Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa
File:                     3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa (raw, json)
Hash identifier:          vw+brPkmToe+LhRQetMmV6G2qgwPW3BgQJmxG4iTMLI=
Subject key identifier:   EF:D2:6F:0A:42:8C:69:61:0B:2A:8E:56:CA:12:13:E9:C5:09:04:D5
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       1234C32E848443DE077432515714727EC44C4A72
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:42 +0000
ROA not before:           Tue 04 Feb 2025 17:55:42 +0000
ROA not after:            Tue 03 Feb 2026 18:00:42 +0000
asID:                     262171
IP address blocks:        190.93.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:34:c3:2e:84:84:43:de:07:74:32:51:57:14:72:7e:c4:4c:4a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:42 2025 GMT
            Not After : Feb  3 18:00:42 2026 GMT
        Subject: CN=EFD26F0A428C69610B2A8E56CA1213E9C50904D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:6a:f8:c7:b3:a3:cd:be:7d:32:6f:cb:dd:
                    5e:1b:98:f2:9a:d1:8e:b1:30:c0:9e:3e:1b:06:a4:
                    05:2f:b0:67:30:db:ce:ab:fe:dc:2c:0c:3b:1d:88:
                    0e:5a:48:af:7f:9c:3e:42:1e:2a:74:7d:7d:3a:6d:
                    51:c4:fd:8b:0e:aa:9d:e1:16:53:1e:83:04:dc:b8:
                    03:7b:49:9d:77:d0:e2:b4:5f:14:fb:74:fe:df:4e:
                    71:32:22:4c:99:18:9b:db:36:24:e9:ac:45:72:b6:
                    81:00:46:af:86:12:d3:b1:72:af:5c:96:3b:cd:41:
                    b9:32:03:f9:31:53:5f:0d:1e:aa:1c:5e:d0:80:3d:
                    2e:68:2d:77:92:7f:54:ae:fe:df:cf:28:c7:39:9c:
                    1d:e2:1a:72:33:12:f0:d8:fd:9a:9c:3b:2d:98:89:
                    3c:bb:4d:91:a9:44:1c:c5:dd:e2:8f:b3:1d:b4:f8:
                    85:f1:2a:75:e0:f9:15:3e:11:5d:52:20:d9:8e:72:
                    6e:fa:58:19:a4:81:10:4b:21:6d:a0:07:b4:b3:3d:
                    8a:e9:29:d7:99:cd:c9:46:7c:ea:98:13:90:88:89:
                    73:a7:1f:48:01:d7:08:35:40:6d:91:24:a9:55:05:
                    0b:00:01:8a:43:09:61:2f:be:a4:17:03:52:bd:a1:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D2:6F:0A:42:8C:69:61:0B:2A:8E:56:CA:12:13:E9:C5:09:04:D5
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:d3:c8:13:73:bb:18:79:1a:ca:09:e6:10:c6:83:c5:78:f7:
         5d:50:c2:b7:aa:c8:38:51:ef:cb:56:c1:3c:4e:27:2f:0c:12:
         81:e2:84:a0:d8:d3:7e:20:36:e2:2a:e6:44:35:ca:b7:02:30:
         ac:73:f7:81:c0:1a:c7:ba:9b:c3:71:ef:f4:eb:22:a2:89:59:
         65:be:ce:53:bf:19:fd:b0:33:7c:78:c0:b1:bd:16:21:99:94:
         a2:10:ba:48:96:39:3e:45:10:38:5a:e3:ff:7c:2c:a9:fa:6d:
         e5:97:c0:7d:a0:09:14:11:be:1a:40:16:ba:d7:54:97:53:40:
         25:b5:56:7c:df:32:2a:17:2f:fc:4d:56:1f:fc:7c:41:83:ff:
         95:bc:a5:ba:e9:ac:23:d3:9d:2f:e2:ff:d1:50:71:c5:20:51:
         db:04:13:e6:75:78:7f:d9:6d:36:a0:9e:38:7e:98:56:c2:61:
         93:0f:c4:fe:60:4e:24:42:1a:48:f8:51:5e:01:ee:b4:35:e2:
         eb:c9:d8:74:7a:08:8b:19:fa:e5:7e:86:b5:fa:7b:20:f8:72:
         cf:09:8d:dc:56:56:0b:2e:77:41:08:d0:41:09:cc:05:b4:ce:
         28:31:93:60:19:81:43:f0:5b:6f:4a:a6:2b:9a:a9:54:5c:83:
         09:98:24:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:22 2025 by rpki-client