Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/3139302e3130332e3138302e302f32322d3234203d3e20323633363839.roa
File:                     3139302e3130332e3138302e302f32322d3234203d3e20323633363839.roa (raw, json)
Hash identifier:          uRcY9/JS3KNuzIr8ZF7dCYdNoVVOxSZfmnwP2horseg=
Subject key identifier:   B8:68:98:B3:28:8B:81:28:DC:35:62:12:A6:EC:25:E5:CD:1F:AC:65
Certificate issuer:       /CN=EB77D3E7DB16B730477067431EBB6F0C28C23852
Certificate serial:       616E34056794C7F9107A50D15B1C2AFC7564FEA9
Authority key identifier: EB:77:D3:E7:DB:16:B7:30:47:70:67:43:1E:BB:6F:0C:28:C2:38:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/3139302e3130332e3138302e302f32322d3234203d3e20323633363839.roa
Signing time:             Tue 04 Feb 2025 18:21:21 +0000
ROA not before:           Tue 04 Feb 2025 18:16:21 +0000
ROA not after:            Tue 03 Feb 2026 18:21:21 +0000
asID:                     263689
IP address blocks:        190.103.180.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6e:34:05:67:94:c7:f9:10:7a:50:d1:5b:1c:2a:fc:75:64:fe:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB77D3E7DB16B730477067431EBB6F0C28C23852
        Validity
            Not Before: Feb  4 18:16:21 2025 GMT
            Not After : Feb  3 18:21:21 2026 GMT
        Subject: CN=B86898B3288B8128DC356212A6EC25E5CD1FAC65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:91:84:61:e9:31:24:21:a8:59:ed:c6:c9:
                    e8:59:71:5c:49:51:0a:d0:2f:eb:23:04:0d:3f:93:
                    4d:f5:e1:48:2e:c4:6f:09:1e:51:ff:0f:4d:d7:68:
                    54:ca:6d:eb:53:28:42:30:cf:af:c8:c5:7b:bf:17:
                    01:1f:26:df:35:24:89:01:8a:68:1a:36:e4:c6:5e:
                    da:c7:92:f8:9c:ff:47:83:2e:05:a3:c0:dc:cc:d8:
                    16:51:85:e5:f1:06:c3:5b:ff:5e:8b:8c:65:5b:92:
                    02:2f:0a:64:67:f0:46:7d:0c:78:b6:2b:0c:a1:fa:
                    6f:63:0b:c6:cd:bc:7f:8a:f5:a0:b1:bf:0f:b4:09:
                    40:1a:db:a4:4c:7f:d3:26:9f:6f:07:1f:f5:bb:60:
                    6d:f5:ab:34:2c:f3:5b:d2:b4:fe:66:de:a4:6e:55:
                    82:9d:17:6e:1d:a9:70:7c:c0:b6:d1:72:b8:5a:42:
                    40:14:b6:37:60:32:f8:4c:25:70:51:07:4b:05:c0:
                    f9:f3:7f:2b:27:d6:e9:57:40:cd:ad:97:1f:9c:d1:
                    da:52:29:3e:a8:fa:84:8a:f9:d1:39:2b:9d:21:6e:
                    67:18:d7:99:34:c8:ae:e5:52:17:9e:0f:d3:c1:90:
                    64:bb:3b:d4:71:28:06:9b:19:a2:1c:f2:8d:e4:c5:
                    8e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:68:98:B3:28:8B:81:28:DC:35:62:12:A6:EC:25:E5:CD:1F:AC:65
            X509v3 Authority Key Identifier:
                keyid:EB:77:D3:E7:DB:16:B7:30:47:70:67:43:1E:BB:6F:0C:28:C2:38:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB77D3E7DB16B730477067431EBB6F0C28C23852.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C28377B082C503D51906C96CC28723645F9D51A83A5D1A78C604FC89E3B41E5/0/3139302e3130332e3138302e302f32322d3234203d3e20323633363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:6e:a7:05:10:cd:c9:ec:1a:fc:fc:98:f4:ff:d5:9f:1f:b0:
         b5:36:73:95:d5:3f:a0:34:a6:28:fb:1c:8c:3d:a9:67:09:4e:
         e7:35:1c:cb:fd:f5:47:09:c5:7d:54:16:de:e7:ef:22:78:5a:
         43:71:45:c6:f5:6a:5d:d2:ab:76:2d:f5:7d:65:6d:42:95:a0:
         51:92:a7:9c:80:69:f1:70:e4:0c:51:43:fd:d1:ec:4e:75:1c:
         4e:94:6e:ff:36:5e:cb:d4:56:82:13:7c:4b:e3:cd:c4:b1:77:
         69:bc:74:8f:7e:03:b8:98:20:46:b1:f9:7f:7e:b4:f6:6e:7d:
         a6:36:25:9c:ff:89:74:96:aa:e8:e6:f3:23:4e:df:86:90:7c:
         bb:01:87:de:3b:f4:bf:04:ce:73:54:3f:7f:84:ff:61:46:e9:
         cf:07:b4:c1:e8:b8:6a:9a:d8:df:ce:0e:f4:49:db:84:f3:f0:
         14:d1:de:7c:ed:a9:52:d6:4f:47:0a:54:e6:b3:61:cb:e4:82:
         0f:8e:b9:ef:7d:09:95:2c:d1:5b:4a:b2:25:aa:33:58:c7:dc:
         8d:b5:f6:be:35:16:53:60:bb:eb:c7:e9:4c:af:e0:81:bd:a9:
         94:a0:18:db:a0:52:47:75:cb:70:fb:60:a3:8f:62:c9:60:e5:
         6c:c3:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:25 2025 by rpki-client