Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32302d3230203d3e203532333639.roa
File:                     3139302e3138342e3232342e302f32302d3230203d3e203532333639.roa (raw, json)
Hash identifier:          xB7eC1M60SmQiCWIdOvHHwsje+EMN+p+eedEQPvnk88=
Subject key identifier:   28:9B:8E:FC:5A:25:AC:63:02:86:B3:BE:D4:C4:F8:C3:C6:76:8C:8F
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       675AEF8A2C2019A458009F237F0B25037EBEF2CB
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32302d3230203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:10 +0000
ROA not before:           Sun 02 Mar 2025 04:06:10 +0000
ROA not after:            Sun 01 Mar 2026 04:11:10 +0000
asID:                     52369
IP address blocks:        190.184.224.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:5a:ef:8a:2c:20:19:a4:58:00:9f:23:7f:0b:25:03:7e:be:f2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:10 2025 GMT
            Not After : Mar  1 04:11:10 2026 GMT
        Subject: CN=289B8EFC5A25AC630286B3BED4C4F8C3C6768C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:82:a4:a7:ff:d3:e9:f0:da:c7:91:62:37:ba:
                    ad:b8:84:6e:fa:b1:27:8f:66:61:f2:0f:aa:7a:eb:
                    06:44:e3:41:c5:ce:87:59:06:25:5d:67:96:02:ad:
                    f2:38:34:fd:b7:cc:66:b7:e9:f1:28:64:5e:85:fa:
                    8e:5a:70:15:a0:16:2d:f3:20:f3:67:fa:59:b1:2a:
                    2a:4b:50:83:1f:85:fd:82:a2:4b:88:96:37:6c:69:
                    92:25:58:47:ed:80:c7:d3:d1:b6:13:13:d6:4b:e9:
                    f5:6a:43:6b:0c:6e:7a:13:cc:63:70:d8:61:3b:f7:
                    d8:fa:ad:a9:14:80:8c:4f:56:76:4c:69:35:31:ef:
                    ff:32:18:4c:bd:ae:f3:ea:70:62:67:cb:46:c4:d0:
                    0a:e7:be:b4:b3:d4:cf:ab:28:27:a8:2c:81:eb:f9:
                    82:45:e0:e8:fd:de:55:9e:eb:d0:38:ae:0a:4b:c3:
                    26:72:04:da:30:0f:e2:69:6a:60:23:99:a7:52:17:
                    d0:65:cf:c5:39:22:a9:7f:50:6c:19:0d:af:11:e2:
                    87:4c:42:94:85:ab:28:54:e7:c7:e4:f0:87:0b:ce:
                    51:a8:a7:3a:cd:ea:dd:f8:b1:6c:39:56:3f:5c:ac:
                    0f:c5:16:37:24:a8:51:bd:c7:fb:2d:87:6e:23:9b:
                    24:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9B:8E:FC:5A:25:AC:63:02:86:B3:BE:D4:C4:F8:C3:C6:76:8C:8F
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32302d3230203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:d3:72:32:96:7d:fe:1a:5c:20:fd:28:88:17:8f:9f:33:
         31:0f:b0:64:fb:b2:4c:5f:9c:60:b3:62:be:6e:df:d8:33:3a:
         b5:2a:46:36:dc:23:bf:c9:61:c6:da:6e:f0:da:37:77:92:7f:
         be:34:96:b2:d7:52:cb:0b:9f:81:47:23:af:13:37:24:ce:4f:
         57:3f:2a:4c:80:36:96:fc:5d:19:4e:95:bb:05:fc:e6:09:58:
         23:86:82:70:46:cf:2c:7a:4d:64:ae:02:1e:86:25:92:d0:0f:
         71:ef:83:c6:62:b3:27:63:68:3f:b8:24:47:78:de:8a:6f:1e:
         74:f6:4e:ef:45:da:65:24:76:76:fe:97:cb:4a:c4:10:ec:01:
         94:85:de:c8:81:7d:36:24:1f:8c:f3:4f:12:6e:83:a7:bd:8d:
         e1:c9:41:3a:24:3d:06:83:46:b0:56:0c:91:16:89:56:40:f1:
         86:db:ab:f9:7c:b6:18:fc:66:fe:ef:02:ca:60:48:6a:f2:c9:
         c3:49:6f:31:24:25:e2:8b:17:d5:88:bf:14:71:2f:9a:f4:16:
         69:7c:d2:cb:d1:0d:54:df:83:01:32:a6:7b:84:c0:a4:e8:4d:
         9f:4f:63:1c:82:e0:1b:de:43:01:10:a2:4b:65:ca:1d:73:b2:
         6c:c4:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:04 2025 by rpki-client