Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3132382e302f31382d3234203d3e203237373733.roa
File:                     3139302e3135302e3132382e302f31382d3234203d3e203237373733.roa (raw, json)
Hash identifier:          tXqYg/mcRDFJZ9yiy1WQVSjyP/hQkZtLAYRBWUdu2V8=
Subject key identifier:   09:48:4B:08:42:23:82:89:91:89:DE:5D:E0:A1:98:E0:FC:4A:CE:96
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       425B2592C89A4FCEDEC03D78F7E8828F3CA7C2B3
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3132382e302f31382d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:15 +0000
ROA not before:           Tue 04 Feb 2025 19:57:15 +0000
ROA not after:            Tue 03 Feb 2026 20:02:15 +0000
asID:                     27773
IP address blocks:        190.150.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5b:25:92:c8:9a:4f:ce:de:c0:3d:78:f7:e8:82:8f:3c:a7:c2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:15 2025 GMT
            Not After : Feb  3 20:02:15 2026 GMT
        Subject: CN=09484B08422382899189DE5DE0A198E0FC4ACE96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:10:c2:43:49:74:14:f5:f0:ac:04:a9:58:
                    13:79:39:ec:c9:6f:fd:fd:d9:69:38:3e:c3:e2:7d:
                    26:34:82:64:3e:2a:fb:bf:60:a1:5f:0e:c1:5d:15:
                    98:c9:5f:13:ed:c0:35:c2:d1:56:d2:bb:61:8b:4a:
                    76:b2:81:a8:36:32:a6:8b:c9:24:3c:d1:ad:b4:dc:
                    2a:24:f0:03:63:f0:e2:4a:14:e7:3c:4d:37:e9:b3:
                    f4:68:a6:11:b3:d2:1a:7c:98:88:a0:dd:95:6b:4e:
                    3d:b9:4d:98:2b:fb:63:bf:de:1d:0a:02:77:68:4e:
                    a4:5f:3d:7f:ba:ec:4b:4c:d8:b2:b7:ff:29:57:01:
                    35:a3:d6:28:ca:cc:cc:c7:bb:e2:53:08:a8:93:62:
                    89:02:2b:06:6e:5b:0e:61:b2:17:ea:82:64:d8:03:
                    2a:11:23:6d:c1:7f:41:9e:dc:85:8e:37:39:d6:fb:
                    2f:a2:a2:36:39:87:df:7c:77:3e:84:44:54:90:30:
                    6f:dd:3e:e8:63:a2:af:47:1c:11:11:cc:45:9b:08:
                    6a:c0:72:87:fd:81:15:e7:fa:55:98:3b:c9:9a:aa:
                    d3:63:9a:c8:e8:65:a1:0c:5f:58:eb:a4:7e:a3:47:
                    96:9d:79:54:41:d0:3a:a2:ce:c4:18:0b:81:37:76:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:4B:08:42:23:82:89:91:89:DE:5D:E0:A1:98:E0:FC:4A:CE:96
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e3132382e302f31382d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         81:04:66:17:6f:98:e9:a6:ed:92:d2:99:cd:12:1f:62:8d:f0:
         61:16:d2:a1:45:88:86:b2:dc:26:07:7f:82:80:95:25:f1:10:
         e1:eb:b0:a3:bb:41:7f:14:75:0a:83:8a:c5:63:49:1c:b6:0e:
         d9:46:36:a3:2e:c4:33:25:e3:d9:f3:93:8e:d6:81:46:72:11:
         72:72:fb:d6:f2:d6:b7:db:b0:6b:8a:d3:92:c8:31:b0:20:05:
         d7:58:76:6f:24:ea:ee:8d:c1:1d:0b:39:71:05:90:aa:d0:7f:
         98:f6:aa:7c:f4:54:95:4e:f4:aa:4b:2b:78:01:4e:51:20:ba:
         59:35:9f:13:15:60:ce:58:a6:2f:e3:83:c3:b4:56:19:bc:c0:
         17:1a:e5:11:ca:10:0e:ed:c7:65:e3:ed:96:3b:be:74:a5:2d:
         03:59:4a:9a:0f:a3:f2:c0:73:d2:47:aa:63:8c:02:46:8e:c8:
         e0:47:68:da:b4:4b:ce:62:af:9c:0a:18:06:d7:a2:00:5d:e6:
         8a:97:f3:cd:60:df:cc:76:c2:e9:9a:63:31:fa:17:a7:da:b2:
         09:09:85:99:d1:4a:1d:4b:9a:06:92:98:0c:5b:ea:e7:84:b2:
         0f:0e:cc:67:4b:75:86:84:c2:db:4f:c9:f5:28:cb:16:77:77:
         6f:5e:28:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:47:08 2025 by rpki-client