Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233342e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233342e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          Ko0rq4Zc11RhzRgmpkGS2NnudZWHHJm2qSqfm01nkI4=
Subject key identifier:   81:37:BA:9F:EA:80:C2:C5:28:C7:67:D4:73:DB:BC:B3:BD:BE:B2:63
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       0CBF25E785B6AB4FDD8C0B5176ECAF86D0E43A1C
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233342e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:14 +0000
ROA not before:           Sun 02 Mar 2025 04:06:14 +0000
ROA not after:            Sun 01 Mar 2026 04:11:14 +0000
asID:                     52369
IP address blocks:        190.184.234.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:bf:25:e7:85:b6:ab:4f:dd:8c:0b:51:76:ec:af:86:d0:e4:3a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:14 2025 GMT
            Not After : Mar  1 04:11:14 2026 GMT
        Subject: CN=8137BA9FEA80C2C528C767D473DBBCB3BDBEB263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:73:0a:4a:e9:7f:9d:c6:1b:eb:c6:74:bb:
                    f3:5c:5a:6c:a8:3c:c4:45:2c:2d:e1:fd:94:c9:0a:
                    b1:04:f9:1a:e2:d8:db:13:45:02:c0:fb:b1:2b:7a:
                    99:83:f4:2c:fb:41:46:cf:52:7b:54:59:3d:2b:83:
                    85:e2:c5:c0:d7:96:8d:32:b5:2e:d3:65:de:10:22:
                    64:de:41:6b:6c:a1:7b:b4:c7:b0:bc:c8:7f:b6:be:
                    dd:f6:ca:59:b1:2a:fb:33:ed:d4:3f:72:9d:47:d3:
                    03:c1:d5:56:c5:b6:95:7d:52:91:12:18:a2:35:62:
                    ef:6e:04:dc:f6:05:58:0f:53:f2:55:87:f4:2c:90:
                    df:41:65:8c:96:28:6c:0c:19:4e:fd:4b:dc:07:c7:
                    e0:99:a6:69:97:dc:01:54:89:b7:64:ac:96:8c:af:
                    71:c1:73:00:4c:8b:98:0d:fe:99:2a:e1:d2:76:a4:
                    02:64:32:b9:ff:e3:80:78:dc:25:f7:8b:83:12:3c:
                    ce:15:1a:e6:10:9c:7a:30:99:7d:e6:57:6d:a3:54:
                    42:03:ca:7f:cc:b1:33:3a:d0:d6:84:56:51:b8:27:
                    a0:7a:be:85:35:9f:2b:55:70:64:e5:8b:08:8e:f4:
                    fa:97:1c:1b:d0:8a:13:14:8f:1d:fe:96:a9:e5:f9:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:37:BA:9F:EA:80:C2:C5:28:C7:67:D4:73:DB:BC:B3:BD:BE:B2:63
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233342e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:7c:b9:6d:77:a4:1a:39:84:3f:14:c9:c4:12:79:1c:b2:e1:
         74:3b:4f:44:dc:a5:8f:c4:0b:64:fc:fa:3e:16:b3:39:84:a5:
         83:61:c5:e9:ce:ce:a5:69:f9:ba:ff:8d:18:cb:69:2f:bf:d9:
         1d:6a:75:d6:9d:28:bf:47:22:dc:14:65:b0:e9:0a:87:ff:75:
         d1:67:4d:3a:48:2f:28:08:42:04:7d:cd:8a:af:03:8d:ae:1e:
         e0:f7:41:54:82:58:52:e2:ca:2f:ae:8e:00:db:53:0e:0f:48:
         11:58:83:a2:d1:32:4a:4c:73:3d:57:90:6c:1b:13:30:f4:e8:
         55:c2:d1:f3:72:dc:b4:d5:2f:13:49:6b:d2:a7:9e:8b:3e:b3:
         73:ef:cb:3e:bb:52:94:06:ef:4d:ef:f8:a3:06:42:87:5c:21:
         2c:8a:91:a1:f0:db:61:89:e1:20:fe:26:77:c1:d2:12:f5:5c:
         50:cc:bb:56:f5:7a:88:5b:36:b8:13:81:53:71:c0:e4:2b:da:
         5b:50:ed:2d:e1:47:95:f5:ef:2b:84:f9:54:42:97:57:7f:9c:
         f4:fc:6a:1d:a7:b4:29:ad:db:3a:d9:1e:66:c0:3a:ea:e7:38:
         05:75:08:07:96:6b:4f:4d:b1:88:db:4a:91:3b:8c:de:56:8d:
         15:4d:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:19 2025 by rpki-client