Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
File:                     3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa (raw, json)
Hash identifier:          v3U8hJ66GvDvArdY1KEZkL58k8R9KwDrwo7gQnGFJUE=
Subject key identifier:   C7:78:BC:56:C9:33:AA:F2:D8:4B:A9:9D:30:A5:66:5B:53:17:51:69
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       5E7DF2217A00E1FA00C1F862EF33D75F5B81A4D7
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:38 +0000
ROA not before:           Tue 04 Feb 2025 18:23:38 +0000
ROA not after:            Tue 03 Feb 2026 18:28:38 +0000
asID:                     52253
IP address blocks:        190.108.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7d:f2:21:7a:00:e1:fa:00:c1:f8:62:ef:33:d7:5f:5b:81:a4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:38 2025 GMT
            Not After : Feb  3 18:28:38 2026 GMT
        Subject: CN=C778BC56C933AAF2D84BA99D30A5665B53175169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:5b:dd:1a:f6:4e:7a:b8:9f:0b:7d:d2:d7:
                    88:91:9c:69:fc:d6:f7:fa:b2:25:41:ce:ed:7c:29:
                    56:c5:8f:ce:ca:0b:c7:31:75:e5:26:81:c4:e0:7a:
                    69:6d:47:8c:b9:52:e2:b1:45:d2:87:b7:e1:8a:4c:
                    34:70:42:5e:20:7e:73:44:96:8c:e7:37:81:2f:bd:
                    62:25:f5:7f:25:65:18:08:1a:5a:51:53:bf:cd:75:
                    01:63:3d:ca:d1:5f:31:8c:89:74:61:f9:96:27:89:
                    cc:56:fe:36:2b:f0:0f:97:a1:ca:4a:82:6f:d5:fb:
                    0c:b4:12:da:10:27:7d:b4:95:b7:9c:82:6a:56:f3:
                    d5:cf:17:1c:f6:54:0f:f1:46:5b:03:f7:c9:3f:2d:
                    ec:ab:d3:dd:a4:15:ff:e8:f9:4b:5f:4d:2a:02:41:
                    72:1c:78:94:2c:ce:98:3b:84:c3:fa:da:b7:4a:8b:
                    e0:ce:22:19:65:32:11:13:6e:b6:a9:1b:d6:6b:bf:
                    38:42:17:85:27:d5:d5:90:14:fc:66:ba:18:b7:32:
                    70:2d:f0:b8:f1:3b:b2:53:4d:29:58:5d:f1:15:44:
                    d8:af:3b:ed:79:94:80:fa:db:3e:01:d1:80:3e:0d:
                    bf:15:44:45:ea:6c:a4:25:48:15:07:b4:a9:67:41:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:78:BC:56:C9:33:AA:F2:D8:4B:A9:9D:30:A5:66:5B:53:17:51:69
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230382e302f32312d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         20:a2:76:cf:fb:fc:17:1b:16:ca:a4:eb:39:a4:9a:75:88:f7:
         a8:c9:ed:ab:ac:a6:89:2d:fe:47:14:0a:ff:83:49:ab:05:31:
         70:6b:09:f4:1e:56:38:f4:6b:39:7f:31:46:4a:bf:49:22:f5:
         8d:2e:63:17:50:af:2e:45:cc:54:ad:cc:d6:cb:4e:e3:74:65:
         06:6e:f8:d2:d5:c9:c8:f1:68:91:bd:6a:a9:48:17:e3:4b:14:
         ff:a6:11:f1:bf:de:d2:cd:b0:80:cb:93:cb:9a:d9:05:10:12:
         21:ea:ff:8a:1f:72:78:93:5b:b3:6c:ae:d1:6a:a5:4f:d7:ee:
         80:c0:d1:41:7a:1a:ad:e7:b0:e3:c6:33:4c:8b:04:50:74:32:
         3a:5a:a7:10:1a:78:46:71:9e:0b:32:1c:c1:ef:6d:b7:3c:43:
         c6:45:24:3e:e7:87:26:79:e3:34:0c:88:95:cb:5b:75:a4:c2:
         d7:4c:b9:33:98:4c:52:fb:a3:15:f8:5f:8f:a1:cc:bf:1e:8e:
         ef:33:da:59:61:fd:5a:6c:e3:ee:93:3c:3e:1a:b5:ba:69:48:
         47:e1:ff:85:87:92:1e:fa:42:82:34:fa:11:ff:49:cc:87:64:
         6e:91:b0:a8:7c:a0:b2:6c:a2:af:db:bc:c3:fb:0d:dd:6c:da:
         d1:77:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:48 2025 by rpki-client