Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          +0HsQADOhbiMVRDw8Ch2gnL0/j8qH/U1YxCS7AzDb98=
Subject key identifier:   19:43:06:2C:14:DE:42:5B:68:17:29:BD:56:8E:1C:24:3E:62:A3:FB
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       6B8164DF507786F316760BA34B928C0D31469410
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:40 +0000
ROA not before:           Tue 04 Feb 2025 18:23:40 +0000
ROA not after:            Tue 03 Feb 2026 18:28:40 +0000
asID:                     52253
IP address blocks:        190.108.207.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:81:64:df:50:77:86:f3:16:76:0b:a3:4b:92:8c:0d:31:46:94:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:40 2025 GMT
            Not After : Feb  3 18:28:40 2026 GMT
        Subject: CN=1943062C14DE425B681729BD568E1C243E62A3FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:39:e5:c6:58:30:52:7a:75:57:6a:dd:d0:
                    98:b5:69:68:f2:67:ba:1e:78:19:b7:0d:3c:a1:01:
                    b1:d5:52:ec:c3:8b:92:60:c8:05:33:aa:7e:27:9b:
                    8d:fb:b5:f3:f3:1c:76:70:cf:b6:c8:3e:75:fe:9f:
                    a9:72:3a:1a:29:72:ff:0d:da:3f:7c:e3:b2:22:20:
                    b2:f4:da:49:91:d1:eb:47:ee:70:5b:fc:be:ab:8c:
                    f1:88:9a:35:79:41:74:82:d1:69:b8:d7:0c:9e:2f:
                    26:46:a6:03:c7:07:4f:bc:9c:e4:80:e4:d5:9b:1d:
                    9f:ae:fc:75:cc:8e:e6:02:d1:70:c9:b5:74:c1:d6:
                    4c:a2:35:be:86:8b:ad:2d:40:f5:97:0b:2f:41:24:
                    e4:5e:6e:c2:c8:df:3a:c5:f0:7a:ff:bc:41:7e:02:
                    48:2a:88:e5:f9:9d:2e:eb:15:c5:2a:c4:1a:02:99:
                    09:07:77:49:7f:8d:29:ee:ae:90:e8:4e:ea:43:78:
                    b0:7c:49:6a:84:b5:15:fe:29:0b:33:f6:5c:55:03:
                    9b:65:78:02:34:6e:3c:b6:ca:8b:59:70:e1:b4:90:
                    b0:d9:e3:4e:3a:94:ee:95:6b:9e:4d:bf:fb:8f:05:
                    ef:61:94:7c:5b:f8:bb:8c:19:c8:ea:26:f5:c2:c4:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:43:06:2C:14:DE:42:5B:68:17:29:BD:56:8E:1C:24:3E:62:A3:FB
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230372e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:68:50:08:13:e8:86:2b:ed:ef:63:a9:2e:d1:3e:1c:96:a6:
         57:c0:30:fb:cb:e8:e4:e6:8d:e7:87:28:d4:33:d1:74:62:00:
         54:21:a9:b3:d5:69:2a:ca:ad:03:d3:0c:80:ec:cd:58:ee:c3:
         88:09:8c:fe:52:06:ed:f1:b9:d5:cb:04:91:9c:90:b4:ef:bb:
         b3:26:56:72:24:6c:30:97:91:11:6c:d5:ca:d0:58:70:5e:fe:
         1f:e2:da:a4:d4:a8:38:76:33:f0:60:a7:62:b3:51:4c:0e:1f:
         ce:aa:4d:14:c2:8e:a2:7e:ab:3b:ac:fa:ba:15:bd:a3:87:50:
         86:e9:8e:94:5e:95:ff:53:ce:3a:06:6e:9e:73:39:0f:07:a8:
         a4:a2:e7:68:9b:38:9e:37:80:ae:d0:df:97:90:ed:68:6e:dd:
         92:6f:cc:78:da:68:ff:fb:61:9c:93:c2:80:d9:ba:19:37:f8:
         7a:b2:af:3e:0d:dd:7c:00:36:c8:28:aa:ee:9e:ad:c6:08:c3:
         26:39:aa:41:dc:aa:09:fb:7d:42:ee:1d:1c:80:90:2b:98:0e:
         e8:db:11:56:eb:ad:f4:f4:01:81:cb:79:1c:2f:2d:b2:fd:b7:
         1d:1f:c6:50:19:6e:15:81:91:65:8d:61:e2:90:e1:08:6f:49:
         e7:ca:bf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:34 2025 by rpki-client