Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa
File:                     3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa (raw, json)
Hash identifier:          Eym514jN4KCoYtEWhfMQdDBiNi0Ca45NzCo75hxyR10=
Subject key identifier:   25:E4:B9:DE:E7:B6:08:E1:AE:8B:7A:1A:7F:4C:B0:11:44:45:BB:64
Certificate issuer:       /CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
Certificate serial:       6075DD887AED2E4764927026B896D9EC8B0FF834
Authority key identifier: 90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa
Signing time:             Tue 04 Feb 2025 18:33:41 +0000
ROA not before:           Tue 04 Feb 2025 18:28:41 +0000
ROA not after:            Tue 03 Feb 2026 18:33:41 +0000
asID:                     265727
IP address blocks:        160.238.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:75:dd:88:7a:ed:2e:47:64:92:70:26:b8:96:d9:ec:8b:0f:f8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
        Validity
            Not Before: Feb  4 18:28:41 2025 GMT
            Not After : Feb  3 18:33:41 2026 GMT
        Subject: CN=25E4B9DEE7B608E1AE8B7A1A7F4CB0114445BB64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:52:b1:d0:ae:98:cb:ca:18:eb:0e:19:a5:
                    f1:57:e2:79:d0:4b:4c:2b:f1:0e:e8:4e:16:37:dc:
                    54:70:00:48:5b:4b:03:16:61:7b:5c:93:69:54:d9:
                    58:41:1e:b5:0c:f4:d0:0a:eb:71:9d:36:5b:6e:ee:
                    da:32:b9:84:cf:4c:a4:88:e1:da:67:75:7b:a7:0c:
                    ec:84:f8:c3:91:35:a5:e0:c0:8e:2e:1a:22:70:2e:
                    5d:a6:fa:37:c8:6f:22:14:33:b4:9d:11:b8:d7:b2:
                    b1:72:1e:9b:65:88:38:5f:77:13:99:a0:e8:44:0d:
                    2f:21:a3:ba:a6:27:e5:47:ab:46:6f:91:a1:6c:de:
                    2a:34:36:5f:72:b2:a4:28:ed:88:93:6d:ef:09:7d:
                    b6:e2:d4:62:f1:23:7a:e5:5c:e9:54:01:c8:84:37:
                    58:30:58:a4:e6:b0:a6:13:a7:0f:9a:19:19:ba:45:
                    bf:d8:89:fe:e1:0e:54:7b:ff:ef:38:96:1b:0c:ec:
                    40:12:46:9e:9f:68:8f:55:97:3b:cc:d8:dd:3f:5a:
                    d3:43:9d:96:e0:90:99:96:2b:94:48:cb:d9:24:0e:
                    81:e6:9f:12:4b:c3:cf:7a:70:d5:a1:70:24:f8:09:
                    62:a2:d1:49:ec:7b:03:fe:e5:ea:2e:5d:9a:8f:4b:
                    2b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E4:B9:DE:E7:B6:08:E1:AE:8B:7A:1A:7F:4C:B0:11:44:45:BB:64
            X509v3 Authority Key Identifier:
                keyid:90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:94:12:e6:dc:49:b4:67:d6:ee:01:f4:ae:6c:43:e8:6b:
         6a:99:31:8f:7b:29:22:e6:d8:2e:9e:c9:31:16:c5:0a:f9:bb:
         2d:56:48:e6:c6:c4:3f:0f:48:8a:91:e6:12:c1:ba:0d:d7:3c:
         ae:ac:ad:8b:76:a2:93:18:4e:68:b4:49:64:6b:7c:c1:ca:ae:
         f3:04:ea:ca:a8:3e:55:6a:4c:ed:87:ba:a5:f0:eb:6b:1b:42:
         74:14:ce:7d:3f:95:5e:7b:87:5c:71:6b:e6:1e:4d:11:c1:a3:
         9b:75:2f:38:12:d0:67:70:7c:a3:00:6d:30:6c:ec:ac:bf:36:
         b3:40:49:2c:2a:c6:c7:69:85:58:df:f4:58:4a:db:dc:a6:d3:
         40:82:01:da:e5:ca:63:f6:1d:5d:23:76:20:69:bb:92:75:05:
         a6:e9:39:b8:6c:b7:50:99:a1:88:c9:22:8a:1b:13:20:6c:93:
         c6:ab:23:92:11:a1:99:16:12:ff:05:5a:26:d1:0b:43:52:d3:
         2e:2d:1b:9a:dd:42:d9:a8:57:f5:03:f2:7b:b2:17:b4:b4:db:
         18:2e:a7:cf:15:a9:d8:ee:9a:21:23:5e:d3:14:74:ed:21:99:
         cc:e4:e8:3b:14:4c:15:54:2a:ef:a0:c9:47:78:d2:9b:de:52:
         5f:2d:6a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:08 2025 by rpki-client