Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36392e302f32342d3234203d3e20313939343837.roa
File:                     3139302e39332e36392e302f32342d3234203d3e20313939343837.roa (raw, json)
Hash identifier:          EiadvkkifvdV/2jKUU9RZpEC1Vtcdzh195NX7Xv3uqo=
Subject key identifier:   09:54:79:AC:C0:64:A1:27:0D:80:54:BF:EC:49:05:99:AB:FC:61:12
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       13F4789679DD33EE55F0E43C38F87AD72BBCB83A
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36392e302f32342d3234203d3e20313939343837.roa
Signing time:             Tue 04 Feb 2025 20:08:37 +0000
ROA not before:           Tue 04 Feb 2025 20:03:37 +0000
ROA not after:            Tue 03 Feb 2026 20:08:37 +0000
asID:                     199487
IP address blocks:        190.93.69.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:f4:78:96:79:dd:33:ee:55:f0:e4:3c:38:f8:7a:d7:2b:bc:b8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:37 2025 GMT
            Not After : Feb  3 20:08:37 2026 GMT
        Subject: CN=095479ACC064A1270D8054BFEC490599ABFC6112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:09:1e:17:63:e3:ab:78:ae:40:24:ae:9b:
                    52:54:cd:33:9a:80:e0:33:fe:cc:f5:64:4b:9d:ab:
                    40:e2:fb:ee:64:6c:59:ad:a7:9b:27:d6:e7:6c:be:
                    aa:7e:30:4b:3c:4b:d5:c4:b4:5f:68:c6:f8:2a:35:
                    ad:05:ab:ce:3e:57:63:31:42:ef:b9:93:ad:90:aa:
                    e6:23:14:96:27:f2:43:46:62:11:5e:9b:9c:f5:f0:
                    4b:2a:45:d4:f8:80:f5:33:13:1e:6a:62:aa:ae:c7:
                    70:3d:3c:16:8e:18:36:4c:90:4c:5b:ca:ce:58:ff:
                    b5:5d:50:f1:13:1e:fb:09:42:7f:f6:6c:15:5f:94:
                    43:19:6b:d8:25:ef:4f:2a:e0:7d:8a:dd:eb:55:79:
                    f2:b0:ec:bc:97:10:91:a0:da:29:4b:d0:7c:75:96:
                    09:5e:46:a7:f1:77:31:92:8e:0f:ed:f3:ad:ce:48:
                    f1:2d:32:00:c9:30:cb:43:79:a7:40:5f:16:bd:bd:
                    20:40:aa:3e:5b:0e:9d:94:d9:54:b1:0a:af:d6:d7:
                    80:2a:b2:7f:44:c0:6b:39:b1:6a:98:b5:e6:df:f3:
                    d7:22:f8:29:87:e2:65:8c:39:db:6d:5b:b6:51:4f:
                    a7:f3:e5:e4:e6:c0:ff:81:fc:4c:4f:0c:45:98:53:
                    11:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:54:79:AC:C0:64:A1:27:0D:80:54:BF:EC:49:05:99:AB:FC:61:12
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e36392e302f32342d3234203d3e20313939343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:b7:e7:cf:aa:11:61:ff:34:e5:3e:63:2a:80:f5:24:a3:b6:
         a2:de:39:5e:f4:22:89:cf:cc:35:29:bf:a5:08:23:68:94:7d:
         97:82:54:1b:96:17:86:e1:f1:cf:96:3b:57:af:97:58:7b:41:
         a6:e5:fc:8d:4d:65:b0:01:64:06:84:1b:1b:1b:f8:11:b5:98:
         56:52:f4:34:b7:d9:b6:56:7d:37:5f:61:c1:28:bc:77:b4:9c:
         ea:55:86:55:3c:95:77:48:31:6d:be:f2:7a:08:af:3a:df:0a:
         d1:c4:4d:2a:5f:1d:ee:ce:bb:f1:c4:1a:3d:a5:28:1a:11:08:
         cf:ae:71:43:d0:f2:0c:71:12:53:fe:3d:09:28:aa:0e:d1:fc:
         67:00:05:b6:68:34:53:22:50:e3:b6:b8:43:88:46:78:95:ed:
         1d:c7:52:ee:6f:9f:37:cc:f0:27:3e:8a:f7:12:e4:c7:7b:a0:
         91:22:c6:2c:e2:9d:38:cd:fd:5d:dd:d1:9b:7f:63:df:63:bb:
         e9:0f:7d:23:a5:69:e8:83:03:7e:17:c6:08:65:48:88:bc:a0:
         bd:75:39:1f:0e:5e:d2:1e:52:e0:1d:a4:43:28:76:a8:ff:ba:
         12:ba:0f:3c:15:14:e0:aa:c4:bf:8c:d7:6e:f8:22:91:db:d9:
         e8:94:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:17 2025 by rpki-client