Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234342e302f32322d3232203d3e203532323738.roa
File:                     3139302e3130352e3234342e302f32322d3232203d3e203532323738.roa (raw, json)
Hash identifier:          fp5yC7RO/hyFuWx11FXCMxmJmQcmqVEcz2WZjz8HztU=
Subject key identifier:   B7:56:9E:50:EF:1D:E1:9C:0C:0E:BF:55:1A:97:7C:D2:1A:93:04:4D
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       4345DB7219A689C73CAB20EDA8DE68A8106A9E12
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234342e302f32322d3232203d3e203532323738.roa
Signing time:             Tue 04 Feb 2025 18:36:10 +0000
ROA not before:           Tue 04 Feb 2025 18:31:10 +0000
ROA not after:            Tue 03 Feb 2026 18:36:10 +0000
asID:                     52278
IP address blocks:        190.105.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:45:db:72:19:a6:89:c7:3c:ab:20:ed:a8:de:68:a8:10:6a:9e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb  4 18:31:10 2025 GMT
            Not After : Feb  3 18:36:10 2026 GMT
        Subject: CN=B7569E50EF1DE19C0C0EBF551A977CD21A93044D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:1f:9c:b1:e0:f3:fc:05:98:78:46:88:5d:
                    23:c9:88:ae:94:37:6f:9a:d3:74:ae:02:c0:c7:0f:
                    16:fb:e0:df:7f:fd:db:20:a1:1b:65:d0:2d:eb:a7:
                    b2:5b:ea:21:4e:94:43:42:c5:32:4f:c7:f1:57:b0:
                    74:02:21:17:a1:85:28:23:3f:48:ec:cf:ba:ec:af:
                    07:e6:f5:16:5d:39:15:34:aa:a9:a7:a9:b8:ad:66:
                    5a:eb:96:20:15:8c:2d:60:d9:ae:29:46:37:6e:4f:
                    c7:d2:bc:bc:89:aa:92:a7:9a:80:bc:b4:8a:87:04:
                    62:7c:ec:81:bd:40:a8:79:22:56:ab:dd:35:eb:2e:
                    00:0d:e0:c3:34:3a:72:d3:21:e8:e2:32:76:7f:4e:
                    91:f5:e7:a1:ea:8a:4a:77:c4:d8:66:6d:a0:b9:be:
                    16:7b:3e:2c:23:37:a5:a7:37:73:c7:e3:a7:c5:da:
                    48:26:f8:23:86:76:d7:d5:ac:58:bd:d5:7e:95:c3:
                    83:65:ac:df:31:50:d1:da:fd:7b:1d:f5:97:4b:56:
                    17:f1:03:1a:af:59:b7:60:34:d4:8c:a5:77:19:4e:
                    a6:65:2f:76:ba:9e:25:b3:cf:eb:f7:f3:1d:f5:7b:
                    4f:0a:08:c3:4d:95:25:b3:d7:47:52:f2:be:ef:36:
                    6a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:56:9E:50:EF:1D:E1:9C:0C:0E:BF:55:1A:97:7C:D2:1A:93:04:4D
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234342e302f32322d3232203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:7d:0e:68:40:62:91:06:87:67:bb:00:0b:7c:1a:65:2b:90:
         0a:60:52:b1:32:29:6d:d6:fc:46:62:08:0d:bf:f6:a5:a9:27:
         96:ca:3d:37:87:cf:b3:90:87:08:9a:bf:be:28:c8:7e:9d:e9:
         da:ec:e8:e0:7f:c9:60:9d:1a:10:b8:25:92:34:c2:80:a8:68:
         65:bc:b9:3e:8b:e2:02:45:b5:45:bf:89:fd:28:91:e3:0d:2f:
         08:ff:b9:7e:a2:79:25:25:01:9a:8c:2f:a7:eb:30:be:9b:00:
         ff:5b:24:14:a9:30:a4:e4:a8:09:94:c8:ac:31:e7:ae:3f:ba:
         61:8d:f6:fe:8c:33:2d:c9:44:da:bf:0a:bd:52:15:1b:0e:bb:
         a5:3e:bb:97:c2:23:76:24:a8:01:b4:be:2f:95:3c:0c:8d:07:
         ec:1b:f6:9d:37:67:f8:79:a9:31:93:a8:0f:7e:90:de:f4:de:
         f3:c1:6c:3e:a2:69:2a:74:9c:a3:ee:b9:e7:07:32:4a:ec:b5:
         7d:6f:09:bc:da:d6:b1:07:7a:ff:7f:d6:f3:05:d8:91:42:43:
         56:02:59:a5:fc:68:f9:28:c8:94:9e:a0:ac:d5:b5:77:f2:33:
         8e:d4:16:de:09:08:7d:ba:27:fa:bc:de:cc:c3:e6:5a:46:d3:
         ad:3d:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:53 2025 by rpki-client