Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e35362e302f32312d3234203d3e203232373234.roa
File:                     3139302e3131302e35362e302f32312d3234203d3e203232373234.roa (raw, json)
Hash identifier:          9guQaAXguFOc7Hlsw1kKr62MjkDhUfJbfZTVFSnuGKQ=
Subject key identifier:   89:17:1D:61:1D:D8:89:EA:5C:7D:C9:EC:22:8A:AA:B3:C1:BE:7C:1E
Certificate issuer:       /CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
Certificate serial:       7308649DD7DDC014D032081B3FA11BF273017DD7
Authority key identifier: EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e35362e302f32312d3234203d3e203232373234.roa
Signing time:             Tue 04 Feb 2025 20:07:32 +0000
ROA not before:           Tue 04 Feb 2025 20:02:32 +0000
ROA not after:            Tue 03 Feb 2026 20:07:32 +0000
asID:                     22724
IP address blocks:        190.110.56.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:08:64:9d:d7:dd:c0:14:d0:32:08:1b:3f:a1:1b:f2:73:01:7d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EF3C5D6146651ECDB985BFA9DB824744ED449942
        Validity
            Not Before: Feb  4 20:02:32 2025 GMT
            Not After : Feb  3 20:07:32 2026 GMT
        Subject: CN=89171D611DD889EA5C7DC9EC228AAAB3C1BE7C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:29:8f:a2:e3:9c:02:d8:06:1c:7d:5a:96:00:
                    a2:28:f1:a3:47:57:28:b5:f9:4f:10:3c:4c:89:1b:
                    22:22:97:9e:2d:45:b8:77:74:92:65:49:a0:09:06:
                    53:a8:74:7c:50:98:26:1f:95:94:6f:3c:49:b7:ea:
                    a7:56:73:e8:97:20:35:e6:f8:fd:de:95:a3:6a:57:
                    7d:6c:b3:65:9a:28:1c:d5:0c:d6:74:ab:20:26:21:
                    71:f4:70:ce:73:a5:d4:8d:a7:e9:cc:e8:4a:9f:51:
                    a8:9e:96:d4:f5:01:44:c3:4f:34:a1:08:74:6c:f4:
                    92:6a:59:cf:5a:be:9d:17:89:56:ab:f9:b3:9c:00:
                    df:99:b9:93:43:9d:6a:a4:ff:65:ec:cb:d1:5e:4a:
                    ed:79:5d:21:d3:f0:3d:43:9c:81:e7:07:44:57:3a:
                    98:d5:83:81:67:c6:86:7e:28:6f:3d:d5:da:2c:dd:
                    e2:58:14:9f:6f:3a:31:fc:0f:8b:d5:ef:f5:db:82:
                    40:47:16:e1:dc:80:cd:dd:d7:13:f8:62:79:f3:ed:
                    f9:b8:c3:e5:53:78:33:fb:3c:24:7f:99:ae:d4:4d:
                    91:e0:c3:ae:37:6f:04:d7:fe:97:70:a6:ab:e5:4f:
                    d4:fe:e4:93:be:7c:90:b7:06:87:53:4e:2b:a1:e7:
                    d3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:17:1D:61:1D:D8:89:EA:5C:7D:C9:EC:22:8A:AA:B3:C1:BE:7C:1E
            X509v3 Authority Key Identifier:
                keyid:EF:3C:5D:61:46:65:1E:CD:B9:85:BF:A9:DB:82:47:44:ED:44:99:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EF3C5D6146651ECDB985BFA9DB824744ED449942.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ACA6140ED77804A04CF3F9233BEA5E3494270171B2F69ACCFD17A17B89EEE26/0/3139302e3131302e35362e302f32312d3234203d3e203232373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:24:08:b3:30:18:7f:17:6b:7c:5e:44:62:d3:00:61:55:d4:
         6c:4b:9e:eb:77:37:3a:57:62:77:32:1a:0b:99:96:18:15:8e:
         7a:64:49:af:cf:fd:f8:43:d6:fa:ac:03:b7:5e:e0:df:66:ec:
         7d:af:45:95:57:78:c7:a6:fc:69:75:02:bb:14:59:dc:f8:e3:
         4d:ba:3c:ac:7d:17:11:54:ca:e7:b9:4e:dc:46:10:d7:e3:68:
         d5:92:99:c1:38:b6:b7:3a:aa:26:e1:fb:5c:a7:73:bf:c3:84:
         60:fc:03:b1:a2:b8:a3:a7:63:e5:95:71:8c:e1:6b:b4:04:70:
         0b:99:03:b5:82:39:4f:c9:3c:51:74:51:44:63:62:c4:d1:7d:
         dd:b3:0f:0f:4e:1b:59:2d:23:ed:53:86:70:1d:49:a0:71:c5:
         88:2c:82:36:40:37:c9:86:7c:5b:d0:fb:89:13:7d:b5:3a:c4:
         ea:de:b0:37:15:0c:96:38:32:00:67:4d:f3:35:4d:77:6e:29:
         f2:9a:01:32:7c:c8:da:a7:6f:e1:a9:68:d2:f1:01:74:56:6d:
         ae:f4:1c:60:22:17:e4:04:1b:d2:7a:48:e7:a3:38:2b:2e:18:
         f0:d4:4c:25:1e:a4:e8:c5:d1:de:04:e8:ba:46:31:2e:30:b3:
         ac:2d:07:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:46:08 2025 by rpki-client