Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e34382e302f32342d3234203d3e203237373733.roa
File:                     3139302e3135302e34382e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          /qwspUvelSvNhNsW0XxbMGZ6M7ZlsxGzXW0HzprWtoY=
Subject key identifier:   4D:24:FA:9B:0F:F6:C7:9F:66:CC:A0:A1:30:41:B6:27:15:C1:36:18
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       07C6C46C31CFED655E9979A239E9AA5B4DEEDC3D
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e34382e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:17 +0000
ROA not before:           Tue 04 Feb 2025 19:57:17 +0000
ROA not after:            Tue 03 Feb 2026 20:02:17 +0000
asID:                     27773
IP address blocks:        190.150.48.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c6:c4:6c:31:cf:ed:65:5e:99:79:a2:39:e9:aa:5b:4d:ee:dc:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:17 2025 GMT
            Not After : Feb  3 20:02:17 2026 GMT
        Subject: CN=4D24FA9B0FF6C79F66CCA0A13041B62715C13618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:be:31:d0:4b:3f:3f:91:99:97:fb:74:94:87:
                    37:30:ab:41:c4:fc:c6:ed:4c:01:e7:a4:15:b2:92:
                    64:28:91:ec:12:ff:47:a9:e3:ba:86:15:82:dc:dd:
                    e0:dd:66:28:0c:c4:6d:3c:d2:3a:9c:f8:88:b7:05:
                    38:0b:62:7c:df:7d:92:0b:59:ec:8e:ad:02:47:52:
                    23:c2:db:ff:96:1b:37:c3:e3:7e:7b:0d:32:2c:d9:
                    c1:64:5d:df:0a:14:36:89:e6:5e:fd:78:ba:13:d4:
                    4b:2c:da:f4:ca:18:d7:81:65:f5:a6:e6:ff:89:2a:
                    16:43:ef:0a:1a:69:3c:21:b9:f1:55:20:cb:cb:f6:
                    ee:cd:00:4c:c6:77:2b:a4:ce:86:7f:05:27:13:94:
                    ef:b7:08:3c:b5:fb:a0:2f:4e:40:b6:3b:1e:03:49:
                    74:0d:cc:f9:32:68:39:3f:a8:be:09:38:b6:73:35:
                    8f:ba:fe:58:d2:41:62:f1:3c:7c:fb:1e:1e:d7:10:
                    3b:2f:a6:bd:74:b6:73:86:da:83:d2:47:73:c7:67:
                    b9:8a:55:a1:72:9b:00:08:19:fe:0b:78:7a:8e:94:
                    e0:29:5d:9c:9d:3c:65:1e:24:72:70:f5:72:61:1e:
                    bd:47:41:30:47:b1:87:cc:80:59:41:e7:1c:a0:aa:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:FA:9B:0F:F6:C7:9F:66:CC:A0:A1:30:41:B6:27:15:C1:36:18
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e34382e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:d2:a0:2f:a6:e0:3c:06:33:a1:9c:47:5f:e5:06:ef:e1:
         11:7f:6e:98:26:de:8c:75:b4:b6:a4:72:a7:3a:1f:f7:59:b5:
         a4:fb:de:19:f9:98:cc:6b:7a:0e:83:a7:07:1e:3b:78:88:e2:
         86:40:87:ab:2c:ac:24:51:f8:ac:c5:4f:1d:00:10:a0:fd:82:
         d5:ab:5e:de:e3:a4:8d:b3:ad:8f:41:2a:37:02:18:d1:fe:b0:
         be:71:dc:74:e2:8e:8f:ca:b7:e8:f0:8f:d5:55:be:e4:6d:1e:
         f7:38:5f:71:b9:f1:ce:20:b8:38:bf:e1:f8:b3:69:41:3f:b2:
         2d:51:1f:73:08:82:22:f3:16:f6:11:53:2f:ba:b4:42:9e:64:
         8a:37:db:ae:d6:04:34:a6:b3:7e:4e:d6:de:e7:e7:0a:42:a5:
         7c:ab:f8:bd:0f:5b:46:e9:28:1f:f7:f0:f7:75:43:a0:ae:1d:
         fc:c9:2d:1a:a3:96:63:22:f7:9c:5c:5d:2f:6e:86:78:89:ba:
         e6:af:ea:1f:f5:d2:35:79:ac:6a:d9:a5:f0:6d:61:ce:92:fb:
         f9:6c:9f:c1:e3:c1:31:2c:40:44:a7:60:bb:c7:e1:ef:c6:fc:
         cb:d1:91:a7:b7:ef:5c:d2:8f:12:e4:16:6b:fb:27:2f:f6:49:
         e3:b7:9b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:54:28 2025 by rpki-client