Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C99684645E9E1E4C1A06E82A1A9370906E9E5DDAD31449AA9DA52B96903F297/0/3139302e39332e3137362e302f32322d3234203d3e20323632313833.roa
File:                     3139302e39332e3137362e302f32322d3234203d3e20323632313833.roa (raw, json)
Hash identifier:          681dSj04SlWr9k8BaFnLQ24Z9FqTd14CIG9sXJScWJs=
Subject key identifier:   E9:1E:59:66:2A:A9:01:42:B3:41:06:C1:FD:29:59:50:DE:44:35:1E
Certificate issuer:       /CN=942FCDFEDFE8866C8AAF43B67EA2B8970A3F4ECD
Certificate serial:       2B355C622A5EC5FC5D3205FD524982E45A503F3E
Authority key identifier: 94:2F:CD:FE:DF:E8:86:6C:8A:AF:43:B6:7E:A2:B8:97:0A:3F:4E:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942FCDFEDFE8866C8AAF43B67EA2B8970A3F4ECD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C99684645E9E1E4C1A06E82A1A9370906E9E5DDAD31449AA9DA52B96903F297/0/3139302e39332e3137362e302f32322d3234203d3e20323632313833.roa
Signing time:             Tue 04 Feb 2025 18:56:11 +0000
ROA not before:           Tue 04 Feb 2025 18:51:11 +0000
ROA not after:            Tue 03 Feb 2026 18:56:11 +0000
asID:                     262183
IP address blocks:        190.93.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:35:5c:62:2a:5e:c5:fc:5d:32:05:fd:52:49:82:e4:5a:50:3f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942FCDFEDFE8866C8AAF43B67EA2B8970A3F4ECD
        Validity
            Not Before: Feb  4 18:51:11 2025 GMT
            Not After : Feb  3 18:56:11 2026 GMT
        Subject: CN=E91E59662AA90142B34106C1FD295950DE44351E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:27:5b:41:e4:3e:26:18:7e:82:9f:49:9f:a9:
                    53:1a:a7:cb:7f:15:4e:ec:53:1e:3f:ba:f3:95:34:
                    fd:44:64:8c:e9:91:63:81:62:65:00:be:32:61:5c:
                    c0:31:f3:72:84:c0:f5:16:b6:cf:29:2c:48:27:e2:
                    d5:6c:d3:f0:57:91:85:08:68:41:1e:b3:01:84:a8:
                    46:df:81:79:bd:4c:90:b3:df:88:86:6b:cc:99:f7:
                    49:29:8e:12:31:17:17:26:f3:d0:33:33:b8:ff:28:
                    ef:e6:5d:f2:7c:88:0b:5c:f2:ed:4a:7f:2d:79:5c:
                    53:45:33:d3:9e:33:34:b3:eb:89:50:38:7a:73:c8:
                    7b:f7:07:98:c1:6d:6f:23:44:ce:70:55:ce:36:85:
                    5e:1d:24:ef:a5:99:80:d6:5c:59:c2:c4:48:3f:8e:
                    08:ad:5f:d2:1e:fe:17:51:e9:dd:64:8b:2a:e6:09:
                    c7:13:1d:ea:02:b9:6e:ac:1e:69:be:55:3e:10:9a:
                    16:5c:37:4b:b2:44:18:5a:03:d1:d0:1a:d6:4a:38:
                    89:6d:eb:98:0e:f0:1b:db:15:a8:87:cf:76:18:42:
                    9c:6b:2b:63:83:e7:75:a3:94:b8:8b:eb:ba:51:6a:
                    a6:82:82:d6:e2:ce:5f:c7:98:ca:df:44:8c:66:fb:
                    63:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:1E:59:66:2A:A9:01:42:B3:41:06:C1:FD:29:59:50:DE:44:35:1E
            X509v3 Authority Key Identifier:
                keyid:94:2F:CD:FE:DF:E8:86:6C:8A:AF:43:B6:7E:A2:B8:97:0A:3F:4E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C99684645E9E1E4C1A06E82A1A9370906E9E5DDAD31449AA9DA52B96903F297/0/942FCDFEDFE8866C8AAF43B67EA2B8970A3F4ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/942FCDFEDFE8866C8AAF43B67EA2B8970A3F4ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C99684645E9E1E4C1A06E82A1A9370906E9E5DDAD31449AA9DA52B96903F297/0/3139302e39332e3137362e302f32322d3234203d3e20323632313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:15:63:cd:30:9d:21:d9:16:2d:fa:55:81:34:cc:07:b4:fe:
         38:e4:8e:11:3f:29:c9:40:62:64:40:1b:84:53:9c:9f:12:a4:
         29:db:c1:cf:d3:70:01:69:75:bc:81:61:06:d6:4c:2f:2f:24:
         46:a7:7d:88:81:08:d2:2f:15:f9:25:23:c0:ab:72:0d:b5:83:
         9f:02:09:1e:9b:e3:36:ed:02:1c:1e:32:96:e0:cd:47:dc:d8:
         27:cd:df:7a:28:61:26:ae:ce:8b:13:01:1d:48:e9:5b:38:5b:
         1d:01:c5:61:85:da:1c:01:2c:3e:a2:c6:b7:22:01:c9:57:65:
         05:1f:56:72:5b:55:4a:db:03:67:f6:5a:a9:08:3b:76:fa:56:
         6b:a3:67:80:96:68:1e:b2:a1:8e:87:11:1b:8f:a0:35:a3:57:
         9e:a2:3c:3e:99:41:7e:eb:a3:44:e4:62:0c:9f:71:0f:84:bd:
         ab:17:94:89:38:ea:1c:b5:5e:bd:a8:54:88:05:39:71:5e:d9:
         4b:2c:ed:b3:04:b9:fb:f8:d4:30:2b:f8:69:b6:72:9b:7a:71:
         7c:7f:1c:8d:de:e6:88:e5:b2:17:c1:fa:4a:69:a7:a1:1b:48:
         78:10:4c:a4:a7:23:8b:1c:79:29:11:e9:d0:69:ad:ac:bf:f3:
         bf:2c:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:05 2025 by rpki-client