Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0040A434FBB3B0A89B4590C7F02333EE2F3F7C5EFE6877768E9304D88EF4D07C/0/3139302e3138352e3130302e302f32322d3234203d3e20323632323232.roa
File:                     3139302e3138352e3130302e302f32322d3234203d3e20323632323232.roa (raw, json)
Hash identifier:          5O7BJX22IqkjVo991rqBZr7se1zf4K57PXFwl9fxq1g=
Subject key identifier:   9E:44:F2:4E:D9:70:3C:D7:10:23:FA:E0:A2:8C:A7:DF:B3:A0:9C:93
Certificate issuer:       /CN=E840561FFBC9EBC4548DBEF156AC6DAB57E2EEDB
Certificate serial:       1424C9B6742ECE9F72669769A9E9F169CCF0A1BE
Authority key identifier: E8:40:56:1F:FB:C9:EB:C4:54:8D:BE:F1:56:AC:6D:AB:57:E2:EE:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840561FFBC9EBC4548DBEF156AC6DAB57E2EEDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0040A434FBB3B0A89B4590C7F02333EE2F3F7C5EFE6877768E9304D88EF4D07C/0/3139302e3138352e3130302e302f32322d3234203d3e20323632323232.roa
Signing time:             Thu 06 Mar 2025 23:11:24 +0000
ROA not before:           Thu 06 Mar 2025 23:06:24 +0000
ROA not after:            Thu 05 Mar 2026 23:11:24 +0000
asID:                     262222
IP address blocks:        190.185.100.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:24:c9:b6:74:2e:ce:9f:72:66:97:69:a9:e9:f1:69:cc:f0:a1:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840561FFBC9EBC4548DBEF156AC6DAB57E2EEDB
        Validity
            Not Before: Mar  6 23:06:24 2025 GMT
            Not After : Mar  5 23:11:24 2026 GMT
        Subject: CN=9E44F24ED9703CD71023FAE0A28CA7DFB3A09C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:c0:1e:40:38:64:bb:75:4f:e2:39:18:67:
                    60:3d:ce:ca:86:83:cb:cb:2c:15:e1:54:6e:9c:10:
                    33:9e:e9:a8:8e:fd:ca:3b:33:ed:f8:89:46:07:82:
                    43:86:cb:1f:21:19:73:ac:d4:f2:8f:77:8d:85:e3:
                    17:8d:2a:8c:a5:66:f5:d5:94:78:a8:13:48:75:77:
                    af:e3:e9:f5:f2:7f:9b:63:85:6d:70:01:aa:0e:1e:
                    f4:dd:9b:bd:89:79:3e:31:03:e9:19:10:18:98:07:
                    e9:11:fc:95:94:a3:b9:e3:57:6e:c3:37:b3:a3:bc:
                    6e:04:3c:3d:12:6e:79:ad:90:ec:3f:00:03:54:0a:
                    aa:ec:65:9c:8d:c8:e0:3c:0c:32:bf:86:69:77:a8:
                    51:6e:3f:1b:42:39:de:92:74:f9:31:45:ba:89:20:
                    a9:fa:38:08:9e:86:d9:d0:df:6a:29:a3:53:68:7d:
                    d0:f1:b3:79:32:23:37:db:62:36:3b:9c:94:13:5a:
                    3b:01:a1:68:84:24:d8:3e:28:6e:9c:20:04:4a:8b:
                    a3:91:43:e7:a8:89:80:a1:fb:96:3f:a4:0d:c4:0c:
                    62:c2:1b:b2:6d:7d:48:47:3f:a1:23:9e:03:38:cd:
                    21:27:b7:e7:ae:8c:54:f6:af:9f:95:32:4e:de:46:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:44:F2:4E:D9:70:3C:D7:10:23:FA:E0:A2:8C:A7:DF:B3:A0:9C:93
            X509v3 Authority Key Identifier:
                keyid:E8:40:56:1F:FB:C9:EB:C4:54:8D:BE:F1:56:AC:6D:AB:57:E2:EE:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0040A434FBB3B0A89B4590C7F02333EE2F3F7C5EFE6877768E9304D88EF4D07C/0/E840561FFBC9EBC4548DBEF156AC6DAB57E2EEDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840561FFBC9EBC4548DBEF156AC6DAB57E2EEDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0040A434FBB3B0A89B4590C7F02333EE2F3F7C5EFE6877768E9304D88EF4D07C/0/3139302e3138352e3130302e302f32322d3234203d3e20323632323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:12:24:64:f0:8c:89:07:b2:7a:45:db:a9:11:97:f8:b2:7f:
         39:d7:3a:57:0c:77:e4:cd:6b:2a:38:d4:a9:49:4c:e0:6a:e6:
         dd:ec:f6:36:e9:1b:05:a6:22:82:5e:42:cb:ff:08:2a:84:36:
         3c:5a:dd:da:05:56:5c:ba:c0:87:78:47:ea:4e:23:f0:d3:08:
         7f:f9:1f:c6:f2:6d:d4:d4:2d:85:43:a4:da:e5:10:bd:3c:80:
         79:1a:33:79:a2:3b:41:db:8c:5d:99:ed:49:3b:b2:cc:c6:a0:
         36:17:fd:ad:72:c2:91:26:45:fc:f8:f1:6a:ec:ff:26:6b:65:
         c1:ea:cf:e8:03:20:55:41:3f:60:5a:ef:1d:c8:38:3a:45:85:
         30:3d:4d:aa:a2:33:15:f0:8b:4e:d7:9f:90:4b:a0:e7:96:8d:
         d4:ea:9d:b2:06:03:0a:b3:eb:4a:cc:c7:8e:6b:0b:88:90:ca:
         fc:25:93:02:5a:84:e4:58:dd:d0:88:43:46:9a:50:e8:6c:7a:
         4c:d5:7e:9d:28:ef:be:95:26:9a:3b:0d:d4:cf:71:60:1c:e4:
         a8:1d:f6:60:5f:d0:50:0a:93:a6:32:b4:ee:b8:1c:96:ce:8e:
         56:b1:1e:c0:b2:32:1d:b7:3c:68:4d:cf:8b:9f:2a:95:e2:e1:
         ab:25:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:40 2025 by rpki-client