Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa
File:                     3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa (raw, json)
Hash identifier:          30ClGIR5dtwyA+Eo2o1O1nyzJG4XXdQwxFCRJwaYK1g=
Subject key identifier:   97:F3:49:FB:01:3B:91:73:10:AE:D4:A9:9D:10:7D:0F:ED:82:CF:84
Certificate issuer:       /CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
Certificate serial:       6D0456798480DABA83FF18A14221211EDC016063
Authority key identifier: EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa
Signing time:             Tue 04 Feb 2025 18:00:33 +0000
ROA not before:           Tue 04 Feb 2025 17:55:33 +0000
ROA not after:            Tue 03 Feb 2026 18:00:33 +0000
asID:                     263246
IP address blocks:        190.108.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:04:56:79:84:80:da:ba:83:ff:18:a1:42:21:21:1e:dc:01:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE0F3FF0E8430A1CB45AD3260983A9D349722624
        Validity
            Not Before: Feb  4 17:55:33 2025 GMT
            Not After : Feb  3 18:00:33 2026 GMT
        Subject: CN=97F349FB013B917310AED4A99D107D0FED82CF84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:ab:6e:58:42:f4:eb:3a:b3:b8:28:18:0d:
                    f0:9e:76:64:3c:7e:fc:9b:ac:b8:dd:57:18:c2:ca:
                    22:db:30:f6:63:97:38:5c:d3:c5:c3:e7:69:12:0a:
                    4b:72:11:80:73:63:30:08:b2:09:34:a7:61:7c:c1:
                    e8:3e:29:bf:a3:67:ed:ea:d9:60:0e:fb:33:90:6e:
                    ba:d7:3c:d5:1b:ef:d9:f3:e2:a4:95:10:ab:e0:25:
                    7e:67:2d:c4:ca:69:53:a9:45:f6:d9:de:93:b6:0b:
                    09:8e:ac:23:0c:6a:b3:21:72:d6:c9:99:c9:ee:2f:
                    1e:d9:e7:b9:a4:27:2f:30:33:36:ee:72:e4:99:78:
                    bc:54:58:4b:18:a2:6c:f1:cc:40:05:a7:57:72:cf:
                    d0:f4:fc:3a:08:b4:ed:88:62:ed:d9:f8:5e:2c:83:
                    2b:8b:48:d2:9d:61:19:33:f0:f9:ac:68:ad:ba:9f:
                    40:e5:59:84:e0:7d:b6:c0:28:c7:19:56:a1:14:2c:
                    2c:bc:b4:c3:8a:b3:b8:3b:d1:70:d0:18:be:9f:8e:
                    fc:9e:dc:61:23:fd:33:00:f9:72:42:90:36:35:b0:
                    2e:82:5a:93:ee:89:46:eb:bb:2a:88:bd:77:da:71:
                    3f:59:48:27:3d:0f:1a:65:58:a6:9b:a4:b1:bf:8f:
                    eb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F3:49:FB:01:3B:91:73:10:AE:D4:A9:9D:10:7D:0F:ED:82:CF:84
            X509v3 Authority Key Identifier:
                keyid:EE:0F:3F:F0:E8:43:0A:1C:B4:5A:D3:26:09:83:A9:D3:49:72:26:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EE0F3FF0E8430A1CB45AD3260983A9D349722624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4B71DE7CD160FB471BE4FA8EB772197AF8BD8CE3637458D218FFE303DE48AB98/0/3139302e3130382e37342e302f32342d3234203d3e20323633323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:09:37:a4:bc:ec:d5:90:4c:aa:38:d2:36:63:e7:8e:ba:94:
         8b:3d:9a:e5:06:0e:99:0f:bd:79:71:06:70:4b:98:7c:23:c2:
         2d:dc:a2:22:66:c4:cc:65:af:cf:e6:80:3f:09:1a:24:3c:fe:
         d1:83:96:dd:4e:2e:e2:dd:ad:5c:d6:89:ae:fd:88:8a:d3:43:
         77:38:94:6b:8a:94:e8:ba:66:4f:5a:d9:fd:48:1f:59:99:dd:
         ee:8c:ff:53:aa:9e:61:f9:fd:37:06:b8:6f:de:3e:ce:9e:bf:
         7c:ab:0f:b4:e4:f8:24:f9:91:c6:59:cf:89:28:ec:d5:46:22:
         ba:44:db:2e:09:71:5e:2b:be:4a:5e:fd:fe:a5:02:8f:7e:85:
         f4:4f:20:1a:3c:ea:6d:de:84:b0:36:c9:0e:06:b3:c6:85:21:
         55:83:9c:99:2e:ed:58:d1:41:7a:8e:2a:28:63:18:93:dd:6b:
         ba:b0:c3:f1:f1:6f:6f:1a:63:51:de:a3:40:a6:53:37:b4:47:
         91:c6:6d:22:b4:50:5b:f0:fd:f6:99:b4:d9:51:bd:5d:b5:0a:
         25:dc:6c:69:05:08:c2:0e:8d:e1:46:1a:04:ed:6c:a2:2c:02:
         fb:81:e0:bf:37:1c:82:fc:e3:b2:9d:8c:e7:44:9e:06:4b:b5:
         6a:44:97:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:02 2025 by rpki-client