Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa
File:                     3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa (raw, json)
Hash identifier:          EtQhWp0Ogta1jcMGenjx++8zzJFOSfO2DGKueMVAS7A=
Subject key identifier:   F9:C3:A2:28:15:39:CD:8C:A7:AE:C9:8C:48:6A:6E:95:96:86:B3:94
Certificate issuer:       /CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
Certificate serial:       62664E11686AA3202F88B7FD5D7C0A7345FE4AC4
Authority key identifier: ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa
Signing time:             Tue 04 Feb 2025 20:08:05 +0000
ROA not before:           Tue 04 Feb 2025 20:03:05 +0000
ROA not after:            Tue 03 Feb 2026 20:08:05 +0000
asID:                     52312
IP address blocks:        190.110.236.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:66:4e:11:68:6a:a3:20:2f:88:b7:fd:5d:7c:0a:73:45:fe:4a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED05FF962C1240B2E8CC68B4EA41D187C5509591
        Validity
            Not Before: Feb  4 20:03:05 2025 GMT
            Not After : Feb  3 20:08:05 2026 GMT
        Subject: CN=F9C3A2281539CD8CA7AEC98C486A6E959686B394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:29:40:e9:b7:4d:18:7b:55:2f:dd:42:0e:
                    9a:77:9b:ac:26:76:30:67:c2:51:7f:e1:3f:1b:85:
                    ae:0c:02:9f:bb:65:ac:8d:3d:ae:7f:d9:8d:ae:8a:
                    84:dc:d7:21:6b:3b:13:91:32:2c:fc:01:54:42:ae:
                    be:17:75:d7:c0:15:2a:24:fe:fa:aa:fe:78:5e:9e:
                    94:61:d4:40:7c:9d:dc:97:5f:24:9f:6c:ed:9c:69:
                    2b:bf:81:4c:94:ed:95:f0:12:95:56:8c:ff:2d:10:
                    d9:51:b5:1c:de:d9:95:fd:56:1f:58:5e:99:c1:87:
                    3f:51:bc:49:55:6f:bf:3b:86:30:0b:8f:00:f0:1a:
                    2c:e7:0c:24:ff:ab:f0:20:f2:dd:54:f0:26:a6:9b:
                    c0:df:de:cb:63:17:4d:8c:15:e8:c1:59:86:d7:50:
                    61:d3:bf:4d:69:52:36:10:a0:d6:a7:b9:9b:82:c8:
                    0e:42:bc:4a:8e:c5:7c:8f:d0:2d:73:9f:ac:33:70:
                    20:ba:c5:71:39:0d:85:30:d6:09:db:fb:75:54:bb:
                    43:10:0c:0a:91:7f:9f:64:65:65:79:14:bc:3e:67:
                    84:ca:4b:7a:90:d4:bd:0f:16:38:cf:48:65:7f:91:
                    36:80:c4:92:27:bc:3a:84:5b:75:07:58:e9:a5:99:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C3:A2:28:15:39:CD:8C:A7:AE:C9:8C:48:6A:6E:95:96:86:B3:94
            X509v3 Authority Key Identifier:
                keyid:ED:05:FF:96:2C:12:40:B2:E8:CC:68:B4:EA:41:D1:87:C5:50:95:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED05FF962C1240B2E8CC68B4EA41D187C5509591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1BC81E3C8BFC028EFACF08614951FD0DB9A86232CC25CF8B606BA7075D6063F5/0/3139302e3131302e3233362e302f32332d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:9a:1e:93:5a:2e:1a:63:ad:93:63:23:3b:b2:3c:d8:d3:60:
         14:68:45:8d:20:59:79:01:48:2f:4b:03:76:37:79:7c:eb:f3:
         07:d7:f6:67:01:1f:14:6d:5b:0c:a5:5d:ac:f0:0e:91:24:8a:
         00:37:da:64:a6:7a:05:0e:e0:65:0d:3b:4b:8f:fe:24:b1:73:
         54:52:60:58:d2:d6:31:bc:c9:cb:72:79:d2:96:4e:3e:2d:13:
         4d:69:99:7e:97:2c:a8:7f:0d:8f:99:13:a4:4d:4c:51:0c:30:
         e1:91:03:93:6e:7b:41:0f:70:03:41:ea:98:20:d7:f5:e0:79:
         28:06:1f:6e:0b:fa:a8:51:99:8e:35:4f:f9:10:55:b7:0f:1e:
         14:c3:64:83:10:ce:4e:60:a9:ed:66:79:d9:99:56:5c:ee:00:
         78:05:1c:88:46:a5:e1:7b:40:72:00:80:eb:ef:55:4d:f9:17:
         20:21:cf:ce:33:f3:61:1e:19:a8:2a:b4:84:eb:0e:46:20:91:
         bd:51:73:d8:1f:d9:da:a4:94:cb:3f:5f:f8:fe:98:75:08:73:
         8e:9d:48:b7:6c:01:01:0a:dc:dd:23:10:d4:48:29:c2:96:06:
         1c:c0:d4:04:3f:ca:9a:8a:5e:f3:91:16:4c:97:dc:43:f9:f1:
         32:d8:c2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:39 2025 by rpki-client