Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323733393733.roa
File:                     3139302e39332e3130352e302f32342d3234203d3e20323733393733.roa (raw, json)
Hash identifier:          FiY0+uB9UjrYTvQn2Q15i5Qsrqto4ND9hUUc7h4Mms8=
Subject key identifier:   06:AD:BC:21:6B:24:3F:4F:76:3F:31:DA:B3:F4:57:6F:EB:3A:B0:90
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       764F948D870F1557F2057FAD5D3A3425BF10C950
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323733393733.roa
Signing time:             Mon 20 Jan 2025 19:15:00 +0000
ROA not before:           Mon 20 Jan 2025 19:10:00 +0000
ROA not after:            Mon 19 Jan 2026 19:15:00 +0000
asID:                     273973
IP address blocks:        190.93.105.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4f:94:8d:87:0f:15:57:f2:05:7f:ad:5d:3a:34:25:bf:10:c9:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan 20 19:10:00 2025 GMT
            Not After : Jan 19 19:15:00 2026 GMT
        Subject: CN=06ADBC216B243F4F763F31DAB3F4576FEB3AB090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:d7:ae:7b:39:f1:a7:ec:34:53:f0:5e:2c:
                    23:bf:34:cf:4f:d2:70:2a:48:ea:c1:92:fe:16:0a:
                    f3:90:d7:02:8e:17:64:64:65:2c:cd:d5:53:e6:15:
                    81:3d:78:7a:23:ae:2b:cb:f1:f3:ab:1b:6c:3d:db:
                    23:52:dd:8d:54:a4:cf:88:8c:6b:b7:bd:5a:a8:c1:
                    29:20:d7:b2:c1:0b:02:d3:c8:3f:9e:15:b6:52:f0:
                    80:7a:c3:d3:f9:f7:b4:c8:e0:a2:01:7f:07:d8:03:
                    2c:4f:b3:23:fe:e6:05:53:6c:97:46:41:0a:a1:39:
                    c3:80:25:4b:e6:4c:3e:4c:f2:22:e4:ab:97:0c:46:
                    92:b4:c6:d0:d2:c8:ec:5c:ee:ca:98:b8:63:74:6a:
                    4b:f9:1d:c2:cc:46:b2:76:9d:d7:ec:7f:20:3b:18:
                    db:a6:16:30:91:3c:2c:63:7f:9f:e5:8e:f5:c0:6b:
                    3a:eb:50:b1:58:a0:db:9c:8e:fb:c2:f4:11:e3:b4:
                    db:5f:6a:72:0e:b9:18:32:38:d4:20:a7:f8:87:99:
                    c7:b8:67:cb:43:77:28:fb:cc:ca:57:5e:91:9e:55:
                    15:1b:a6:96:0b:37:7c:3a:56:58:d3:c8:03:8f:16:
                    13:c5:0c:c4:40:e2:32:6e:42:11:a6:b8:5c:e2:f2:
                    5f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AD:BC:21:6B:24:3F:4F:76:3F:31:DA:B3:F4:57:6F:EB:3A:B0:90
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130352e302f32342d3234203d3e20323733393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f4:c3:2a:b9:30:37:b8:78:ff:81:83:f9:96:cf:2c:9c:7e:
         a5:51:f8:a6:b8:53:85:d6:b3:65:ec:e5:e6:e2:d9:1a:15:fd:
         7d:9b:2a:ac:76:71:d8:8f:18:9a:2d:c4:aa:a0:5b:38:ff:c0:
         40:6d:e2:2e:40:27:d0:0e:3e:a0:ca:f8:0e:47:21:72:ef:7d:
         89:af:10:66:73:ce:87:d3:f4:e5:c5:8f:13:ff:05:6d:96:3c:
         40:e0:cc:b3:8b:a7:14:68:19:30:dc:e6:e2:4c:fc:b9:c2:71:
         de:b7:33:3b:d9:43:a7:3c:8a:13:6f:af:95:2d:73:c8:f5:11:
         cd:3f:8c:22:03:29:cf:98:59:a8:8b:f9:98:04:55:6a:6c:cd:
         3e:44:a7:2d:4d:c7:2d:0a:7b:30:32:4c:b1:2e:ac:75:b4:d9:
         2c:8f:e6:b2:5c:cb:72:a6:b9:7e:64:6d:5d:31:ac:a0:fe:17:
         06:22:81:59:20:58:d3:fb:73:47:d4:e1:d9:29:36:bd:2f:f5:
         b3:5a:20:17:06:e1:a0:ce:23:0c:55:34:a7:8b:aa:dc:dc:47:
         2b:5c:42:a4:32:42:71:3c:2a:b3:10:58:83:28:81:9c:fc:5d:
         3f:2a:83:12:e9:7f:3e:21:e2:d1:a8:58:cb:92:ba:6d:71:2e:
         3f:f3:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:00 2025 by rpki-client