Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36342e302f32342d3234203d3e20323734373230.roa
File:                     3139302e39332e36342e302f32342d3234203d3e20323734373230.roa (raw, json)
Hash identifier:          BE3HpPMfRwjEscRKF7STocqYhKweZYRkXVx+3DWBOp4=
Subject key identifier:   8B:23:5B:18:C6:B5:1B:38:74:93:DF:BB:01:A1:03:E2:A5:38:B0:12
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       2B0121E4BFD06387B2EDCD8F078B1148CBDB22B8
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36342e302f32342d3234203d3e20323734373230.roa
Signing time:             Thu 12 Dec 2024 18:20:00 +0000
ROA not before:           Thu 12 Dec 2024 18:15:00 +0000
ROA not after:            Thu 11 Dec 2025 18:20:00 +0000
asID:                     274720
IP address blocks:        190.93.64.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:01:21:e4:bf:d0:63:87:b2:ed:cd:8f:07:8b:11:48:cb:db:22:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 12 18:15:00 2024 GMT
            Not After : Dec 11 18:20:00 2025 GMT
        Subject: CN=8B235B18C6B51B387493DFBB01A103E2A538B012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:59:b7:0f:5e:d6:7a:e6:94:90:f3:a3:0d:fc:
                    37:08:9b:c3:d9:5c:f2:11:47:b4:19:01:5a:8d:0f:
                    3c:ad:11:f3:55:e6:34:55:08:96:2c:b7:ed:03:65:
                    ea:37:62:d3:f4:f2:ef:ec:ea:fd:94:f0:86:2e:fe:
                    79:a9:22:11:a3:04:37:c6:97:de:a7:67:5f:97:4f:
                    fe:78:15:a4:57:6e:b4:ff:8d:9e:7f:1b:42:72:97:
                    a2:f7:35:2f:8d:8c:ee:64:de:0c:e3:07:14:33:f5:
                    52:29:61:41:51:66:eb:00:df:50:5c:49:c2:73:84:
                    fc:ac:9f:03:b6:2e:07:90:37:34:5d:ce:f9:65:da:
                    a6:30:16:54:eb:82:2c:9b:74:62:70:5b:3e:c3:0a:
                    38:8d:a3:87:9e:fb:f0:22:9b:f3:5c:8e:67:64:5b:
                    c8:cf:09:7e:99:bd:17:a9:c1:a3:fd:ee:80:ad:97:
                    21:e9:85:c3:15:58:2c:19:1e:b2:6a:da:ad:66:a9:
                    e5:f0:d1:2d:85:8a:38:35:90:a1:04:5f:3c:43:d7:
                    b5:d7:d3:4d:8d:50:c3:87:75:9d:13:4d:71:31:66:
                    f0:a7:b5:1f:ab:bd:68:1e:07:c2:b2:72:cb:35:f9:
                    f4:a5:9e:e0:1c:9f:aa:83:86:b1:2e:7a:d2:43:bd:
                    6a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:23:5B:18:C6:B5:1B:38:74:93:DF:BB:01:A1:03:E2:A5:38:B0:12
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36342e302f32342d3234203d3e20323734373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:cb:0f:26:13:68:7d:04:1e:6c:1a:c7:5d:df:3f:ea:98:
         df:07:66:ea:51:b3:f2:cc:6c:30:9b:74:3c:f2:e8:f3:7c:a9:
         a7:0f:4d:7e:ed:b3:4a:e7:05:0d:03:1a:36:0c:7f:b9:09:ca:
         dc:94:22:2f:eb:1f:fa:89:a7:bd:db:0b:c0:3e:a5:3e:a6:0e:
         69:a7:38:d7:47:da:5d:8d:41:27:2c:78:14:18:4b:4e:f5:88:
         54:21:e7:5a:68:ac:92:9f:66:f2:71:01:76:99:0b:df:3c:53:
         dc:88:0f:09:98:b1:9b:7b:e9:5f:c1:a9:d5:1e:36:01:57:2c:
         e3:3c:1f:01:66:9e:7d:35:32:56:36:66:4e:02:36:29:a5:21:
         cc:ce:67:b8:cb:96:89:6b:db:fc:8f:65:f5:46:b6:bd:18:70:
         f0:c5:74:4b:f5:f2:b7:3d:74:85:d9:3b:d0:96:73:df:46:5a:
         f7:01:ed:8a:6f:d3:d5:aa:5a:bb:29:05:c5:35:8a:f7:c4:03:
         ad:58:16:73:fd:c1:5f:5c:1f:1d:78:52:eb:ec:71:e8:95:25:
         16:6e:96:42:dd:3b:08:d8:ab:31:14:f1:46:ee:14:83:c8:b3:
         e7:be:43:a3:de:7a:9f:ed:64:a5:8d:2b:d3:bc:c4:12:79:bd:
         74:10:56:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:03 2025 by rpki-client