Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323633373032.roa
File:                     3139302e39332e38352e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          C5cpg8ygAxtdFKej8eww0AQ2hLqhp67xvPu7PD7+mmM=
Subject key identifier:   8D:B8:E7:BB:A4:FF:C4:1D:2E:79:9E:FA:1C:AF:42:48:34:29:4E:B2
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       42F675A6C8D5E3EA81929444ED4A02FAB94D91F5
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323633373032.roa
Signing time:             Wed 05 Feb 2025 19:10:00 +0000
ROA not before:           Wed 05 Feb 2025 19:05:00 +0000
ROA not after:            Wed 04 Feb 2026 19:10:00 +0000
asID:                     263702
IP address blocks:        190.93.85.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:75:a6:c8:d5:e3:ea:81:92:94:44:ed:4a:02:fa:b9:4d:91:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb  5 19:05:00 2025 GMT
            Not After : Feb  4 19:10:00 2026 GMT
        Subject: CN=8DB8E7BBA4FFC41D2E799EFA1CAF424834294EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:bb:8d:1e:a2:2c:39:e4:79:68:80:05:69:
                    68:b7:36:1a:03:dc:dd:13:d5:27:0e:5b:68:5f:52:
                    fd:ac:c5:b6:fa:2d:fa:51:f2:c7:24:74:c3:15:0f:
                    e2:e5:e8:5e:ef:5a:53:09:c5:ca:14:94:2e:7f:56:
                    17:5e:13:b1:c7:52:0d:ae:50:a3:15:47:1c:6a:84:
                    30:aa:48:32:b4:85:fb:6a:5b:d3:e2:ba:85:c7:ea:
                    12:11:37:4e:ca:bc:ef:46:27:02:e4:b5:4b:62:f8:
                    82:96:82:d0:59:2a:ea:9b:43:0a:64:bd:ae:b0:94:
                    4a:1e:40:77:0d:f1:af:fe:f7:df:49:23:80:81:fd:
                    cd:09:1b:07:63:27:9d:25:0f:64:0e:1b:17:43:d4:
                    7b:be:b6:db:1f:89:29:bc:c2:dc:00:ab:77:42:07:
                    6b:be:cf:f1:36:b3:45:4e:c5:64:53:11:79:00:cb:
                    d8:67:41:1c:5b:cf:6f:d7:ae:0e:7c:f4:e1:14:6a:
                    c2:0d:f7:cc:88:2b:58:23:eb:18:c2:d3:3d:c2:42:
                    5d:2d:73:43:fd:cf:3d:12:d6:85:d6:43:11:6e:0b:
                    de:6a:90:13:1c:cd:e1:0e:59:26:08:8b:1e:fb:25:
                    e4:35:e2:54:6a:d4:57:74:6f:12:98:27:c7:f3:35:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B8:E7:BB:A4:FF:C4:1D:2E:79:9E:FA:1C:AF:42:48:34:29:4E:B2
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e38352e302f32342d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:44:66:96:22:43:4b:98:17:47:19:42:c0:fa:d0:50:8b:
         ed:90:51:c4:58:45:ee:f6:91:ea:55:86:a5:0c:c6:b9:26:af:
         77:6b:07:b0:b8:de:72:d3:cb:9b:d2:2c:de:5d:a7:1a:e6:5d:
         1b:ec:d7:c1:62:56:79:67:ac:84:31:26:e4:36:59:26:24:ef:
         2a:92:54:32:c6:c3:02:b5:75:e5:c0:d5:8f:66:d8:22:15:cc:
         73:3c:9f:1c:8c:b8:e0:51:74:d9:75:e3:c6:12:87:bd:02:1d:
         2c:e7:e7:b3:a5:45:37:87:22:2c:64:2e:e5:6a:bd:91:a4:3f:
         4c:be:c1:fc:ce:7d:c0:3c:d7:42:34:47:22:1d:00:81:91:bb:
         c7:40:79:2d:12:df:2d:53:43:67:34:21:81:df:12:3a:44:6c:
         f6:4d:83:18:c7:b2:52:19:00:89:b5:76:db:eb:11:ed:40:d7:
         33:71:30:ea:ec:87:fd:21:61:6c:00:77:5a:48:2c:0b:f2:49:
         23:d9:db:21:8e:54:94:5e:57:3c:bc:8c:03:67:a2:30:83:46:
         9c:3d:1c:85:c8:71:2a:09:0d:38:90:52:31:64:98:e4:9e:6b:
         e3:31:cb:55:06:74:dc:e9:ac:40:1d:39:2e:4a:db:e3:eb:13:
         e3:85:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:26:54 2025 by rpki-client