Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235302e302f32342d3234203d3e20323636373032.roa
File:                     3139302e3139362e3235302e302f32342d3234203d3e20323636373032.roa (raw, json)
Hash identifier:          cM35aetSe0eSFfXRP+0nl937OubRe7GUPCFaABBzDEA=
Subject key identifier:   AD:34:4C:C2:B0:0C:5E:2C:46:81:66:32:E9:2F:53:2A:88:C2:49:44
Certificate issuer:       /CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
Certificate serial:       0168EFBD33135720472A4AC7E2FA2F6828FB5B64
Authority key identifier: 36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235302e302f32342d3234203d3e20323636373032.roa
Signing time:             Tue 04 Feb 2025 18:43:19 +0000
ROA not before:           Tue 04 Feb 2025 18:38:19 +0000
ROA not after:            Tue 03 Feb 2026 18:43:19 +0000
asID:                     266702
IP address blocks:        190.196.250.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:68:ef:bd:33:13:57:20:47:2a:4a:c7:e2:fa:2f:68:28:fb:5b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
        Validity
            Not Before: Feb  4 18:38:19 2025 GMT
            Not After : Feb  3 18:43:19 2026 GMT
        Subject: CN=AD344CC2B00C5E2C46816632E92F532A88C24944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4a:c9:96:44:91:4a:a5:fa:2d:be:b2:03:78:
                    07:d9:71:65:61:81:e5:c5:2e:50:01:ad:c3:35:59:
                    2b:f7:be:a2:0f:c9:89:b1:fa:aa:ea:ef:d5:21:70:
                    88:c3:7f:81:d1:50:be:a3:72:d2:c8:2a:82:53:c9:
                    9e:6d:d3:4e:75:e2:a8:5a:7a:7e:00:4d:f5:df:f8:
                    ce:51:27:99:67:24:5d:83:32:d6:ae:91:f0:b3:32:
                    19:2e:bb:b3:06:02:af:33:41:77:61:46:93:55:fe:
                    99:7f:1e:e9:1f:7b:8d:a6:97:02:9f:36:75:52:82:
                    b0:97:ba:8a:57:25:64:87:f8:dd:51:b5:a9:66:b4:
                    8e:a0:2f:4a:2c:96:6a:79:b3:01:2c:0f:9e:e5:44:
                    07:a7:7a:04:87:9d:1e:74:9e:48:06:5c:50:d4:24:
                    d2:c4:79:fc:f2:12:07:0c:87:1b:01:41:e3:74:82:
                    a7:be:4e:02:f3:cf:7d:15:e1:2f:30:01:0e:c9:42:
                    42:98:92:49:33:3f:ae:35:dd:2d:1d:0d:19:6f:26:
                    09:07:a1:f5:e8:f9:a4:95:54:1e:ec:6d:c0:01:cc:
                    f5:7a:6d:29:71:9f:6b:47:14:aa:0c:74:32:61:b7:
                    22:71:48:f3:88:14:4c:ac:18:92:de:da:92:9d:a3:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:34:4C:C2:B0:0C:5E:2C:46:81:66:32:E9:2F:53:2A:88:C2:49:44
            X509v3 Authority Key Identifier:
                keyid:36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3235302e302f32342d3234203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:40:be:eb:70:9c:97:84:ce:6c:72:2e:0d:d8:06:96:33:55:
         21:dc:1e:fc:f4:e5:2e:fc:fd:3f:ad:d9:41:9e:d6:d8:4d:bc:
         5a:7b:1b:7a:62:f8:6e:cd:ba:a6:74:a7:46:16:1d:c4:a6:fb:
         67:dd:9d:87:da:55:94:62:39:ac:14:8e:96:63:41:c2:dc:09:
         b1:7c:7d:2c:78:db:03:d9:e1:26:3d:bf:64:c3:e5:ae:89:22:
         00:ab:db:13:ba:c1:e2:1d:a5:4b:a0:72:75:8e:b0:a3:0c:ce:
         72:a6:db:85:da:ea:a5:ad:eb:fb:16:03:5e:af:a8:d0:10:59:
         ee:45:6a:88:5c:85:7b:b6:79:bf:39:b3:cf:59:da:1c:17:12:
         0a:ec:2f:7a:4d:1d:7b:d1:62:2b:31:43:be:c6:80:96:2f:cd:
         f0:a8:4a:bf:b0:32:ee:b5:a7:8c:c8:b8:f4:4a:8c:ec:2f:f8:
         94:d5:6f:cf:97:9d:5b:23:e3:46:30:57:26:34:be:ff:2d:81:
         c6:3a:93:8e:2c:c9:7c:b9:61:16:e6:1a:d7:73:71:7c:fe:7d:
         f3:7f:ea:fa:ff:55:a1:80:44:92:3a:8b:13:0d:32:86:25:49:
         37:47:13:fb:04:63:47:01:3d:c1:7a:1b:a6:96:89:f2:bf:f1:
         a4:d9:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:08:33 2025 by rpki-client