Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3232342e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          s/yQxuj+uSQLLEdGBwoHVHA1ghawZXa+deWNQjOmnZI=
Subject key identifier:   27:D2:4F:EE:E7:75:99:3A:36:A9:74:DD:3C:0E:D3:9F:27:87:87:18
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       4A3DAFCB13095FDB5AA45C86230E418751B9B64E
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:10 +0000
ROA not before:           Sun 02 Mar 2025 04:06:10 +0000
ROA not after:            Sun 01 Mar 2026 04:11:10 +0000
asID:                     52369
IP address blocks:        190.184.224.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:3d:af:cb:13:09:5f:db:5a:a4:5c:86:23:0e:41:87:51:b9:b6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:10 2025 GMT
            Not After : Mar  1 04:11:10 2026 GMT
        Subject: CN=27D24FEEE775993A36A974DD3C0ED39F27878718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:f2:83:bf:71:6b:44:da:0c:98:46:e7:9a:
                    f4:28:27:16:e7:03:21:4e:5a:1b:1f:a3:70:63:3d:
                    ec:5e:2d:d4:c3:9b:96:07:30:ce:c9:08:63:62:ae:
                    ee:29:93:88:e0:1c:20:c3:8a:0f:a0:d6:dc:75:93:
                    32:ae:db:3e:2b:e0:40:65:93:db:49:37:43:da:db:
                    ef:ae:f9:d7:16:fb:12:97:c2:0c:fe:a0:5e:06:d7:
                    32:05:cf:24:ba:40:54:a7:74:55:70:9f:c3:95:a2:
                    57:7c:f1:1b:e6:50:de:8a:7c:00:49:4a:36:1e:e9:
                    ba:e8:de:a9:3d:b1:92:ef:81:d0:36:e0:8f:9b:f4:
                    3a:80:9c:b8:7b:44:8a:66:25:d6:0b:4a:3d:0c:bd:
                    00:49:8e:8d:b3:02:91:ad:60:1b:40:3e:4f:83:eb:
                    15:70:97:ec:23:27:49:b1:c5:70:39:ea:72:7e:72:
                    c8:9c:13:04:d1:a9:47:f8:b9:65:83:2d:35:75:4e:
                    50:47:06:a0:d4:01:42:ef:02:f6:eb:34:4f:96:88:
                    8d:8b:c3:e3:de:8f:8d:17:01:c5:98:81:cc:31:5c:
                    cf:05:b6:89:3e:07:65:28:54:df:cf:49:c3:01:58:
                    27:04:ae:f4:95:c3:a8:18:88:be:0f:6b:42:2a:e6:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D2:4F:EE:E7:75:99:3A:36:A9:74:DD:3C:0E:D3:9F:27:87:87:18
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3232342e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:03:b0:3c:a0:a2:b7:13:d4:5b:2a:0a:27:1f:93:71:07:78:
         fa:1c:f3:ca:9c:8e:09:a8:44:09:d8:e2:3b:80:e1:7e:51:ac:
         96:6f:22:83:29:38:b9:0d:5f:50:5e:0c:47:dc:05:cf:52:21:
         a8:93:03:0a:c3:f9:51:d7:9e:db:c7:56:ee:aa:19:41:55:7c:
         c4:c3:91:6d:4e:f7:f5:8e:22:a7:4d:45:be:38:cd:21:78:95:
         29:49:27:88:53:9c:72:a9:dc:75:dc:5a:73:ef:8d:ab:1f:04:
         4f:11:3b:ab:b6:01:1e:ee:42:4c:47:fb:0c:2a:3c:73:ee:4d:
         1e:3d:dd:33:63:53:19:27:43:fe:6e:88:71:4e:82:02:5d:02:
         92:a2:8c:f1:c4:63:df:e0:a9:a8:6e:51:f3:6d:a3:63:1d:90:
         02:0f:2a:9e:f7:07:48:7e:d0:f1:92:23:e6:74:1a:99:da:d6:
         c6:52:4e:71:f1:8f:ab:67:75:01:c2:cc:89:1a:02:22:6a:a1:
         35:1d:8c:80:9c:a6:9c:b7:9b:9e:f7:af:58:50:27:14:eb:76:
         f7:25:97:37:22:77:6b:ae:98:23:93:fb:01:d5:22:fe:ce:c5:
         07:e5:18:5a:32:1f:96:7d:bd:af:95:8b:59:bf:6a:e1:5c:47:
         ba:aa:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:10 2025 by rpki-client