Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38302e302f32342d3234203d3e20313335303237.roa
File:                     3139302e39332e38302e302f32342d3234203d3e20313335303237.roa (raw, json)
Hash identifier:          3WzkH3m7NxGnACuyGS3I5RQrlVQj6L/t8XN5ejUCpWQ=
Subject key identifier:   79:B4:9E:E6:CA:49:45:DF:93:58:03:57:FF:14:E5:08:7A:33:CD:57
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       3FCC415BD9B55E39DAF17124E5A9783F31AEFD66
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38302e302f32342d3234203d3e20313335303237.roa
Signing time:             Tue 04 Feb 2025 20:08:40 +0000
ROA not before:           Tue 04 Feb 2025 20:03:40 +0000
ROA not after:            Tue 03 Feb 2026 20:08:40 +0000
asID:                     135027
IP address blocks:        190.93.80.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:41:5b:d9:b5:5e:39:da:f1:71:24:e5:a9:78:3f:31:ae:fd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  4 20:03:40 2025 GMT
            Not After : Feb  3 20:08:40 2026 GMT
        Subject: CN=79B49EE6CA4945DF93580357FF14E5087A33CD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:a1:0a:ad:c1:96:36:a3:f3:79:de:a9:b4:
                    9a:5b:9f:74:61:31:d5:07:b0:01:c9:5d:1a:58:4f:
                    e8:77:02:3e:94:97:5b:0f:cd:2b:92:9c:00:ce:a2:
                    54:18:53:2a:e6:1a:a3:26:03:f3:3a:ef:3f:6e:56:
                    e6:d4:40:53:5b:0f:50:1b:66:1d:a9:7a:7f:b0:01:
                    5c:be:c7:96:99:e9:87:b8:ef:d9:d9:ac:76:b2:b8:
                    51:4c:75:54:95:eb:98:48:01:7b:76:ad:b0:3f:28:
                    6d:0d:31:91:5c:1d:be:77:c1:01:4b:48:97:45:b3:
                    4e:1c:8c:66:18:ae:c1:1d:16:e0:f7:91:ec:e9:b4:
                    1d:99:ab:b8:d1:54:33:6c:ce:f0:c9:57:a7:9b:fa:
                    02:df:d4:d7:70:b9:b9:10:ae:75:c2:fc:16:6c:52:
                    6d:b2:ba:77:6a:88:38:fd:e0:85:7a:0c:a2:3c:c2:
                    1b:76:6e:d9:a6:ad:56:c1:8d:fe:d0:82:61:5c:ed:
                    24:df:62:16:0f:95:60:c7:00:68:e2:3a:d4:e3:c3:
                    de:77:d8:36:36:3d:22:7c:9d:c2:71:73:17:ef:04:
                    bf:8b:d8:d9:18:fc:be:66:e2:8e:5c:cc:66:82:3d:
                    fa:f4:bd:4d:9c:81:80:7e:f4:ba:89:1b:2f:9a:70:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B4:9E:E6:CA:49:45:DF:93:58:03:57:FF:14:E5:08:7A:33:CD:57
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38302e302f32342d3234203d3e20313335303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:48:fc:d0:73:bd:ab:b7:bf:5b:69:60:eb:02:0b:dc:56:bb:
         6b:69:5a:dc:7d:62:d2:68:91:0d:9c:3c:8f:00:55:dc:dc:cf:
         1a:8a:56:53:bd:d7:11:c7:74:36:2c:74:8a:cb:9a:d2:d6:a2:
         c6:f2:8e:3d:04:06:26:3a:7e:2b:f4:dc:d6:79:f7:fe:6c:80:
         55:a0:83:8e:b3:50:1c:0a:3b:4d:f4:84:65:9f:3b:a6:fb:46:
         98:65:53:60:64:30:7f:a6:a0:00:40:f6:d5:af:62:b1:7a:18:
         ba:e7:fa:48:ff:84:16:8b:65:4b:c4:06:d8:f6:5e:4b:38:de:
         98:90:f1:8b:32:3a:37:e4:7a:b2:d1:fb:1a:69:90:af:21:e1:
         46:f4:84:64:ee:47:27:c2:c8:bd:25:cf:46:a4:ba:a9:12:c8:
         27:05:b8:53:fa:72:4a:8e:df:d2:a4:3a:d6:1e:e2:e2:97:16:
         ea:d5:c3:72:9e:09:32:0d:e5:da:92:68:5e:47:ca:b0:4e:9f:
         6d:36:18:93:21:0d:0e:94:00:26:a0:cf:ff:bf:95:0c:0b:59:
         50:f4:4c:3c:72:34:ba:4e:71:d7:f0:cc:95:f4:b1:98:aa:03:
         0a:50:e3:2c:78:90:0a:f5:98:c3:cf:8f:17:39:c7:4c:5e:f3:
         14:c7:45:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:21 2025 by rpki-client