Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          vx7n2C4pe1qd5t3/dcr3hnA0OG7hd022HlR8yVLans4=
Subject key identifier:   24:CA:82:AD:89:B9:65:7D:9D:0D:C5:1E:BB:AC:01:0C:F2:72:AF:5F
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1D3022C200F37B0D8F68633ED0287DF179E1F28D
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:11 +0000
ROA not before:           Sun 02 Mar 2025 04:06:11 +0000
ROA not after:            Sun 01 Mar 2026 04:11:11 +0000
asID:                     52369
IP address blocks:        190.184.235.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:30:22:c2:00:f3:7b:0d:8f:68:63:3e:d0:28:7d:f1:79:e1:f2:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:11 2025 GMT
            Not After : Mar  1 04:11:11 2026 GMT
        Subject: CN=24CA82AD89B9657D9D0DC51EBBAC010CF272AF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:45:99:d9:c8:56:32:58:98:aa:60:d2:6c:
                    83:5b:7e:35:91:27:ca:5b:cc:7e:1b:a8:46:a6:16:
                    fc:f4:6c:54:4d:60:4b:b8:14:15:61:5d:fa:4d:db:
                    44:bc:73:3e:05:76:1f:ed:71:e1:7c:2f:74:57:e3:
                    f5:8c:32:0c:d3:4f:3f:a4:23:35:d5:7b:b4:54:f2:
                    bb:2c:c6:93:44:e0:7c:a4:b6:74:22:fb:92:43:8a:
                    6b:0d:86:fd:f1:f0:b7:2e:f7:33:08:99:2d:dc:4c:
                    37:7d:05:c5:02:a7:08:72:81:34:e9:74:41:21:e3:
                    45:5b:1f:57:bf:2f:8e:a9:41:17:44:76:03:c7:82:
                    8d:98:66:7f:ca:29:f8:8c:ff:85:41:8d:48:06:20:
                    23:a2:e3:72:41:26:a9:05:b4:1f:e6:d2:d8:9a:11:
                    cd:5b:7c:28:75:00:55:bb:b6:df:61:74:6d:f4:cd:
                    b4:36:6e:ff:80:05:e0:9e:e0:78:c7:0c:82:b3:55:
                    21:f8:3a:02:8e:f9:67:57:4c:79:07:44:86:1f:85:
                    3d:e2:25:5f:01:f9:d6:a3:a0:d2:4b:40:ae:33:29:
                    5a:8d:11:6b:47:65:69:23:d8:e0:c4:76:c6:fe:68:
                    e1:f4:df:f9:cc:c0:37:5f:68:8f:b1:88:25:ce:84:
                    4a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:82:AD:89:B9:65:7D:9D:0D:C5:1E:BB:AC:01:0C:F2:72:AF:5F
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233352e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d2:14:9e:41:c3:30:ef:c6:db:18:48:78:46:81:29:34:51:
         e5:b7:9b:07:46:34:6f:eb:82:31:3b:83:04:a8:cd:8b:07:08:
         47:4e:3b:cb:7e:7c:66:47:58:b3:b0:57:86:41:1e:1e:d6:54:
         b7:9a:b1:9c:c6:bb:94:9e:0b:db:13:50:7b:53:70:c4:1c:d5:
         96:b7:13:5e:3f:aa:d7:05:62:f0:64:c7:c9:60:d4:47:f8:0e:
         e0:e8:40:36:b4:fd:38:32:90:7a:c3:15:70:12:2a:5b:48:66:
         4a:b4:fc:7f:35:74:b7:a2:4e:99:91:77:df:c6:72:8e:ea:f6:
         b3:13:43:93:2b:d0:e0:e4:43:b2:fb:9b:79:b0:71:6d:8b:d9:
         a0:a8:6d:74:df:d6:50:11:85:94:46:1f:38:6f:4c:2e:e4:fd:
         a3:fd:93:6d:1f:8a:ad:34:80:c4:6d:f1:59:a5:8d:77:23:71:
         8b:50:02:b2:b0:04:66:d5:66:af:17:ec:e6:fa:6d:59:95:60:
         2a:fa:e4:74:aa:1c:4f:d8:dd:85:95:1d:79:3a:59:2a:f3:45:
         cc:82:e5:71:b7:45:fc:5d:74:51:d3:af:51:74:58:8c:3c:4e:
         3b:49:86:7d:a4:c5:b2:69:89:7a:c3:44:64:a3:4b:0f:38:c3:
         a1:5b:94:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:19 2025 by rpki-client