Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e3139322e302f31392d3234203d3e203232373234.roa
File:                     3139302e3131302e3139322e302f31392d3234203d3e203232373234.roa (raw, json)
Hash identifier:          GkSoMMwgKwxvT/ufNQP76NOHIsMfW2Sxa9ZPCCY98E0=
Subject key identifier:   68:86:30:41:23:EC:C8:4F:16:F4:39:49:2C:C5:20:47:1F:05:CC:4F
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       1A7C9FA3522F42A7A7EDF804BEE8674F959B6ABC
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e3139322e302f31392d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:35 +0000
ROA not before:           Tue 04 Feb 2025 20:02:35 +0000
ROA not after:            Tue 03 Feb 2026 20:07:35 +0000
asID:                     22724
IP address blocks:        190.110.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:9f:a3:52:2f:42:a7:a7:ed:f8:04:be:e8:67:4f:95:9b:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:35 2025 GMT
            Not After : Feb  3 20:07:35 2026 GMT
        Subject: CN=6886304123ECC84F16F439492CC520471F05CC4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:31:22:4b:30:27:73:f6:03:6f:2f:76:de:
                    76:fb:6c:70:73:f3:98:73:3f:f2:b1:c8:d0:27:d7:
                    00:f4:3f:a6:68:19:50:b1:bd:d8:1d:52:ba:16:2f:
                    97:ac:c7:2e:34:65:3b:7f:03:74:4d:5a:28:bb:bb:
                    b0:78:44:ce:93:23:f6:d3:88:ae:b9:e1:6a:27:ad:
                    ec:db:d5:be:fe:38:dd:70:4b:aa:62:59:8a:b5:f1:
                    57:84:62:f3:f0:09:89:cd:2c:18:09:0b:2a:dc:85:
                    15:98:91:fe:0a:d5:6b:6b:59:b5:85:3c:64:3e:77:
                    07:63:dd:2a:53:69:18:cb:89:e1:48:57:ef:69:c1:
                    c0:c3:65:32:5a:9f:71:9a:21:b2:d0:b1:13:f6:d8:
                    00:97:60:be:84:51:4f:31:e0:0a:c0:ba:a6:ff:21:
                    e0:44:8f:c1:2a:3b:4a:7b:24:ad:2c:c0:9f:e8:df:
                    70:65:60:8a:08:82:1c:f2:69:de:97:99:6b:90:4f:
                    d5:3c:2b:5d:10:77:27:84:96:e0:ac:86:7c:9b:38:
                    f3:6f:30:39:1b:67:5a:65:7f:c4:40:a4:d1:fe:ca:
                    48:c9:bb:07:6f:2c:43:ba:84:db:c1:24:7c:5d:33:
                    f1:39:10:5c:c8:2a:18:1d:9f:68:3e:ca:a8:36:b6:
                    da:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:30:41:23:EC:C8:4F:16:F4:39:49:2C:C5:20:47:1F:05:CC:4F
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e3139322e302f31392d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:f6:33:3d:46:2a:b8:83:27:b0:b2:4c:97:1c:bf:5b:8b:c0:
         f9:26:f5:10:ae:a9:54:d4:ad:de:94:e5:c6:12:7c:4b:ed:7f:
         32:cc:7a:30:f6:da:7d:8a:66:d8:78:da:bb:91:12:9b:ca:d9:
         07:f5:22:28:cd:9d:c5:06:15:9a:56:eb:6e:3c:7a:d4:4c:54:
         84:e4:a6:af:f3:bf:cc:bc:0e:3e:67:1d:78:16:48:4d:d3:e2:
         13:a8:40:5b:70:c7:39:49:f2:ef:64:ff:20:1e:b7:54:44:31:
         aa:ff:c9:1b:ba:a8:24:14:73:07:56:94:6a:39:49:f0:1d:25:
         cf:46:01:e5:fb:79:f5:1e:4c:2a:56:e7:f8:3e:ab:8e:52:3f:
         fb:c3:87:ee:a7:9c:5b:92:62:a8:ca:c8:3a:71:f4:df:36:7a:
         e1:ac:48:c4:40:83:6c:bd:1d:fd:c2:8e:c7:6e:2a:99:af:be:
         8c:1b:fd:3d:18:b9:36:ef:66:33:87:6f:37:2e:d1:46:a7:6a:
         ee:92:f1:59:d1:29:f1:df:c4:4f:84:cd:f9:7b:c2:67:9a:f5:
         10:a5:9c:38:15:6f:e2:23:79:23:67:17:bf:68:45:44:11:ad:
         3c:2d:8c:17:a7:4a:15:ad:9a:58:d8:fb:21:3f:d4:4f:bf:b1:
         d8:59:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:41:27 2025 by rpki-client