Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e382f32392d3239203d3e203134303830.roa
File:                     3139302e3138342e3230312e382f32392d3239203d3e203134303830.roa (raw, json)
Hash identifier:          nnDiYl7zbQxebkQhwQ1qXePK2zWnaG3Mggoqhoc6m1k=
Subject key identifier:   30:4B:F3:4F:DB:ED:8A:01:A8:E6:08:5A:D7:72:8D:C8:14:A1:65:5F
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       289BC4174B1CE5C9C18C02B769B043356A852F36
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e382f32392d3239203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:15:12 +0000
ROA not before:           Tue 04 Feb 2025 18:10:12 +0000
ROA not after:            Tue 03 Feb 2026 18:15:12 +0000
asID:                     14080
IP address blocks:        190.184.201.8/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9b:c4:17:4b:1c:e5:c9:c1:8c:02:b7:69:b0:43:35:6a:85:2f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:12 2025 GMT
            Not After : Feb  3 18:15:12 2026 GMT
        Subject: CN=304BF34FDBED8A01A8E6085AD7728DC814A1655F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e4:c9:cf:4d:b8:9e:f4:4d:6b:ec:0f:c1:e0:
                    3f:f2:54:7e:33:8c:48:fe:cb:3f:f9:83:c1:4c:f1:
                    74:6c:38:6f:e8:b8:d8:bd:3f:e0:9b:ea:b1:30:07:
                    97:47:f1:9a:33:0b:58:0a:8b:31:b5:7e:be:23:e8:
                    54:0f:43:6c:b7:8b:86:81:47:15:f3:95:ad:c3:86:
                    bf:0e:fa:bd:48:b8:f4:8b:87:5b:bd:a4:84:41:0a:
                    ef:ac:d0:7c:64:89:b8:78:1e:15:c9:80:f6:c8:ee:
                    75:d1:6e:02:f3:30:74:2c:4c:da:70:90:87:68:dc:
                    16:97:4c:89:e5:58:b6:07:83:40:ad:ac:cd:4a:a3:
                    0c:1c:1e:c8:eb:71:32:ea:03:21:0e:5f:65:5c:af:
                    0a:e5:81:b3:13:2b:c3:d6:f6:ae:3b:a9:dc:93:a2:
                    6d:6d:0b:ab:c0:02:05:7a:3f:d3:d5:7a:6f:80:03:
                    5c:46:49:91:be:82:51:64:ea:20:19:2c:83:85:f0:
                    86:dc:ee:70:71:4b:ac:25:6e:79:dc:a5:46:53:4d:
                    a7:f0:27:0e:ab:06:d0:d0:25:0b:68:0a:c4:53:78:
                    48:05:e0:c3:23:c3:fe:01:52:ad:f4:95:bf:b3:17:
                    cb:71:24:63:9c:37:c6:50:10:60:04:92:f5:9a:a6:
                    3a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:F3:4F:DB:ED:8A:01:A8:E6:08:5A:D7:72:8D:C8:14:A1:65:5F
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230312e382f32392d3239203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.201.8/29

    Signature Algorithm: sha256WithRSAEncryption
         a2:3d:6b:94:4e:1a:59:09:76:86:a6:c6:f6:cd:f5:e1:7d:57:
         02:27:e9:c3:63:f0:95:62:99:01:19:1c:b9:a6:9a:16:51:a0:
         cd:df:81:33:56:1f:fe:d6:5d:bc:c2:8c:c7:c0:3a:5b:be:20:
         1d:79:46:d5:2f:55:f7:a3:29:e3:68:e2:47:07:de:b4:5a:ea:
         db:a2:51:c7:9b:f8:27:56:4b:30:4b:4e:94:a1:d2:29:4d:13:
         13:9d:8b:41:40:54:5e:c3:95:d4:94:71:75:5c:a8:df:95:32:
         ee:f4:a3:77:6b:73:2f:11:e4:c4:fa:ee:85:42:76:6e:19:6a:
         63:6d:9e:8b:cb:56:a5:77:56:40:05:8b:50:ef:23:54:40:77:
         e3:d7:7b:57:a9:c9:6f:3c:64:68:a3:d5:92:e6:db:fc:28:4f:
         3e:05:b8:30:b6:7e:1e:44:63:97:81:70:3a:2d:c6:28:a0:8a:
         3b:14:b8:9e:c7:5e:0b:90:3d:2f:54:73:3a:0f:57:a9:0a:21:
         67:0a:03:e3:6a:61:16:72:bc:47:dd:b9:e5:c6:29:9a:b0:40:
         b1:2c:a0:5f:3f:bd:9d:bd:69:64:b5:a1:f4:23:b7:6a:09:da:
         12:de:33:8a:6a:46:f3:34:55:9a:cd:19:2b:1f:80:c4:a0:85:
         41:16:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:56 2025 by rpki-client