Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36332e302f32342d3234203d3e203238303936.roa
File:                     3139302e392e36332e302f32342d3234203d3e203238303936.roa (raw, json)
Hash identifier:          g/FGaEg0avftBNczjDjx84ppX/GOvS37/H7QAWRsq8o=
Subject key identifier:   96:9A:5D:4A:3A:1B:3C:43:EB:55:5B:43:28:B3:0C:AF:40:2E:11:FB
Certificate issuer:       /CN=3097EEAE62A8D1441BC16E818D96E6882345B703
Certificate serial:       6A891E9A54F741B0C83E5B07D659B9A2BCB57456
Authority key identifier: 30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36332e302f32342d3234203d3e203238303936.roa
Signing time:             Tue 04 Feb 2025 18:34:21 +0000
ROA not before:           Tue 04 Feb 2025 18:29:21 +0000
ROA not after:            Tue 03 Feb 2026 18:34:21 +0000
asID:                     28096
IP address blocks:        190.9.63.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:89:1e:9a:54:f7:41:b0:c8:3e:5b:07:d6:59:b9:a2:bc:b5:74:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3097EEAE62A8D1441BC16E818D96E6882345B703
        Validity
            Not Before: Feb  4 18:29:21 2025 GMT
            Not After : Feb  3 18:34:21 2026 GMT
        Subject: CN=969A5D4A3A1B3C43EB555B4328B30CAF402E11FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c5:0e:f6:08:ca:1c:8e:ba:cb:4d:a2:93:da:
                    33:09:cf:6c:a8:b3:5d:59:a8:ba:ba:74:29:0f:7c:
                    dd:e9:e1:83:98:90:a0:8e:6e:77:3d:2a:80:66:2c:
                    91:9a:38:41:84:93:ea:c8:96:9b:8c:64:20:0d:a9:
                    0e:1d:81:e6:58:1c:75:9c:12:9f:bc:b9:f5:f0:0e:
                    e5:7d:47:62:8f:28:50:75:29:69:a8:3d:e3:51:19:
                    4d:ad:43:dd:50:40:22:0e:a0:0b:97:3a:b1:17:c6:
                    e4:c5:1e:bf:8d:3f:39:d1:f6:05:31:02:e3:fd:c7:
                    e9:70:d4:ed:c7:a0:78:c0:dc:37:c8:19:c2:25:03:
                    1f:26:73:0f:49:63:a6:38:4c:db:8c:b9:d2:5d:47:
                    59:f6:94:63:34:83:d5:f0:41:ec:84:9f:99:c1:05:
                    64:58:c9:f0:01:1b:7f:b7:0a:aa:d9:ed:a9:d4:dc:
                    d8:f8:a4:5d:df:f8:27:37:a6:de:22:f5:87:34:b9:
                    64:f4:5f:4c:dc:6e:9d:05:2a:93:fe:bf:7d:db:63:
                    25:c8:c7:56:db:ae:d6:dd:be:9d:7b:20:ff:09:d3:
                    c5:aa:9a:4c:40:7d:5b:32:c4:f3:78:34:bd:18:86:
                    56:f6:e1:d5:c5:b0:98:95:70:77:ed:66:9d:aa:49:
                    3e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9A:5D:4A:3A:1B:3C:43:EB:55:5B:43:28:B3:0C:AF:40:2E:11:FB
            X509v3 Authority Key Identifier:
                keyid:30:97:EE:AE:62:A8:D1:44:1B:C1:6E:81:8D:96:E6:88:23:45:B7:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3097EEAE62A8D1441BC16E818D96E6882345B703.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3097EEAE62A8D1441BC16E818D96E6882345B703.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30B9D111C367C57C13E2C26B61EB9F05F662B23BE53F9E793810DE1611566D6C/0/3139302e392e36332e302f32342d3234203d3e203238303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:09:c2:6f:c4:09:c2:83:44:7a:1b:cd:b8:93:b4:b6:8f:8d:
         e9:bc:f5:bc:8e:5c:a1:a1:4b:24:39:98:b2:5c:59:fd:14:7e:
         54:bd:5f:ca:61:ba:97:88:3d:be:8d:a4:22:bc:d4:4b:95:ce:
         8c:96:e4:ba:73:cc:5e:54:ee:78:b9:e8:bb:b4:83:df:2b:6d:
         52:9d:b1:51:99:7b:06:69:8d:f4:8d:8b:43:26:7c:bc:03:54:
         4a:a5:c3:0d:4e:47:8b:ad:5e:82:19:09:1a:0b:d2:58:98:6e:
         5c:93:58:ed:b3:ab:32:e4:61:20:fe:94:ff:43:96:8d:86:35:
         d0:cf:8f:ea:e5:37:0c:ce:33:38:83:f7:04:ad:8d:e8:d1:37:
         17:6b:44:8a:50:85:5a:19:ab:3e:bc:57:38:15:57:c7:bd:a2:
         23:4e:de:d6:c7:f7:21:98:d6:16:02:b0:dc:19:f1:4c:5d:6e:
         a7:99:ea:a7:cf:ea:97:1b:96:79:08:1d:43:8d:de:ca:30:28:
         66:83:7a:62:cf:42:15:1f:e0:82:3d:28:4a:f2:e3:e6:db:dc:
         76:b8:fc:bc:08:18:32:ce:a0:74:f6:05:fe:9f:ad:1c:24:db:
         ed:a1:df:05:8d:79:21:17:75:b5:77:0d:9f:95:1a:f0:00:dc:
         1e:94:f4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:15 2025 by rpki-client