Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa
File:                     3139302e36312e3130342e302f32342d3234203d3e203238303634.roa (raw, json)
Hash identifier:          9FoP1msuDPvIBaemgGCkQGqm4I5TVZ47LyADEahslzM=
Subject key identifier:   43:25:0E:70:EC:4C:9C:F1:B6:50:B8:D0:63:99:41:2D:C3:3D:37:EB
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       58F9EAD0C91B932425914F2B73C5EE0E8F17E910
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa
Signing time:             Tue 05 Mar 2024 17:59:09 +0000
ROA not before:           Tue 05 Mar 2024 17:54:09 +0000
ROA not after:            Tue 04 Mar 2025 17:59:09 +0000
asID:                     28064
IP address blocks:        190.61.104.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:ea:d0:c9:1b:93:24:25:91:4f:2b:73:c5:ee:0e:8f:17:e9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:09 2024 GMT
            Not After : Mar  4 17:59:09 2025 GMT
        Subject: CN=43250E70EC4C9CF1B650B8D06399412DC33D37EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ab:13:2f:04:a3:ec:69:0b:4c:bd:cd:c1:e6:
                    81:12:f7:1f:c8:d9:c8:55:8f:a6:35:b2:89:8d:e5:
                    95:1e:9e:d4:fb:8c:f4:97:dd:e6:d5:02:09:a0:72:
                    88:a6:db:51:a9:ad:1b:54:25:6e:67:1a:39:87:cf:
                    93:21:6a:3c:c2:a0:8e:88:3d:93:e7:90:e5:5f:5d:
                    95:93:0f:4e:cd:e0:9e:ad:c5:96:90:d7:e0:52:6b:
                    6b:d1:5f:f7:68:39:ba:57:cb:42:c7:a0:cb:84:8f:
                    21:97:e4:54:c9:d7:03:79:bf:88:56:ab:81:46:9b:
                    4f:8d:1e:18:16:b3:07:e1:a4:80:e5:b3:a0:2e:18:
                    47:40:7b:f5:a1:6e:cb:72:d8:5b:99:31:e8:b8:da:
                    b8:a0:0d:e7:eb:aa:60:59:b8:ae:9b:92:7c:ff:61:
                    91:73:25:41:01:cb:5b:02:1e:24:b9:5a:48:a8:54:
                    8d:e5:50:5e:80:ff:41:89:39:de:67:db:18:86:a4:
                    8a:d5:6c:ab:89:3c:25:55:fe:43:30:d9:5e:9b:ac:
                    ff:bb:02:fb:8a:4c:46:e9:09:76:92:0e:62:c7:52:
                    8f:ef:81:e4:dd:31:4e:07:f0:5a:65:ac:5f:c6:72:
                    f7:2d:e4:44:da:4f:a3:ba:77:d2:61:cb:33:ed:4e:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:25:0E:70:EC:4C:9C:F1:B6:50:B8:D0:63:99:41:2D:C3:3D:37:EB
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e3130342e302f32342d3234203d3e203238303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:34:87:b5:9b:68:47:a2:49:a5:58:34:a9:6d:ea:62:23:99:
         97:f6:da:75:82:05:eb:ce:a7:9d:fc:b0:d4:da:ca:04:74:a3:
         4e:68:74:44:75:a3:59:3a:a6:1b:de:1f:a9:20:92:0a:95:98:
         6b:52:41:99:9b:5a:90:eb:2a:63:a4:63:5b:b1:17:22:1e:c8:
         29:41:91:20:c8:91:7e:c3:01:32:8f:04:12:99:ad:e3:6e:eb:
         30:41:5c:91:0b:c3:04:e9:aa:f2:92:75:22:22:c9:5c:ed:ff:
         d1:27:f5:6c:1f:64:ee:a7:ef:7e:66:cd:b8:46:3b:8b:08:fb:
         a7:0d:9d:53:69:ad:7f:d8:59:ce:a7:c1:1f:6c:8b:a7:b8:f0:
         5e:98:14:d6:11:85:7c:ab:42:f5:0f:a8:d0:9e:ed:42:04:eb:
         99:a5:8f:b0:46:84:74:85:8e:7a:2c:da:f9:b8:03:9a:e5:fa:
         83:b6:5a:71:9d:46:08:03:f1:5a:32:ce:39:21:6d:2b:56:4d:
         20:50:54:1d:35:6b:6c:98:8b:e8:20:d3:92:95:b1:bf:f5:44:
         84:e4:2f:72:c7:56:7b:3b:4e:df:be:a8:d1:68:a4:8e:d4:bb:
         42:d7:db:81:4a:7c:4c:96:4b:15:d1:cc:94:6b:23:2b:53:de:
         f1:0e:a6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----