Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36342e302f32322d3234203d3e203237373733.roa
File:                     3139302e3135302e36342e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier:          YMDIY8pnG/Unav/1GBQDSA1MYIXYcVO5WiYuWU6+Jac=
Subject key identifier:   75:B3:C8:B5:13:5B:F1:51:99:CC:F2:11:8D:0F:8E:2B:2B:4E:FB:EA
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       4FE3DEA7378F823DC5B536D70F4F3CB5916339E5
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36342e302f32322d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:03 +0000
ROA not before:           Tue 04 Feb 2025 19:57:03 +0000
ROA not after:            Tue 03 Feb 2026 20:02:03 +0000
asID:                     27773
IP address blocks:        190.150.64.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:e3:de:a7:37:8f:82:3d:c5:b5:36:d7:0f:4f:3c:b5:91:63:39:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:03 2025 GMT
            Not After : Feb  3 20:02:03 2026 GMT
        Subject: CN=75B3C8B5135BF15199CCF2118D0F8E2B2B4EFBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:bc:63:cf:2a:7a:37:fb:c4:ae:93:1e:49:
                    f4:d6:9d:fe:04:47:aa:68:74:82:5a:91:8f:85:b9:
                    51:f6:84:28:d1:a5:04:d5:2e:b7:8d:31:3f:95:b7:
                    41:5d:df:c8:9d:58:0b:1e:fa:49:ad:0b:27:3c:39:
                    8c:88:91:72:f5:be:36:93:cb:80:93:ad:89:bd:74:
                    aa:91:81:5d:5e:ff:6d:77:64:53:1d:bc:89:7a:22:
                    5b:60:6d:f3:a6:be:17:64:19:86:95:9f:22:fd:a6:
                    94:7f:3d:31:35:f4:3e:d2:c3:ab:aa:a1:3e:53:f4:
                    09:76:08:c0:85:fb:d4:99:ea:d8:2a:1b:32:90:b7:
                    69:53:22:8d:73:fc:4a:1c:6a:10:24:f8:bf:f8:86:
                    1d:3c:bb:37:d1:a5:4e:91:19:cf:94:82:7c:f1:26:
                    fd:e0:f8:a9:eb:3e:46:ae:14:e4:b9:a6:9d:0a:79:
                    24:2b:cb:a8:4f:19:76:cc:fb:4c:f9:1f:24:a9:63:
                    e3:f7:00:f7:de:8c:58:ec:3e:a5:71:4c:78:bf:83:
                    19:36:c8:81:b9:4e:fe:f5:c6:c4:c0:bb:f4:7a:89:
                    29:7b:47:2b:3a:a8:d9:4c:e1:9f:b5:61:b3:be:ec:
                    78:00:17:8e:a4:11:4e:2f:2a:53:18:ad:fd:79:c5:
                    b0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B3:C8:B5:13:5B:F1:51:99:CC:F2:11:8D:0F:8E:2B:2B:4E:FB:EA
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e36342e302f32322d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:db:d8:36:01:2e:d4:59:8f:56:df:95:28:b3:3e:11:9f:f8:
         e2:14:ef:52:a2:37:49:5a:cf:63:38:b8:9c:b6:86:ad:f1:88:
         46:5e:47:fe:6d:d5:10:82:2f:f5:8b:85:00:3f:cf:40:97:33:
         50:16:40:d3:85:9e:98:fc:02:ce:09:af:2a:88:c3:4f:16:58:
         5e:28:37:2b:ad:b9:d9:22:25:8a:f9:61:19:86:91:3c:23:a7:
         1a:c0:b4:99:2d:f2:10:a9:8d:7c:ae:7a:ac:57:cc:a2:f6:e6:
         c4:73:45:da:29:fe:65:4a:ab:e9:ab:08:05:c3:02:99:91:59:
         56:7a:2b:b0:ad:5a:5a:88:83:e7:cf:fc:bf:14:18:65:e1:c7:
         3d:3c:da:04:0f:ce:2d:c6:87:4d:2e:3c:70:b6:b3:05:8b:86:
         7d:a5:c6:1c:a0:9c:70:45:c3:56:8e:cf:92:30:c9:f5:e3:57:
         29:27:c6:85:2c:18:bb:4b:42:f8:be:3c:78:72:ff:91:f4:97:
         04:d5:af:08:75:c1:ba:09:ce:29:b2:8a:74:4c:85:e8:df:7a:
         dc:7c:99:16:7e:0e:ff:82:83:b1:09:7a:52:cf:2a:61:52:f9:
         ff:d2:68:d8:d4:70:c4:9c:18:cd:cc:9a:52:c6:f3:26:bc:de:
         ba:fe:76:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:30:46 2025 by rpki-client