5:07:7f:
                    03:01:ec:fc:fa:37:22:23:42:7f:f3:27:d5:7e:b8:
                    97:1f:23:5c:ce:1e:1d:d9:ee:ec:00:42:b8:16:c9:
                    d4:dc:19:a7:ea:cf:c6:d8:54:3e:94:13:0e:d4:b4:
                    69:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:8E:E5:71:19:03:A0:F8:32:0F:C1:0D:21:FC:44:EC:ED:F2:E6
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e342e302f32332d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:3f:82:67:b4:19:00:96:f7:11:0f:21:a1:bf:7e:83:91:e5:
         a2:c2:32:73:e3:eb:3c:99:b1:a5:5e:bc:cb:05:63:47:a0:02:
         b6:8c:93:08:9a:1e:d4:6f:7b:53:69:09:43:41:c7:be:3e:50:
         9b:8e:3b:f2:5f:8f:a6:d8:86:a8:e7:5a:7a:e3:5b:ab:cb:49:
         7c:6c:f5:24:93:fd:29:f1:52:23:f4:f0:c0:f6:a9:54:36:62:
         7d:da:97:a0:1b:f8:c4:e2:d4:56:df:dd:cd:27:0a:bc:3c:61:
         94:d0:3d:e9:43:c4:71:c1:54:f5:07:15:64:d9:f2:a0:18:36:
         37:9a:b1:57:55:cc:1d:7c:93:ae:c8:bf:de:c7:ad:f9:e0:00:
         69:65:ac:bb:11:6b:27:bf:02:54:e5:21:c6:69:be:f4:0b:3a:
         c7:a4:b3:39:a4:d7:8c:3b:27:bf:f7:1c:a5:7e:16:08:30:9f:
         c2:16:b0:65:18:e8:a7:04:ba:0b:32:6f:cb:09:5b:72:7e:39:
         00:ab:2a:df:c7:6d:5b:13:b3:5f:f9:3d:01:f7:86:6c:c3:14:
         40:0f:65:21:14:a4:71:bd:84:de:a2:cc:1f:14:27:a8:97:86:
         f8:a9:4c:86:a6:df:d4:93:c5:7d:5f:9b:55:c4:59:95:b9:9a:
         28:a3:bc:1f
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUUOiOdiulxyF0AlBrY8sOL415ABcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENERTI0NTQwNkVGNTNEODAyQUMwNTAzMEYyQUYzQzYx
OEI2OUZGMjAeFw0yNDAzMDUxODAxNDdaFw0yNTAzMDQxODA2NDdaMDMxMTAvBgNV
BAMTKDI4NzY4RUU1NzExOTAzQTBGODMyMEZDMTBEMjFGQzQ0RUNFREYyRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSaR8DSh9yKI+x1XG3AZRVkvS
Qnx+Hb+XDLKDO2dw0B8vJWpM+oDDwCxDDRMMLi3legMW12vgFtblRdfC06nl8/QT
TG8EbXdm0MDeyoypMoJz2SUvy5E8GYjYFqh/epK1x31rLFfbAeznQtOWJz0mKDdv
b3/sQhjC7O8w3xRXslYxTNAQ0eAv9JlZRCucRNbWDrw5BIaFtksNmyvnmNCJpPUh
x71h0KlvoVIOVxqrVz84cwGV2pEn4CKCik/ccR0PP5BC4cQ0w+nvR+witvUHfwMB
7Pz6NyIjQn/zJ9V+uJcfI1zOHh3Z7uwAQrgWydTcGafqz8bYVD6UEw7UtGnXAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUKHaO5XEZA6D4Mg/BDSH8ROzt8uYwHwYDVR0j
BBgwFoAU3N4kVAbvU9gCrAUDDyrzxhi2n/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRTVENDdBMzU5MkIyNTlCNUE0M0EzRTAxQkM5REQ0QjdE
NzZEOEFFQzM4N0UxOTU1RkU5MDk0QTNBQzZERTQ3LzAvRENERTI0NTQwNkVGNTNE
ODAyQUMwNTAzMEYyQUYzQzYxOEI2OUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQ0RFMjQ1NDA2RUY1M0Q4MDJB
QzA1MDMwRjJBRjNDNjE4QjY5RkYyLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkU1RDQ3QTM1OTJCMjU5QjVBNDNBM0UwMUJDOURENEI3RDc2RDhBRUMz
ODdFMTk1NUZFOTA5NEEzQUM2REU0Ny8wLzMxMzkzMDJlMzUzNzJlMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMyMzEzMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvjkEMA0GCSqG
SIb3DQEBCwUAA4IBAQA4P4JntBkAlvcRDyGhv36DkeWiwjJz4+s8mbGlXrzLBWNH
oAK2jJMImh7Ub3tTaQlDQce+PlCbjjvyX4+m2Iao51p641ury0l8bPUkk/0p8VIj
9PDA9qlUNmJ92pegG/jE4tRW393NJwq8PGGU0D3pQ8RxwVT1BxVk2fKgGDY3mrFX
VcwdfJOuyL/ex6354ABpZay7EWsnvwJU5SHGab70CzrHpLM5pNeMOye/9xylfhYI
MJ/CFrBlGOinBLoLMm/LCVtyfjkAqyrfx21bE7Nf+T0B94ZswxRAD2UhFKRxvYTe
oswfFCeol4b4qUyGpt/Uk8V9X5tVxFmVuZooo7wf
-----END CERTIFICATE-----