Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130332e302f32342d3234203d3e20333936333536.roa
File:                     3139302e39332e3130332e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          06vHA8NKGfX7nAs1g6JO/VZvfmmKbhr4GQqecfOiCLI=
Subject key identifier:   26:1B:14:47:48:C1:5E:D6:67:F5:8D:60:16:CF:46:BA:93:25:9E:44
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       08F1BF02F7BCE395649836552E23C3D2AAAAA124
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130332e302f32342d3234203d3e20333936333536.roa
Signing time:             Thu 12 Dec 2024 18:20:01 +0000
ROA not before:           Thu 12 Dec 2024 18:15:01 +0000
ROA not after:            Thu 11 Dec 2025 18:20:01 +0000
asID:                     396356
IP address blocks:        190.93.103.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f1:bf:02:f7:bc:e3:95:64:98:36:55:2e:23:c3:d2:aa:aa:a1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 12 18:15:01 2024 GMT
            Not After : Dec 11 18:20:01 2025 GMT
        Subject: CN=261B144748C15ED667F58D6016CF46BA93259E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:72:2e:94:3f:cf:6f:94:4f:a3:9a:05:b4:b2:
                    dc:28:9c:03:6f:57:9e:f0:62:3f:b9:81:4f:38:7f:
                    c1:2f:47:cf:36:ce:a4:d5:87:77:73:bf:22:aa:de:
                    8d:6a:65:6d:1b:4d:fa:66:1f:49:26:92:12:23:60:
                    04:19:0b:3b:85:5f:07:f7:c0:ba:3e:88:fa:39:ed:
                    72:c6:4a:22:bf:0b:bf:28:61:ce:fb:8a:8a:fa:2c:
                    90:dd:50:5e:3c:ad:2c:c9:21:1b:dd:e2:e8:c6:7b:
                    60:44:ad:78:e6:22:c2:35:06:0c:78:0e:f8:6f:91:
                    73:18:dc:52:a7:f2:8b:62:e2:66:4d:7c:a9:71:28:
                    04:f1:84:8b:c8:57:48:dd:79:ba:37:c2:27:7c:f5:
                    d3:02:2c:82:b4:8e:1d:9b:64:94:3a:8e:6d:7e:c0:
                    b6:52:a6:d4:23:bb:00:3f:64:6c:cf:eb:dc:a3:7d:
                    a0:6a:9b:9e:98:12:c5:b6:ba:b6:21:20:e5:c7:94:
                    2f:9a:07:e2:6e:2d:fe:cc:79:da:71:15:56:1b:52:
                    e6:46:65:96:6e:6b:09:ac:50:d1:8a:04:0b:3c:69:
                    5b:18:e7:1f:19:cf:8f:2f:1a:6a:ec:e7:ec:27:9e:
                    19:b3:2f:0f:b1:4f:50:cf:02:10:ea:60:01:fb:a3:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:1B:14:47:48:C1:5E:D6:67:F5:8D:60:16:CF:46:BA:93:25:9E:44
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130332e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:74:d1:a8:f2:07:ee:f0:64:71:bf:52:d9:2b:88:e7:39:6b:
         37:72:5f:0d:d0:33:dc:57:56:5e:f0:73:b9:d4:c0:71:f0:1d:
         b8:78:57:2c:1b:ef:98:79:6a:38:88:15:df:1e:2b:c4:de:e2:
         fc:97:a1:dc:b6:06:23:cc:f3:3d:25:0f:b5:06:d5:a2:0a:eb:
         04:7d:f4:1e:32:cc:2a:b0:63:18:94:9c:22:bd:ae:fb:30:fc:
         11:ee:0a:31:0c:e8:3a:6c:4a:47:cc:7b:b2:1d:b4:52:66:a0:
         6c:93:e3:6c:03:f2:12:f2:f2:a2:c3:42:e4:33:7e:0d:a0:d2:
         e6:b8:46:32:83:3f:5c:52:86:72:e2:9d:bf:38:e2:f9:bc:ac:
         5b:c0:3f:32:91:c1:d2:08:e4:37:98:ad:4a:c9:62:3e:fb:b6:
         a9:aa:1d:63:d5:e0:d3:8c:3c:69:ca:5a:92:46:1b:ee:8b:e8:
         4f:08:b7:21:96:16:c1:80:b7:a3:75:39:90:27:54:55:b2:24:
         bf:e1:9b:37:e2:7d:8b:69:65:10:16:a1:d8:64:72:df:0c:fe:
         e1:3b:90:d9:9c:b3:ca:3d:f0:f5:d7:d4:1b:70:56:17:d7:85:
         22:f5:57:d3:28:de:6e:48:e9:48:d2:bf:11:ca:98:a5:7e:d0:
         1c:8a:5e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:06 2025 by rpki-client