Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa
File:                     3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa (raw, json)
Hash identifier:          schpR5mEjiL2+SsiCgKTxbpCanXxcCIZrS2/yXVt8T8=
Subject key identifier:   1F:52:02:90:F4:3F:9B:DD:99:54:B5:15:7D:10:25:16:D3:3F:F3:03
Certificate issuer:       /CN=9EFB791A145582344954DF95067EBE4F7C567ECB
Certificate serial:       5BD42B508573D20B56D9E912563F6EE3F42A9CB6
Authority key identifier: 9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa
Signing time:             Tue 04 Feb 2025 18:15:13 +0000
ROA not before:           Tue 04 Feb 2025 18:10:13 +0000
ROA not after:            Tue 03 Feb 2026 18:15:13 +0000
asID:                     52330
IP address blocks:        190.184.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:2b:50:85:73:d2:0b:56:d9:e9:12:56:3f:6e:e3:f4:2a:9c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EFB791A145582344954DF95067EBE4F7C567ECB
        Validity
            Not Before: Feb  4 18:10:13 2025 GMT
            Not After : Feb  3 18:15:13 2026 GMT
        Subject: CN=1F520290F43F9BDD9954B5157D102516D33FF303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:cf:f1:4d:39:e4:f9:fb:5a:48:fc:4a:2d:
                    e2:82:2b:b4:9a:a8:64:49:39:4d:09:8f:d4:b5:9b:
                    41:31:89:e2:81:a9:ec:9b:9d:56:44:b3:c1:da:ce:
                    07:35:47:19:92:11:12:ea:f0:9b:c6:65:a1:ff:8f:
                    2e:07:c7:83:d2:5a:c1:a3:5d:38:c1:b6:46:91:58:
                    dd:54:2e:e8:86:fc:f6:e6:34:74:0e:67:93:f3:23:
                    15:64:da:0f:c3:84:c9:73:51:02:26:71:53:e9:a0:
                    79:d8:80:64:60:3a:75:29:f9:18:b0:b2:ae:85:f0:
                    a0:f4:d3:d2:fe:5e:3d:25:08:4e:f3:04:aa:7d:c9:
                    b6:87:5e:5c:a7:6b:e7:48:c1:62:c5:93:75:4e:7e:
                    e7:15:05:3e:c2:2f:e1:24:e6:dc:33:fb:4b:68:91:
                    ea:1a:6c:05:9b:d1:85:73:df:21:d5:50:14:3f:1e:
                    d9:93:58:ec:e9:cd:0e:2a:13:e1:91:e0:fa:01:a6:
                    2e:57:b2:2a:ca:26:9d:90:29:fe:15:2c:6f:ab:76:
                    5a:27:0c:f2:c7:9d:58:62:5d:b1:2d:cb:b2:07:8d:
                    ff:cc:85:b6:a6:7c:e3:78:ec:57:2f:9a:e2:92:e4:
                    d0:87:6c:2b:11:3c:72:14:5b:0e:62:b1:ab:ef:8c:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:52:02:90:F4:3F:9B:DD:99:54:B5:15:7D:10:25:16:D3:3F:F3:03
            X509v3 Authority Key Identifier:
                keyid:9E:FB:79:1A:14:55:82:34:49:54:DF:95:06:7E:BE:4F:7C:56:7E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/9EFB791A145582344954DF95067EBE4F7C567ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9EFB791A145582344954DF95067EBE4F7C567ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4922D158785AAB1704F70753BD4D5AFF990EA9B94829B1FDDE1D86BEB6680C5F/0/3139302e3138342e3230372e302f32342d3234203d3e203532333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:0a:70:c9:d3:06:43:04:18:1c:f0:63:70:78:1e:5f:28:
         3c:5a:de:c1:fb:8e:67:98:e6:ed:01:30:1e:be:a8:f2:b2:d2:
         bd:d2:b5:13:ac:ef:f3:57:a9:73:16:25:4a:28:a6:94:f3:55:
         9d:1d:a9:84:a8:40:ce:7e:95:46:a8:46:7b:cc:2b:6d:11:d2:
         ed:a1:f4:c6:76:e7:ab:dd:37:b8:12:6c:d9:d4:47:96:93:a3:
         6e:e7:b0:e7:82:ff:94:b1:64:fd:ca:fa:96:72:ee:89:3e:44:
         c6:44:43:8d:d7:61:68:b2:06:15:03:aa:eb:be:99:f8:7f:78:
         f5:50:0d:ec:32:8b:b3:27:99:a7:68:d4:03:90:1e:fa:86:87:
         9e:10:fd:5d:e2:7e:c6:f9:02:fe:4c:dc:c4:66:e1:e4:b6:85:
         13:60:a5:16:06:19:5d:c1:70:84:75:60:a5:14:3a:91:10:c4:
         11:8b:69:5f:3d:38:07:b1:f3:73:fa:92:5d:0b:18:d8:c9:7b:
         2c:13:4a:03:cb:87:02:8e:25:43:d4:12:75:bb:a1:1d:97:43:
         8f:42:76:62:fe:67:4b:ae:b4:d8:84:66:85:8a:60:28:d0:a6:
         b7:ac:4b:23:5b:6d:f8:89:61:63:fb:5d:12:dc:42:d5:1e:2c:
         32:d3:30:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:27:02 2025 by rpki-client