Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa
File:                     3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          zuV55HzduDzsY+dC0mRlQZHp0hG8Up+jckAMaSm4MP4=
Subject key identifier:   8D:C3:DF:9A:BE:AA:C8:8B:45:5B:F4:42:B8:84:59:FB:1F:33:40:04
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       290F18493C21BFB2016653523A671937A79DE0C7
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 02 Mar 2025 04:11:09 +0000
ROA not before:           Sun 02 Mar 2025 04:06:09 +0000
ROA not after:            Sun 01 Mar 2026 04:11:09 +0000
asID:                     52369
IP address blocks:        190.184.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0f:18:49:3c:21:bf:b2:01:66:53:52:3a:67:19:37:a7:9d:e0:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar  2 04:06:09 2025 GMT
            Not After : Mar  1 04:11:09 2026 GMT
        Subject: CN=8DC3DF9ABEAAC88B455BF442B88459FB1F334004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:87:3d:40:b2:2b:96:bb:a1:4d:f6:96:e4:
                    16:f8:c0:89:e5:f4:ca:9e:15:c4:a4:f6:75:45:11:
                    11:8d:12:ad:77:f2:84:90:8f:20:8f:5f:f6:fa:ed:
                    24:ba:87:a6:2a:87:f8:ac:62:07:f0:42:ca:e1:6e:
                    2a:2b:ca:32:b8:54:c3:b3:9d:13:9e:8a:d8:ce:30:
                    25:21:bc:86:98:f9:4e:97:17:4d:d3:34:ec:7a:96:
                    da:bb:77:c9:e1:fb:93:4a:d3:47:13:cc:00:17:54:
                    ad:da:27:75:65:ff:0b:86:45:e0:0e:10:0a:17:93:
                    85:3f:b2:11:ca:07:22:6f:20:b2:1f:ba:34:d2:76:
                    94:90:d1:40:28:d8:0d:40:e4:ea:69:7b:31:3d:f9:
                    de:0c:43:9b:d6:5e:5e:5d:64:8c:cf:51:dd:3b:25:
                    a4:cf:1f:a0:88:a0:bd:60:dd:35:55:92:a6:9f:35:
                    0d:f2:0f:47:c5:94:98:c8:44:ca:ae:c1:cd:ca:a0:
                    17:e8:03:ed:a9:48:ab:d8:78:3c:a5:de:a2:60:be:
                    e2:93:de:ba:eb:53:7b:ea:83:ea:85:cf:42:d2:bc:
                    fb:2c:70:70:12:0c:32:43:d9:76:26:f1:f5:33:61:
                    bd:7a:b3:c4:1d:b2:cf:69:95:66:11:70:69:48:93:
                    8f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C3:DF:9A:BE:AA:C8:8B:45:5B:F4:42:B8:84:59:FB:1F:33:40:04
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3138342e3233382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:c4:1f:3a:89:45:6f:0e:f1:17:88:13:12:4d:84:1f:37:
         28:0d:0c:bb:f4:93:c0:64:de:dd:02:36:92:b7:eb:d2:ee:c7:
         b4:0a:ef:56:6c:5a:e5:9a:4a:e2:a5:c3:44:8f:9a:ec:c5:c6:
         0f:52:39:a9:29:2f:54:a4:ba:9d:83:ad:09:09:2a:1b:6a:bb:
         34:f1:6e:5a:d6:f8:7a:21:3a:b0:51:a2:9d:ad:f9:b6:25:08:
         5e:fe:49:f1:65:e5:4a:9a:b7:5f:bc:62:3d:45:2d:e7:ed:92:
         1f:b4:94:43:1d:d4:c7:b8:c5:47:e7:c1:9f:5a:b6:4b:3c:c5:
         e6:ba:bd:e3:41:6d:f3:45:e0:c7:91:c0:e3:08:d5:e1:f6:cb:
         73:07:30:b7:7f:37:b6:e8:02:80:4d:4f:d8:2e:df:b3:48:9e:
         f1:29:14:51:21:4b:9b:12:60:c2:d8:30:3a:0c:2b:c4:df:20:
         4b:0e:87:b5:1b:d6:ab:f0:3b:02:00:e0:c0:b7:11:46:59:f5:
         a9:ff:ba:90:c8:2b:4b:69:e4:3d:e2:c4:a5:7d:97:e9:55:4f:
         01:56:b2:a5:27:6f:81:cc:8d:11:81:ad:3b:5b:90:b4:8f:c1:
         02:fc:46:49:eb:d7:18:61:04:de:d4:13:27:22:cf:6c:63:b3:
         cb:87:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:06 2025 by rpki-client