Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135332e302f32342d3234203d3e203134373534.roa
File:                     3139302e3134392e3135332e302f32342d3234203d3e203134373534.roa (raw, json)
Hash identifier:          lLmkmTJr9dMEh6CxHGgTxGvaBUeb/131ZQAg0lKOcLw=
Subject key identifier:   4F:76:95:87:4E:15:28:29:2C:6A:A8:96:D8:45:44:6E:54:33:60:A6
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       5AC332A6C41BFDC699DFC02F10FCA9FCD3342DC3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135332e302f32342d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:13 +0000
ROA not before:           Tue 04 Feb 2025 18:50:13 +0000
ROA not after:            Tue 03 Feb 2026 18:55:13 +0000
asID:                     14754
IP address blocks:        190.149.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c3:32:a6:c4:1b:fd:c6:99:df:c0:2f:10:fc:a9:fc:d3:34:2d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:13 2025 GMT
            Not After : Feb  3 18:55:13 2026 GMT
        Subject: CN=4F7695874E1528292C6AA896D845446E543360A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:99:f2:0b:60:ef:01:19:af:e3:d0:3b:54:
                    1f:a1:5f:b0:e6:19:75:f5:5d:ab:83:db:30:50:d5:
                    36:51:d7:95:62:f7:e1:25:fc:ad:8e:f3:1b:d5:fc:
                    10:aa:79:41:c6:9b:05:6b:1e:fc:fb:a9:e5:62:b9:
                    0d:a1:6c:8e:e2:29:c5:17:64:80:bf:c4:45:33:55:
                    14:87:fc:dd:c2:c8:45:af:91:5e:3c:83:ed:a5:a3:
                    c7:f4:57:ee:e9:d4:fe:f4:5f:fa:6a:77:2a:8c:81:
                    13:f9:28:a9:72:14:be:eb:2f:ba:59:bd:27:6c:9a:
                    16:44:c3:56:93:de:04:d3:2c:6b:ed:dd:9c:d8:9e:
                    cc:19:e1:75:79:04:62:64:8b:56:8f:5a:4b:98:a3:
                    c7:2c:b4:ce:09:66:61:ef:0c:22:32:db:52:18:64:
                    c9:34:31:0f:9e:21:9d:44:cb:06:4a:78:a7:a2:b2:
                    fc:11:e2:86:64:41:1b:dc:43:d8:04:d9:5b:54:e2:
                    f0:95:e5:8c:29:a2:3f:f3:ed:3c:68:ee:5f:6e:d0:
                    30:34:3e:3a:85:b7:26:28:60:98:9c:93:fa:13:b0:
                    00:d2:dc:f6:93:63:7e:ce:10:bb:af:6f:ef:77:af:
                    b1:9f:f5:6f:2b:2a:80:fc:c8:c1:7b:f8:b0:53:4f:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:76:95:87:4E:15:28:29:2C:6A:A8:96:D8:45:44:6E:54:33:60:A6
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135332e302f32342d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:8c:0d:91:e8:0d:03:ad:34:b1:08:db:bf:4b:b5:dd:3d:7b:
         13:d3:24:a2:47:c6:b4:ee:7f:88:4a:2d:f0:09:07:d2:2a:72:
         54:26:11:81:dc:5e:ff:42:35:d9:5b:8a:c5:4c:9f:d1:74:bf:
         d4:9d:af:d9:ae:0f:d5:60:f0:56:42:a2:15:e4:ab:b4:f4:ab:
         3d:33:08:e7:3d:c9:69:ef:06:13:45:79:76:ed:ac:08:c1:36:
         b3:6f:b4:24:c1:d6:ef:66:e8:40:24:33:a0:34:e7:9e:9f:63:
         ac:e5:d9:2b:13:6d:72:4f:89:58:f4:2b:6d:00:c7:e5:fd:b0:
         f2:11:f0:11:ca:53:84:c8:e0:10:97:f7:99:3e:27:3a:eb:60:
         8a:16:e4:b4:ee:e1:63:78:c0:36:81:69:67:3d:1e:06:a4:8d:
         a3:c2:07:15:82:6a:3e:a9:0e:13:d5:29:ba:c4:56:ff:93:1b:
         f0:7b:9f:12:01:f5:9b:ad:ea:92:e3:b7:0c:d9:69:fe:f4:23:
         5f:b9:26:c9:64:c7:7f:cd:73:da:b2:8a:00:14:03:e3:2a:d5:
         b0:44:47:8d:dd:ac:4a:30:24:28:cb:34:0d:00:1d:8b:b1:c4:
         77:01:83:9b:76:9c:5c:7d:1c:86:39:88:2f:0f:8f:e7:d0:cf:
         73:7f:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:32:56 2025 by rpki-client