Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa
File:                     3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa (raw, json)
Hash identifier:          80DV41x/aZ5vEkNpiMxuFQAjW9P7oxkwv0fsanQOz7g=
Subject key identifier:   EB:8A:CB:F8:73:7F:D9:B6:95:73:EC:CD:0D:49:65:45:D3:ED:E5:06
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       2150A6FB6178D56FA2FC8FB2E0D4C6C0821AC3BC
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa
Signing time:             Tue 04 Feb 2025 18:36:10 +0000
ROA not before:           Tue 04 Feb 2025 18:31:10 +0000
ROA not after:            Tue 03 Feb 2026 18:36:10 +0000
asID:                     52278
IP address blocks:        190.105.255.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:50:a6:fb:61:78:d5:6f:a2:fc:8f:b2:e0:d4:c6:c0:82:1a:c3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb  4 18:31:10 2025 GMT
            Not After : Feb  3 18:36:10 2026 GMT
        Subject: CN=EB8ACBF8737FD9B69573ECCD0D496545D3EDE506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:56:d9:fa:1d:94:04:75:1c:71:dc:94:42:
                    b9:37:94:6b:58:51:58:f0:20:3b:33:7a:1f:83:ee:
                    ce:1f:b6:d5:ae:d6:ac:2e:51:09:37:0c:01:65:ac:
                    cf:3c:cf:48:41:70:9c:6f:23:91:9e:a7:84:be:8e:
                    8e:00:2e:16:16:08:d5:42:5f:bc:a6:94:7a:54:aa:
                    42:5f:24:d4:87:e9:67:b6:39:0c:2e:b7:95:9e:ed:
                    47:bf:f6:b8:89:c9:c7:62:22:96:b5:1b:1e:4e:96:
                    0b:c4:70:ea:56:6f:7c:71:d8:12:6e:60:9b:33:ed:
                    51:4d:7e:fd:5c:ca:de:56:ab:21:7c:86:e1:d0:23:
                    57:40:46:42:73:62:7b:a4:01:10:54:f7:ab:f0:5f:
                    ac:08:5c:cf:31:e8:43:c9:ae:2f:c0:df:8f:9e:4e:
                    e9:2a:f8:fc:2e:05:90:b1:83:de:d7:7f:21:54:e1:
                    7d:89:35:33:fd:16:16:a5:40:36:ae:aa:90:12:ea:
                    99:3f:e5:92:c7:22:34:8c:bb:e2:42:8c:1d:f0:98:
                    54:7b:f3:78:a5:d9:f4:d1:b1:e0:d5:54:c3:e9:7e:
                    3b:27:b8:dc:d7:71:7f:da:7d:3d:fb:06:8c:50:e5:
                    b5:ee:d7:24:00:30:95:90:f2:9e:08:e9:a2:69:0f:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8A:CB:F8:73:7F:D9:B6:95:73:EC:CD:0D:49:65:45:D3:ED:E5:06
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235352e302f32342d3234203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:11:4f:12:bd:b7:7e:46:c2:b6:80:4b:85:b5:e0:38:0c:00:
         c4:f9:0c:10:43:66:67:eb:87:53:e8:45:66:c1:ab:f6:1c:95:
         c8:c6:77:2f:cd:f6:18:3f:a1:d9:9a:dc:24:ef:ed:28:0a:ae:
         86:bd:a0:db:77:14:7a:7f:0b:6e:67:3d:ac:71:1a:a1:7d:2c:
         8a:1d:c4:8d:1d:9e:36:c6:1e:73:4e:8a:4c:0c:70:81:ba:2a:
         59:eb:33:f7:2c:92:f7:b0:7d:20:bd:13:56:96:a7:1e:23:82:
         82:10:51:bf:37:63:b5:d7:12:41:a5:59:66:3c:b7:a1:27:84:
         e4:73:15:31:f3:15:50:0a:9d:13:39:07:7a:1d:1b:7d:fd:57:
         d9:82:90:6d:cf:3d:aa:fc:ad:91:20:ca:e8:b4:91:3d:bf:34:
         05:45:68:49:36:2c:35:69:ba:97:d3:b4:69:6e:45:3a:39:9b:
         51:20:43:f3:8a:df:26:62:55:26:7d:4d:84:a9:e1:dd:c3:16:
         1c:c9:e0:df:cf:3c:35:a5:12:d8:b3:48:f1:9f:e4:d9:35:a5:
         1d:76:03:6d:5a:6e:d4:30:dd:f4:f5:2d:f7:be:23:0d:6c:89:
         3d:66:e6:bc:24:af:bc:25:12:02:1b:6d:9d:d2:f9:dc:9f:4e:
         ee:2c:30:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:40 2025 by rpki-client