Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa
File:                     3139302e35332e3132382e302f31382d3234203d3e203237373733.roa (raw, json)
Hash identifier:          Y5Y8CLRGJ58VEWsji3qNqsPGe9GU8DjyRu+i2QJl/aY=
Subject key identifier:   F4:61:AB:B3:D3:E3:CE:35:B3:45:26:16:02:9C:91:74:66:35:0C:D0
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       25C7A3A26F2EDB8D98D86143E62D54F2C03D0BA7
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:25 +0000
ROA not before:           Tue 04 Feb 2025 19:57:25 +0000
ROA not after:            Tue 03 Feb 2026 20:02:25 +0000
asID:                     27773
IP address blocks:        190.53.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c7:a3:a2:6f:2e:db:8d:98:d8:61:43:e6:2d:54:f2:c0:3d:0b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:25 2025 GMT
            Not After : Feb  3 20:02:25 2026 GMT
        Subject: CN=F461ABB3D3E3CE35B3452616029C917466350CD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:cd:03:05:a8:2a:9e:dc:68:4c:a9:e5:50:86:
                    69:f6:02:52:51:eb:95:57:bc:eb:c3:62:43:6e:dc:
                    08:51:81:93:ac:f1:b0:74:c5:90:af:1a:6d:48:ce:
                    ed:f9:41:dd:95:a2:d1:1f:7a:51:42:89:c1:b1:f3:
                    3d:70:28:22:f1:0e:97:73:c9:79:2f:8f:5c:19:31:
                    2c:df:63:a3:e4:ae:64:e3:79:1e:53:47:ba:47:00:
                    c3:24:2a:5a:a6:b4:4e:18:1b:01:f2:9d:67:02:ca:
                    f2:24:f1:26:bf:fa:93:1a:76:1a:ce:f9:8f:55:18:
                    6c:7c:ee:de:7b:6f:2a:0c:5c:b8:5f:bd:87:18:76:
                    a7:63:b5:b7:71:85:40:20:f6:b4:40:cd:d2:f5:96:
                    c4:55:16:59:79:66:a3:3d:2d:ad:7b:fa:99:30:f3:
                    0c:61:ed:5a:7c:e1:08:b4:60:0d:a9:5a:0b:4f:b1:
                    b7:27:e1:c7:5e:7b:67:e6:23:2a:ae:33:8e:4d:d7:
                    30:89:5a:3d:c7:62:cc:1a:fa:50:30:22:3f:54:a7:
                    3f:18:45:7a:19:88:b8:41:9e:8f:e4:b3:54:1b:c2:
                    04:15:df:b2:3a:f2:34:9e:a6:fe:ed:db:22:2d:b8:
                    c8:ae:6f:ed:be:f2:b4:6e:07:67:e1:57:e1:01:e8:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:61:AB:B3:D3:E3:CE:35:B3:45:26:16:02:9C:91:74:66:35:0C:D0
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e3132382e302f31382d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:93:63:9a:08:51:a3:03:14:e0:0d:4f:81:e0:58:f6:83:
         b5:b5:88:9f:5c:e1:c6:d4:d0:9a:45:72:a5:a9:02:4d:c9:31:
         71:16:63:f0:c9:c1:c9:8f:a2:05:e8:74:24:9f:d7:f5:ba:ff:
         54:1e:97:9c:72:c9:53:98:6f:65:53:8f:68:9d:8c:1e:33:2c:
         40:79:bc:5d:eb:c0:1b:bd:2f:31:94:8d:29:44:1a:e9:d4:b3:
         bd:0b:5d:78:fa:ed:a4:d5:6e:6e:15:dc:76:ae:50:31:33:de:
         9a:a6:fb:68:4b:df:55:8e:45:e2:4c:f8:fd:39:d8:8f:d0:1e:
         a0:26:45:b3:45:92:aa:62:75:f9:54:bc:6c:e0:4c:e5:ea:58:
         e6:25:76:4d:97:c7:ea:82:c2:e1:53:ca:ee:7a:59:d6:e6:7a:
         4a:42:70:84:22:be:b0:07:d0:63:58:10:3b:7e:44:bb:f7:2a:
         be:e6:a7:c5:bd:97:fe:bb:e9:5a:5b:e5:35:7d:f7:44:31:cc:
         ae:ae:a6:59:80:af:56:44:97:51:64:f9:7e:e4:73:b9:54:b8:
         49:5f:b3:c8:0b:3d:88:9c:14:61:35:35:f5:d9:81:cf:93:b7:
         2d:7a:e3:3a:44:95:6e:8c:54:fe:89:91:61:3a:d3:56:ec:f0:
         ad:33:3e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:42:39 2025 by rpki-client