Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa
File:                     3139302e35332e34362e302f32342d3234203d3e203237373432.roa (raw, json)
Hash identifier:          79MJ+hKGQg5WodsJ/X2NgSfoHFy5zIfn99QSPzbBOIk=
Subject key identifier:   41:3D:E6:ED:65:B9:97:50:78:65:8B:31:37:4A:EF:6A:50:8B:64:11
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       062160A0867836300C1212BC390DFC332A3B2B05
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 20:02:09 +0000
ROA not before:           Tue 04 Feb 2025 19:57:09 +0000
ROA not after:            Tue 03 Feb 2026 20:02:09 +0000
asID:                     27742
IP address blocks:        190.53.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:21:60:a0:86:78:36:30:0c:12:12:bc:39:0d:fc:33:2a:3b:2b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:09 2025 GMT
            Not After : Feb  3 20:02:09 2026 GMT
        Subject: CN=413DE6ED65B9975078658B31374AEF6A508B6411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:32:9d:b8:58:e5:21:c6:d2:01:15:ef:dc:
                    98:94:a8:98:11:29:4f:b2:6e:33:5b:67:0a:42:b5:
                    a3:68:32:c6:90:1a:b6:7c:45:43:10:b1:19:6e:a7:
                    19:f5:6d:63:7a:3a:30:94:5e:92:34:4e:a7:97:0a:
                    9b:3c:db:5f:a7:20:87:65:12:d9:bd:bd:c9:c0:e7:
                    08:3d:5a:8c:62:94:2e:a9:af:5c:13:88:21:ed:9a:
                    df:ae:e7:cc:f5:e4:62:b8:50:0f:98:f1:ea:25:fb:
                    1e:dd:93:67:b0:1c:fc:74:e0:9b:c7:37:02:37:7f:
                    3e:e2:76:55:a0:64:05:80:b9:ed:41:44:76:42:18:
                    48:49:8d:54:80:bd:2f:c0:97:d1:fa:00:9d:e0:40:
                    a1:f9:e0:0b:1c:25:c1:20:a7:16:8a:db:2b:f4:87:
                    2b:64:76:f7:3a:0a:51:3f:e6:20:f5:f0:15:fc:0e:
                    88:82:67:a9:b5:72:c6:5e:51:2b:5d:f6:18:d3:ca:
                    28:c2:bd:09:9e:3d:9f:bb:d7:ba:c4:39:83:30:c1:
                    21:78:66:c9:fd:db:ea:54:ee:76:b2:a3:22:9d:4d:
                    50:cb:6a:5d:25:47:e6:7b:15:fa:d0:a1:60:ca:f8:
                    7e:37:cf:bb:ff:6e:f0:1f:a9:15:3e:0e:a7:e8:e1:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3D:E6:ED:65:B9:97:50:78:65:8B:31:37:4A:EF:6A:50:8B:64:11
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34362e302f32342d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2b:eb:bc:7b:4c:72:c8:45:6e:f1:e9:ef:45:bf:5c:33:02:
         86:e7:64:f7:f4:8a:d0:7e:70:f0:39:86:10:db:6d:ea:c2:4f:
         c5:81:87:5e:9a:87:21:08:aa:04:d4:da:e0:78:22:4e:58:8c:
         65:67:1e:e4:0a:21:6f:16:60:69:01:15:b8:23:7f:c4:7f:31:
         4f:16:f9:a1:17:79:2f:d6:19:a4:9c:0d:f2:8e:77:c6:83:be:
         45:58:9e:06:58:20:3f:a9:b0:65:34:28:b6:44:39:68:26:fe:
         81:77:81:e5:35:dc:72:b3:93:97:dc:f2:f3:f5:69:7a:c2:82:
         55:0d:0d:86:53:9f:a0:ac:9a:9a:7c:b6:02:fd:24:34:e6:c8:
         be:e6:88:ec:d9:c4:0a:c9:ab:06:22:38:a5:19:7b:22:20:c5:
         e7:86:2a:3f:f6:ab:f9:18:1f:ec:6b:97:29:02:88:3a:2d:0a:
         87:e3:f8:af:2e:f3:ed:90:34:4b:f9:69:4a:9c:74:c7:2c:00:
         d0:44:d7:02:05:62:c9:33:34:71:a9:0f:26:ab:f0:7b:66:19:
         25:19:c4:7d:e7:bf:68:13:c0:92:1a:2c:bc:81:c3:24:0f:c1:
         09:ce:fb:c6:db:6a:0a:e3:f0:f6:2b:74:98:fa:e9:79:58:1e:
         8a:24:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:11:13 2025 by rpki-client