Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa
File:                     3139302e3130332e31362e302f32322d3234203d3e203238333138.roa (raw, json)
Hash identifier:          ULtCURh0JaKtQn8LtllKl9mKoENmrFGy8PnXwhhCfco=
Subject key identifier:   31:B7:AA:5C:01:AD:25:C4:0C:75:70:53:F3:C4:9D:70:44:9D:F2:BC
Certificate issuer:       /CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
Certificate serial:       3E409A14A3E77AD767AF664C069D4E16B6C30754
Authority key identifier: 69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa
Signing time:             Tue 04 Feb 2025 20:08:50 +0000
ROA not before:           Tue 04 Feb 2025 20:03:50 +0000
ROA not after:            Tue 03 Feb 2026 20:08:50 +0000
asID:                     28318
IP address blocks:        190.103.16.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:40:9a:14:a3:e7:7a:d7:67:af:66:4c:06:9d:4e:16:b6:c3:07:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6901373ADF0D0461CC1A44926DE5F2462E477F44
        Validity
            Not Before: Feb  4 20:03:50 2025 GMT
            Not After : Feb  3 20:08:50 2026 GMT
        Subject: CN=31B7AA5C01AD25C40C757053F3C49D70449DF2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:c3:cf:74:31:02:92:c4:85:73:47:a5:fd:
                    cf:22:fa:ed:2d:55:08:84:8b:2e:d7:8f:16:35:81:
                    f9:d2:48:51:1e:be:4b:82:63:63:85:6e:2f:c2:7f:
                    b2:3b:0d:e0:11:c4:4b:52:2d:28:e1:8b:a9:1e:9e:
                    c5:4a:04:11:e7:59:19:d1:e4:91:ce:9a:90:7c:5e:
                    5b:72:50:2f:44:ac:f0:45:7c:2d:6e:be:08:dc:97:
                    27:38:79:e4:f2:2c:8e:d8:bd:e8:48:1e:68:c4:94:
                    f5:42:fa:d1:71:08:26:7e:00:a2:48:2a:e7:ab:32:
                    75:53:77:d4:45:41:4e:24:96:83:84:63:92:46:0b:
                    93:d7:28:84:19:13:f4:51:c0:60:b3:c6:5a:50:95:
                    6a:d4:fe:20:fa:78:06:d2:39:02:79:ca:c9:9b:fe:
                    87:4a:20:9c:f9:00:a4:01:cf:06:82:17:be:94:8a:
                    f8:71:7f:b3:77:56:5f:5d:e9:1a:56:88:76:ea:b3:
                    b3:3c:42:f9:e2:9a:80:12:41:c5:94:ee:d7:fe:b7:
                    9a:6c:93:0a:c9:2f:09:74:ea:c6:bf:36:54:91:7e:
                    25:de:0f:f7:c6:85:68:55:ad:da:f9:ab:c4:72:96:
                    8c:97:4a:ef:ce:29:f6:e3:4f:57:1a:00:2e:0c:db:
                    e3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B7:AA:5C:01:AD:25:C4:0C:75:70:53:F3:C4:9D:70:44:9D:F2:BC
            X509v3 Authority Key Identifier:
                keyid:69:01:37:3A:DF:0D:04:61:CC:1A:44:92:6D:E5:F2:46:2E:47:7F:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6901373ADF0D0461CC1A44926DE5F2462E477F44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/017347D588C3D35AA39204A70C05EB9E575E5BD2A175CCA56DBC3AF01CF0E321/0/3139302e3130332e31362e302f32322d3234203d3e203238333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:05:3c:4e:a6:f2:89:c8:ec:5a:36:5a:b4:f8:cb:b2:80:
         40:fc:93:a1:ad:d5:41:0e:2e:92:92:09:77:47:e7:62:26:f6:
         01:e0:5f:a3:a6:ef:bb:31:cb:1a:cc:2e:c4:ac:56:35:c1:14:
         2f:70:35:fb:89:5b:3f:65:d2:66:01:d0:97:bd:53:83:a3:a8:
         f9:9a:79:8c:1d:3a:dc:a7:e2:cc:ef:e6:83:17:d5:cf:d7:4f:
         9a:ee:02:b3:05:bf:1d:51:ea:fb:b1:e0:33:36:20:01:df:98:
         03:2b:84:d0:aa:9f:41:7a:98:c9:83:2f:fd:3b:bd:d9:1e:32:
         ce:16:6a:be:67:4c:da:e6:df:98:1e:a8:a6:98:30:64:3d:52:
         67:23:b8:57:35:af:ea:5a:90:cc:0c:c6:48:df:2a:b6:94:ac:
         5b:af:13:83:d2:3b:14:5b:00:a6:36:d1:af:d3:24:53:70:5d:
         0d:e6:67:4c:c3:2e:4f:8b:73:ee:27:27:cd:2f:e9:f3:38:e4:
         4c:00:ed:99:7f:95:30:64:a5:3b:53:52:ee:c4:43:4f:24:77:
         af:bd:26:f7:f2:f8:d5:aa:32:4c:f1:78:95:86:32:ea:4a:e3:
         44:75:c6:c6:67:91:2a:69:57:e4:27:90:be:60:f2:81:33:f7:
         e0:df:e8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:25:43 2025 by rpki-client