Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa
File:                     3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa (raw, json)
Hash identifier:          MkLlvO0B7OOwtJ7oaqoyYmv+D7rXoEVUlyQfrnGU5Js=
Subject key identifier:   EC:9C:61:19:22:31:BB:F8:11:92:44:5F:95:A7:59:BC:1A:C5:76:F4
Certificate issuer:       /CN=10375D175F51B222AA826C424C2717803A68C991
Certificate serial:       37F3F753AF984D2AAE5A1767F4B133EF81D6973D
Authority key identifier: 10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa
Signing time:             Tue 04 Feb 2025 20:02:43 +0000
ROA not before:           Tue 04 Feb 2025 19:57:43 +0000
ROA not after:            Tue 03 Feb 2026 20:02:43 +0000
asID:                     272039
IP address blocks:        190.89.173.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:f7:53:af:98:4d:2a:ae:5a:17:67:f4:b1:33:ef:81:d6:97:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10375D175F51B222AA826C424C2717803A68C991
        Validity
            Not Before: Feb  4 19:57:43 2025 GMT
            Not After : Feb  3 20:02:43 2026 GMT
        Subject: CN=EC9C61192231BBF81192445F95A759BC1AC576F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:2f:4d:04:4c:df:4f:cd:0e:79:d8:48:59:
                    32:9f:22:8c:68:53:02:1e:f4:97:41:57:a2:b3:ba:
                    e4:11:e0:31:ee:20:63:3e:a2:d9:2a:01:58:19:2e:
                    6e:f2:0f:c9:e6:3c:f4:cf:d7:b6:f3:c3:ee:c0:9f:
                    6d:8e:f3:d7:59:54:77:82:48:95:e4:80:14:d6:2c:
                    32:70:24:06:58:7f:3c:d3:09:dc:e1:29:8b:9a:26:
                    c6:df:fd:19:41:36:ae:2d:80:1c:4b:34:d2:77:28:
                    10:30:11:b6:25:e4:82:c5:69:d8:52:c2:4e:db:93:
                    5f:c3:46:c2:2b:0e:e8:c7:d5:11:bb:f1:2b:67:5c:
                    52:7f:cd:07:df:ad:b9:39:09:3e:f9:6a:19:16:af:
                    7b:d6:f7:35:50:68:e2:8d:4c:d9:c9:a7:62:60:36:
                    01:6e:56:86:b9:76:94:1f:f3:f9:83:1c:79:de:9f:
                    40:b7:50:9e:78:4e:eb:33:3b:69:b6:81:28:48:cb:
                    2d:8f:9a:a8:30:23:52:be:33:5e:16:d0:b2:68:8a:
                    ce:8f:ee:48:aa:2e:6f:3a:68:02:21:52:2a:6f:4a:
                    34:97:9a:90:78:8c:d7:9c:02:ff:da:4d:63:ae:f9:
                    58:a3:c8:d4:a7:f0:49:83:a0:4f:5c:16:24:b4:71:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:61:19:22:31:BB:F8:11:92:44:5F:95:A7:59:BC:1A:C5:76:F4
            X509v3 Authority Key Identifier:
                keyid:10:37:5D:17:5F:51:B2:22:AA:82:6C:42:4C:27:17:80:3A:68:C9:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/10375D175F51B222AA826C424C2717803A68C991.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/10375D175F51B222AA826C424C2717803A68C991.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/174E0592B6FE13D34009C97E6AB4F6E129B52B23FC0D4590E21563D8D2FD5AE4/0/3139302e38392e3137332e302f32342d3234203d3e20323732303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:12:66:f9:48:b1:a9:43:80:74:ba:3d:5a:08:ea:6b:7c:c9:
         15:10:7b:d7:b4:c8:46:92:87:e3:f5:76:28:bb:52:c7:23:9c:
         b7:41:55:3a:cd:45:1b:b4:0e:b9:ed:ff:56:83:66:9c:70:a4:
         f4:04:c1:af:d6:cf:10:de:51:66:d5:3e:1e:81:91:fc:04:69:
         9c:57:35:b9:36:80:60:25:4f:f4:4d:c0:1c:ef:cf:a3:b8:0c:
         f3:ad:2c:be:0d:c7:0b:90:e1:31:e1:95:08:39:92:2b:6e:98:
         d1:43:e0:a1:2d:ad:f2:dc:54:67:1f:74:dc:24:01:e6:fe:41:
         cd:d6:0f:c9:a0:60:fd:90:bb:00:f3:a6:63:e1:2b:97:f2:f3:
         6c:d0:a8:c4:51:ec:af:ce:ae:07:ec:50:29:c0:7e:94:de:ea:
         c7:39:72:1e:19:45:89:f4:e2:69:f6:54:e3:da:14:b6:21:3a:
         7b:12:c7:26:30:ff:19:8e:f3:0d:85:52:97:88:ee:af:7a:a4:
         0d:7b:ad:f1:c7:40:a1:96:ec:57:97:66:29:5f:0c:f4:67:53:
         dd:c5:1a:29:6e:b1:7d:e9:7a:fd:77:9a:b3:93:28:2d:4d:92:
         b2:fc:26:b9:7c:48:44:ed:85:37:7c:a2:43:9d:46:76:35:fa:
         d6:27:74:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:10:46 2025 by rpki-client