Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          WWkFcj4mWDv0aBWnkAs8gRGS2vQJWZslZ/BC0Tej77s=
Subject key identifier:   6D:04:89:DC:38:3F:78:00:23:99:9B:28:0F:4C:C2:3E:FD:20:B0:78
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       025B99C96107C2562732E21CAAAD8418F706C9E1
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:07 +0000
ROA not before:           Sun 02 Mar 2025 04:06:07 +0000
ROA not after:            Sun 01 Mar 2026 04:11:07 +0000
asID:                     52369
IP address blocks:        190.184.233.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5b:99:c9:61:07:c2:56:27:32:e2:1c:aa:ad:84:18:f7:06:c9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:07 2025 GMT
            Not After : Mar  1 04:11:07 2026 GMT
        Subject: CN=6D0489DC383F780023999B280F4CC23EFD20B078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:1d:09:69:fe:d6:5b:3d:f5:19:e6:35:b7:
                    9c:ed:69:84:92:98:ce:40:d3:f3:c0:0f:90:0e:4d:
                    60:e3:31:94:f3:e7:03:87:30:cb:c2:05:3e:8e:ca:
                    b5:13:fb:12:9a:01:bc:f0:ed:9d:86:ee:a6:61:4c:
                    db:4e:d3:f4:1b:b1:6e:42:b3:c8:d5:3b:8d:b6:62:
                    82:1e:fb:55:98:69:9f:4b:3d:7e:25:c5:18:8d:9e:
                    b6:0e:f4:10:58:e8:14:7a:c3:59:8b:c4:18:83:e7:
                    1b:c2:11:d4:71:46:bd:8a:e6:c5:b2:4f:a1:f8:ec:
                    ef:42:30:19:87:6f:17:53:7c:35:cd:c0:cf:a6:eb:
                    01:d6:52:0b:1e:e7:47:10:58:a6:77:6e:1a:40:25:
                    05:7c:a2:75:5a:09:fd:8a:2b:db:b9:d0:36:b5:af:
                    9f:84:4b:a8:8f:8e:f7:44:a4:18:07:bf:82:f2:97:
                    9c:f3:ba:20:1e:a2:66:e8:61:6f:f8:ad:84:08:de:
                    f1:65:0f:4f:60:cc:d6:e0:bd:36:2e:f9:81:13:a3:
                    66:f7:e3:9f:49:fb:ed:84:c7:b0:93:fd:2d:2c:16:
                    08:ee:ed:12:8d:39:35:7a:56:7b:58:92:8c:0e:19:
                    51:6a:80:6d:65:e1:5f:8a:05:53:79:c2:61:c9:4d:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:04:89:DC:38:3F:78:00:23:99:9B:28:0F:4C:C2:3E:FD:20:B0:78
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233332e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:d9:49:64:3e:89:1b:80:48:19:5d:af:32:b4:9a:7e:23:b7:
         6d:1f:e7:1f:f2:b6:78:9a:52:b8:b9:94:0c:20:68:01:2d:a8:
         b0:82:0a:12:e1:d2:51:69:39:a5:d7:5b:af:4e:49:1e:ad:c0:
         ca:46:f8:c7:ee:c1:65:34:63:a5:5b:4e:45:f1:92:12:3c:2c:
         ae:81:f5:78:24:83:ce:ad:d9:88:d6:24:3f:eb:29:a0:b9:08:
         cd:80:ed:51:bb:32:c6:01:fa:a6:59:ff:b4:7f:3e:43:58:a4:
         f2:be:db:df:2f:04:60:50:bf:74:7e:ef:cc:33:c3:a1:b8:42:
         7a:bb:d8:ed:f6:b6:a5:e8:6d:2a:a8:bf:47:df:ea:2e:80:94:
         86:97:b0:c6:48:fe:e4:dc:cd:f8:dd:a2:dc:ad:74:4f:9d:e3:
         6a:b6:96:5e:43:df:eb:ca:2a:96:c6:c9:c2:6f:e9:e8:82:d4:
         14:e4:14:d7:3e:c3:33:ee:80:61:33:08:78:3b:85:10:89:d3:
         5a:9a:dc:34:c3:af:c2:d3:66:16:99:21:3d:ed:87:b4:dd:12:
         9b:c4:f2:e3:80:e7:3b:09:c7:7c:69:20:25:c6:24:aa:a5:ff:
         e1:c9:1b:5b:69:c3:2b:76:d1:a3:be:c5:2e:36:1b:c8:71:6d:
         89:11:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:18 2025 by rpki-client