Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa
File:                     3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa (raw, json)
Hash identifier:          jkPrhSfraU3dVsuxgcc4n67HF4iX97OTDFvvnzNSpK4=
Subject key identifier:   A2:60:09:8C:00:9A:3F:BD:6C:F5:4A:08:92:A7:D5:33:39:BF:C1:F6
Certificate issuer:       /CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
Certificate serial:       479ECBDAE65D34E580016756C89E23ED48EB784A
Authority key identifier: 8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa
Signing time:             Tue 04 Feb 2025 18:32:13 +0000
ROA not before:           Tue 04 Feb 2025 18:27:13 +0000
ROA not after:            Tue 03 Feb 2026 18:32:13 +0000
asID:                     272030
IP address blocks:        189.90.230.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:9e:cb:da:e6:5d:34:e5:80:01:67:56:c8:9e:23:ed:48:eb:78:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EC1CB2683B25FA680C1E3BB66561D382F62547C
        Validity
            Not Before: Feb  4 18:27:13 2025 GMT
            Not After : Feb  3 18:32:13 2026 GMT
        Subject: CN=A260098C009A3FBD6CF54A0892A7D53339BFC1F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:80:08:2a:c1:4b:bd:89:8f:de:bb:66:b1:
                    94:53:be:3c:1f:b7:e6:f3:6d:da:2e:8e:f1:be:cf:
                    5e:c6:7d:7e:fb:63:53:50:69:ed:85:59:e6:dc:ed:
                    ec:d3:29:39:9f:bd:23:e9:c6:0a:2d:a1:a6:c3:a1:
                    e7:17:53:60:b5:8d:f6:a4:82:11:77:02:ec:86:3f:
                    ff:ab:d8:ba:e5:b6:df:25:e0:9d:33:47:6b:b1:47:
                    a2:a4:85:4e:0d:8a:70:6e:96:ae:65:cd:ab:19:1e:
                    45:14:31:89:85:08:19:01:9f:46:df:e9:44:ec:a9:
                    88:8d:09:e3:c3:8c:13:ce:e7:2c:1e:5a:0e:b4:9f:
                    d3:a2:3c:0b:cb:a1:a3:61:77:4d:4c:04:e1:1c:65:
                    c9:06:50:80:ff:8e:66:7d:43:e9:b7:86:97:60:4f:
                    ad:d6:a1:57:62:ec:fc:4a:44:6c:f4:79:48:b7:74:
                    10:51:08:0f:1d:2f:99:12:6d:5b:7c:49:66:9c:0e:
                    a7:92:02:cf:5c:d8:2c:91:09:c1:a5:1c:e8:7e:16:
                    66:39:88:2a:30:67:6f:16:2f:a1:9b:00:dc:88:84:
                    3b:cb:f0:9f:04:4a:9c:b6:f4:80:73:23:f0:71:ed:
                    89:58:f1:1f:f1:a8:14:e3:4f:6e:62:10:42:4f:3f:
                    c1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:60:09:8C:00:9A:3F:BD:6C:F5:4A:08:92:A7:D5:33:39:BF:C1:F6
            X509v3 Authority Key Identifier:
                keyid:8E:C1:CB:26:83:B2:5F:A6:80:C1:E3:BB:66:56:1D:38:2F:62:54:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EC1CB2683B25FA680C1E3BB66561D382F62547C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77470AA854B987BF722C95DC094096176F2D8E19A031EA199D3F2FDB3D5D72F5/0/3138392e39302e3233302e302f32342d3234203d3e20323732303330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.90.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f7:51:56:ba:25:c2:3d:94:8b:e0:17:6c:d3:04:a9:3e:e1:
         20:1e:4e:3f:25:f7:6c:2a:3b:e4:38:d5:4a:3d:7a:bb:d4:63:
         81:1b:11:91:75:a1:26:01:a7:5a:f9:ab:0e:69:ff:41:9d:1f:
         e1:14:7f:5d:8a:c0:a2:66:37:3d:e0:3e:1b:05:ce:bd:89:82:
         8c:23:9f:f0:93:1a:93:70:6b:6e:c0:c4:ae:c4:62:80:09:2b:
         28:29:2b:c1:26:87:6c:e1:f3:d6:17:17:ea:6f:13:fb:a5:39:
         be:37:b5:91:79:8a:61:d0:ca:32:78:5e:a7:79:5f:ae:c8:4d:
         61:47:8f:4e:71:74:d2:35:10:0c:88:54:5e:7b:f6:3b:d2:f8:
         27:38:55:b9:2f:76:44:3b:e7:b7:f9:55:bd:67:05:a4:5f:f9:
         9c:2c:dc:28:f5:a1:0b:84:6d:6c:44:d1:60:dd:44:ef:bf:ca:
         f2:5c:b2:ec:96:21:5e:cb:eb:b9:b7:d3:c5:e5:c5:a0:fe:c9:
         b8:5e:86:fe:43:c8:c4:9b:25:45:31:c0:ec:bd:43:ed:3d:ba:
         6d:02:8c:31:5d:22:87:e0:1c:d3:36:eb:d9:0f:8c:2d:25:54:
         cd:ea:8a:e2:dd:09:b9:37:60:c5:a6:64:bc:9c:6e:83:10:9e:
         21:d8:c4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:29 2025 by rpki-client