Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203133363832.roa
File:                     3139302e3134332e3232342e302f32302d3234203d3e203133363832.roa (raw, json)
Hash identifier:          B106u2FBl/0L4dC+m3ADNykPy2a5jd4xuUcoNVOjLQE=
Subject key identifier:   8C:20:1F:40:51:ED:DF:71:60:34:E2:22:61:60:24:8F:28:54:93:A2
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       182803378172C8434133D86780CF72DC41DFB2A5
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203133363832.roa
Signing time:             Tue 04 Feb 2025 18:55:19 +0000
ROA not before:           Tue 04 Feb 2025 18:50:19 +0000
ROA not after:            Tue 03 Feb 2026 18:55:19 +0000
asID:                     13682
IP address blocks:        190.143.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:28:03:37:81:72:c8:43:41:33:d8:67:80:cf:72:dc:41:df:b2:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:19 2025 GMT
            Not After : Feb  3 18:55:19 2026 GMT
        Subject: CN=8C201F4051EDDF716034E2226160248F285493A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d1:3e:53:1f:1e:bc:cc:d2:cd:d7:7b:a9:12:
                    b3:42:25:8c:10:a3:40:eb:96:ef:96:0c:e5:9b:cf:
                    35:fe:e5:28:1a:51:72:db:dc:de:5e:8e:f3:92:54:
                    51:42:65:cf:58:16:eb:5d:0f:0d:76:e6:87:b8:d0:
                    3e:00:63:12:bc:01:09:ba:fe:b2:2d:86:68:fa:f7:
                    0e:57:dd:0f:48:9f:83:ab:7f:92:28:2c:56:f0:d2:
                    37:5d:19:81:a5:21:0a:9e:c9:17:31:08:85:96:05:
                    43:c1:a1:6c:8a:cd:40:51:9a:3a:ca:50:3e:83:b5:
                    4e:b6:a6:a4:50:a5:da:bb:49:52:13:af:68:73:23:
                    c1:43:e1:87:fa:cc:92:15:dc:ba:10:09:56:e0:81:
                    3d:17:52:95:9d:d1:0a:01:a8:38:e9:8c:76:0b:66:
                    0c:c2:05:75:a4:15:73:49:11:84:4c:0d:c7:dc:a4:
                    d8:14:9c:5d:81:f5:39:bd:01:fd:82:ac:07:ed:d1:
                    c0:a8:61:32:64:24:66:24:7f:ee:c9:34:97:3d:af:
                    8a:6f:22:32:10:ca:eb:62:b2:bd:79:d5:fe:f1:49:
                    9f:cb:7b:ae:7e:37:ba:76:9d:e5:30:0c:9e:db:d1:
                    24:21:bf:09:0d:cf:56:40:e8:25:2e:b0:3f:ee:fc:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:20:1F:40:51:ED:DF:71:60:34:E2:22:61:60:24:8F:28:54:93:A2
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3232342e302f32302d3234203d3e203133363832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:7d:7c:fe:5e:74:50:e0:88:c5:c2:eb:d9:1b:e0:6b:b6:ec:
         c6:f3:70:f2:20:ad:85:1f:7b:90:17:96:52:e6:a3:db:2e:a9:
         79:a9:a8:73:a0:a2:58:cd:ff:04:1a:7e:54:02:a2:9e:bb:5f:
         c2:d3:9d:7f:6d:77:b2:7a:4f:c6:cd:83:9d:49:76:36:91:b6:
         7b:64:92:e1:14:47:38:66:29:d2:25:dd:35:d6:52:4f:66:e4:
         19:02:5f:0f:5d:23:7e:59:41:8d:dd:64:f1:69:ad:ce:13:a3:
         fe:e0:af:64:c1:e7:83:8c:48:4f:59:25:8b:28:40:ab:4f:a9:
         cb:33:54:6d:e7:f8:7c:e1:91:21:ce:1c:8d:92:67:5e:ca:7a:
         b7:9f:e4:ed:92:4c:0d:7e:5c:57:42:28:2a:6c:52:78:8b:44:
         39:d2:8a:6c:f0:41:dd:b2:ae:05:16:0d:49:e0:2a:33:55:85:
         a7:51:d8:b7:be:5a:60:83:dd:07:53:71:aa:8d:fb:65:21:bb:
         c0:59:63:25:53:94:1a:78:7d:f1:4b:89:78:88:b4:5d:c2:db:
         d8:e6:e3:42:7f:46:6b:c6:0b:43:1f:c4:eb:3d:2c:36:c4:c2:
         41:2d:3a:09:5c:fb:94:c4:d4:83:87:a8:fc:b0:b5:dc:97:74:
         ea:af:c8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:18:53 2025 by rpki-client