Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3133322e302f32342d3234203d3e203532323638.roa
File:                     3139302e3131342e3133322e302f32342d3234203d3e203532323638.roa (raw, json)
Hash identifier:          1Fk1+2+DTdcx2P2CAH21JtQc0zGOkRG7fbj2laEl8/g=
Subject key identifier:   12:BF:ED:8A:95:F1:FC:03:B0:4A:14:06:34:54:70:74:6F:C9:2D:77
Certificate issuer:       /CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
Certificate serial:       0F51E8EE840B9A9F722116649E4639E2FA3E320B
Authority key identifier: 51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3133322e302f32342d3234203d3e203532323638.roa
Signing time:             Fri 10 Jan 2025 13:25:02 +0000
ROA not before:           Fri 10 Jan 2025 13:20:02 +0000
ROA not after:            Fri 09 Jan 2026 13:25:02 +0000
asID:                     52268
IP address blocks:        190.114.132.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:51:e8:ee:84:0b:9a:9f:72:21:16:64:9e:46:39:e2:fa:3e:32:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51671AEF8DA09115F018AC1D369B5DC0E10B1E3C
        Validity
            Not Before: Jan 10 13:20:02 2025 GMT
            Not After : Jan  9 13:25:02 2026 GMT
        Subject: CN=12BFED8A95F1FC03B04A1406345470746FC92D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:30:3b:7f:a5:c0:a5:8d:ed:d0:dd:ad:84:85:
                    6e:04:6b:f7:15:25:71:8e:6a:9c:c3:e4:9c:f1:a5:
                    cf:92:a9:87:40:d0:ac:0e:4a:05:0f:a8:a0:21:6c:
                    1b:0e:8d:65:86:f7:94:37:8b:0a:07:da:be:b8:df:
                    ba:82:5b:71:94:c5:14:16:5d:96:95:f4:be:d8:80:
                    77:c2:f1:76:f7:ef:06:30:4f:36:6e:5b:cc:2a:e7:
                    02:ad:0d:36:fd:bc:86:da:2b:0f:45:e9:14:2c:64:
                    6d:56:75:09:29:d1:d8:61:c2:3f:95:4a:72:1b:91:
                    c5:b0:bc:06:9a:a1:93:d5:ac:b5:33:3e:c9:59:28:
                    dc:93:c5:f5:1e:4d:92:d8:53:ec:c8:2a:9d:8d:9a:
                    a6:9c:4b:15:c9:39:e0:f6:43:1f:0c:0d:3a:e8:ea:
                    bd:40:40:17:2c:4c:01:0d:6f:53:23:53:d1:4e:ef:
                    8c:d5:d4:d6:4a:f3:79:9c:82:1e:a8:4b:1a:41:2e:
                    ba:13:0d:6c:ee:b3:6d:46:c7:0e:31:bc:90:a2:19:
                    a2:f7:9a:9f:c6:2a:6d:24:04:80:57:0b:98:b7:b0:
                    00:1f:13:a3:55:03:43:45:04:76:13:b3:2e:76:bb:
                    f1:7e:cd:c9:bd:7e:66:4f:d2:19:d6:4c:97:4d:de:
                    66:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:ED:8A:95:F1:FC:03:B0:4A:14:06:34:54:70:74:6F:C9:2D:77
            X509v3 Authority Key Identifier:
                keyid:51:67:1A:EF:8D:A0:91:15:F0:18:AC:1D:36:9B:5D:C0:E1:0B:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/51671AEF8DA09115F018AC1D369B5DC0E10B1E3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC533A6C4A116E9313C32B3AD3D7F4D2FF5397A81C4260917B7418BB329CFE91/0/3139302e3131342e3133322e302f32342d3234203d3e203532323638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:71:d8:25:ce:85:53:a1:fb:3d:12:c6:f9:a3:61:ef:c1:cf:
         e1:e4:3b:69:41:ad:55:73:ea:04:15:1e:69:ec:8a:f0:d4:43:
         ba:a9:f2:85:f8:b7:f9:e6:13:88:3c:f6:5d:e9:d4:51:d7:c3:
         71:98:0e:64:94:9d:33:45:25:b0:6d:9c:3c:33:d3:5a:80:05:
         c1:5b:a8:ac:72:6c:13:a8:33:b1:54:05:3a:ab:8a:be:d9:65:
         38:46:26:46:6b:8b:34:7a:23:00:8d:06:af:52:8e:18:86:28:
         02:bd:d5:f5:0a:8f:96:5f:59:89:ab:49:d1:8f:6b:26:cf:e8:
         07:2b:60:b5:bd:ec:6a:1e:3b:34:8e:44:85:ff:f4:63:d7:a8:
         f3:3c:90:4d:43:93:c9:9d:45:ac:ef:29:fb:08:bb:b7:89:f1:
         85:32:c9:01:7e:2f:21:cb:af:99:4b:d1:d6:d6:a1:07:95:d5:
         ba:67:90:59:91:86:e2:6e:d9:ff:6e:ec:f7:0d:67:5a:59:9e:
         02:1d:07:b3:4e:b5:e9:4a:3e:e3:6a:65:08:8e:24:ab:28:25:
         46:ac:2d:4b:ee:71:12:9d:fb:46:04:3d:85:f1:8c:a0:77:6b:
         95:c4:1b:cc:fd:fe:41:d2:e7:c2:a3:15:48:45:c5:59:c7:ad:
         f5:96:c1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:06:35 2025 by rpki-client