Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134382e38362e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          cjTBPQu+emUIiPKVT6QKPFFAHpcPyqfE/xBueHLg7pY=
Subject key identifier:   AD:34:6C:9A:A6:58:52:AE:67:FD:AB:58:D6:9C:45:34:16:21:43:94
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       481666CECBA404DBDAE3BD75384611312F1C3F3C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:23 +0000
ROA not before:           Tue 04 Feb 2025 18:50:23 +0000
ROA not after:            Tue 03 Feb 2026 18:55:23 +0000
asID:                     14754
IP address blocks:        190.148.86.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:16:66:ce:cb:a4:04:db:da:e3:bd:75:38:46:11:31:2f:1c:3f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:23 2025 GMT
            Not After : Feb  3 18:55:23 2026 GMT
        Subject: CN=AD346C9AA65852AE67FDAB58D69C453416214394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ab:05:8e:1e:41:94:4d:18:39:81:0a:87:34:
                    0c:9f:62:39:43:20:05:2a:0d:f2:e4:79:c3:32:7e:
                    7e:83:23:c2:55:4b:a1:07:8f:04:90:f6:41:96:7e:
                    60:14:c1:53:8a:00:4a:68:57:13:0e:b2:64:e8:ca:
                    8b:94:3b:d2:2e:f6:4a:57:b5:45:02:14:ee:3b:8a:
                    23:29:fe:7c:2d:ae:91:c3:b6:8d:09:28:1e:34:69:
                    62:ee:34:ef:03:b8:4f:79:69:c7:ac:06:66:90:38:
                    12:8b:c0:7c:37:0d:4f:74:31:ed:47:e7:36:43:2c:
                    11:52:55:6f:d9:6e:e6:9c:09:ff:3e:83:30:0a:a2:
                    94:da:8a:ce:75:7b:6a:35:e8:29:20:a8:e7:66:1c:
                    d2:79:c7:e9:cb:9c:74:7e:ef:62:1f:a4:9e:e3:bb:
                    85:e9:ca:05:9a:dd:b5:7f:fa:02:8f:a5:04:cd:9a:
                    c6:05:c5:77:26:4e:7e:bb:c8:c6:6c:d5:e3:3c:e3:
                    2b:d2:8b:8b:6e:af:7a:2a:fa:58:92:2f:a4:03:c4:
                    7d:36:b7:aa:d6:4c:a0:fe:36:5b:30:d9:e7:59:76:
                    8c:80:47:8f:d9:ab:25:a1:4c:13:44:1f:4c:a8:69:
                    4c:98:e6:79:29:d5:65:a4:49:4e:78:05:dc:b9:ff:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:6C:9A:A6:58:52:AE:67:FD:AB:58:D6:9C:45:34:16:21:43:94
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38362e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:59:29:4f:aa:d7:06:9b:19:c3:70:e7:61:f2:aa:b5:bc:4b:
         e1:d9:fe:82:dc:7e:bb:8e:b6:62:ea:98:1d:28:73:14:9c:58:
         15:3a:26:91:7c:04:e3:dc:2a:8a:31:a4:19:a4:45:20:69:de:
         c7:e6:a4:93:a5:18:e5:30:9e:6e:a5:0f:54:7d:dc:be:6c:43:
         84:28:3b:aa:ac:b8:56:64:2e:12:98:02:37:37:8c:2d:97:58:
         62:89:87:b7:31:ad:51:12:00:77:d5:20:a4:ef:77:7a:3c:e1:
         7b:b8:8e:e4:06:c6:bf:ca:a6:03:40:2c:d7:7c:8f:1a:30:c9:
         25:fc:77:07:ff:f6:9b:eb:a9:13:cb:93:c2:41:fa:df:e5:3d:
         30:95:24:5c:aa:18:13:16:04:15:5a:3e:b3:f8:d6:fb:49:56:
         05:a8:24:0d:78:50:bc:03:ed:a6:24:f1:eb:40:76:b6:7d:39:
         68:a2:43:d5:3e:c5:0c:63:b3:4a:13:22:5c:4f:ac:d3:62:d8:
         40:9d:fc:ef:e2:64:88:ee:b1:d4:6a:77:31:41:42:07:7b:f6:
         29:67:49:e0:b1:72:e6:eb:79:f0:5d:8e:a0:e8:c1:4a:42:fe:
         93:da:19:57:cc:cc:f1:94:a0:64:ee:9f:ea:1e:af:04:8f:91:
         6b:38:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:56 2025 by rpki-client