Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e302e302f31362d3234203d3e203233343837.roa
File:                     3139302e36332e302e302f31362d3234203d3e203233343837.roa (raw, json)
Hash identifier:          BdX3/3CrU++XBmrc//5581dfmpaMu7Ph++5SUaq9lJM=
Subject key identifier:   6A:BD:50:AB:BA:73:D5:59:A9:AD:3A:43:85:6C:DA:D2:93:38:AB:E3
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       3F4E6E8B89D5B14FE733D98F0A4CDB5437DC273F
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e302e302f31362d3234203d3e203233343837.roa
Signing time:             Tue 04 Feb 2025 18:26:39 +0000
ROA not before:           Tue 04 Feb 2025 18:21:39 +0000
ROA not after:            Tue 03 Feb 2026 18:26:39 +0000
asID:                     23487
IP address blocks:        190.63.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4e:6e:8b:89:d5:b1:4f:e7:33:d9:8f:0a:4c:db:54:37:dc:27:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Feb  4 18:21:39 2025 GMT
            Not After : Feb  3 18:26:39 2026 GMT
        Subject: CN=6ABD50ABBA73D559A9AD3A43856CDAD29338ABE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3f:37:29:b3:6a:34:58:5c:f1:1e:15:37:10:
                    f2:5d:c0:18:5a:3c:df:c5:92:df:3c:87:21:58:2a:
                    e1:e3:e1:6a:df:1d:70:44:9b:1a:24:47:fc:bf:28:
                    2d:1f:b1:bd:d4:43:ba:6b:ec:4f:b6:c8:d2:d8:eb:
                    f4:4d:e0:0b:4e:1a:b0:bf:21:84:d1:97:b5:01:8f:
                    9b:58:5f:47:fe:94:a3:55:c8:f0:45:9e:b7:50:77:
                    61:ab:6f:b5:74:16:1c:f3:e2:d9:a3:30:ed:e7:c3:
                    8e:27:9a:de:20:bc:83:c6:7c:4f:18:ce:4c:5b:e4:
                    4e:26:d7:68:bf:a3:29:fa:ca:8c:b8:9d:aa:03:95:
                    19:0f:90:70:4a:54:3c:90:67:d1:fb:6e:c1:ce:48:
                    5d:15:29:c9:86:5e:da:20:e8:59:5f:ff:35:82:dc:
                    c5:3b:3e:a1:fa:6a:26:3e:dd:4a:e8:af:04:5d:0d:
                    2b:1b:ba:7c:e4:5b:54:29:8f:27:b9:fd:ec:8f:58:
                    b7:83:6d:2f:07:22:a8:ca:0e:eb:b9:41:f6:fd:4c:
                    34:db:c4:3f:26:6f:b0:60:13:56:aa:1c:8d:62:00:
                    e8:16:d4:10:31:b2:97:6a:25:ab:03:93:1b:a1:ba:
                    d9:be:2c:7c:bf:68:67:f6:f2:d2:f1:a7:e5:0d:08:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:BD:50:AB:BA:73:D5:59:A9:AD:3A:43:85:6C:DA:D2:93:38:AB:E3
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e302e302f31362d3234203d3e203233343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:16:b2:69:2f:61:cf:df:c0:74:a4:4c:3e:f7:87:08:a3:
         c6:8c:a4:96:9f:a7:55:c5:64:9a:9a:d5:d5:cc:c9:7a:90:9d:
         85:a9:f3:37:f4:5b:36:82:ee:8c:85:d3:77:2d:7a:2c:09:2a:
         3a:e8:d9:3f:ef:a9:63:59:86:1f:d7:60:ee:41:ea:6a:4a:b7:
         aa:94:75:d6:f4:59:be:da:6f:66:2d:50:e6:57:fa:8f:8b:3e:
         b1:20:9c:d4:6e:17:00:f7:08:a9:b3:15:53:25:84:b7:27:68:
         91:73:63:a4:63:6d:e5:c9:f2:c1:82:06:88:70:f6:16:9f:be:
         5b:da:08:f6:9f:2a:da:d4:dd:bb:ba:c1:93:56:27:1a:18:9b:
         06:75:7b:df:01:d4:10:f1:f3:0d:46:8a:9f:75:9f:8a:78:01:
         f2:10:da:35:52:91:dc:ad:de:39:df:53:bf:7c:72:b7:ff:71:
         17:4f:9d:68:a6:06:20:c7:ac:d6:89:a3:7b:5c:a8:77:6e:94:
         03:bd:2b:5a:04:45:4e:82:9f:2e:08:68:ec:ee:5e:58:84:dc:
         43:04:bf:48:5a:b6:8b:a9:fc:61:5c:2c:15:6e:1c:49:d0:01:
         87:4a:60:4d:b3:18:93:ae:4c:d9:bd:82:9e:c7:33:f5:66:7c:
         43:04:88:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:11:03 2025 by rpki-client