Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136312e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136312e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          fkdI4f/HfHhv0MwYyyNoIz93YYy/nrsPto9oRb/n0xs=
Subject key identifier:   38:4F:82:7F:97:86:9B:6C:0A:F2:25:57:7F:FB:21:FC:C2:BE:BA:FB
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       656426A8D0FD38607F2046D0BAA0E37E884F3E63
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136312e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:41 +0000
ROA not before:           Tue 04 Feb 2025 17:55:41 +0000
ROA not after:            Tue 03 Feb 2026 18:00:41 +0000
asID:                     262171
IP address blocks:        190.93.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:64:26:a8:d0:fd:38:60:7f:20:46:d0:ba:a0:e3:7e:88:4f:3e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:41 2025 GMT
            Not After : Feb  3 18:00:41 2026 GMT
        Subject: CN=384F827F97869B6C0AF225577FFB21FCC2BEBAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:3f:e3:5e:ab:c5:14:c1:e7:81:01:b8:28:
                    83:1a:c5:ef:a9:48:13:2a:dd:d5:6a:49:25:53:9e:
                    02:a9:ea:d3:a5:5b:3e:1c:ba:44:49:a4:77:5e:e3:
                    e2:54:7d:ea:e2:d3:25:1b:c4:a9:87:76:e4:de:18:
                    8e:bf:d2:bc:39:78:c8:c2:f6:dd:67:13:9e:59:95:
                    c8:75:bc:2d:39:de:2e:24:3b:93:65:51:ec:ba:45:
                    25:22:b7:5f:22:12:db:b1:26:8e:f8:cd:8b:b6:52:
                    91:78:9c:89:89:d6:7b:75:ec:30:54:0d:39:23:52:
                    89:dd:0b:1b:7d:38:ad:70:de:0e:a0:ea:6f:64:fb:
                    b3:10:d7:9f:70:fc:a1:40:eb:b4:1c:30:42:87:ae:
                    b1:9d:c1:23:f8:b8:05:31:fe:95:16:79:da:6b:e6:
                    91:d6:8a:9e:6a:49:82:fe:42:14:47:11:75:09:48:
                    a3:d1:e1:77:5e:58:a3:12:95:28:ea:af:6c:6e:6f:
                    90:be:3a:7b:00:ce:14:b8:a0:e7:0e:d8:91:38:d4:
                    8c:99:12:3b:28:9e:0b:81:6e:c2:e9:b5:1a:99:1d:
                    63:bb:e1:ea:95:13:09:6c:c7:68:c5:b6:6b:40:80:
                    43:cb:ff:ff:7d:df:8c:91:71:e4:59:5a:8f:ae:73:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4F:82:7F:97:86:9B:6C:0A:F2:25:57:7F:FB:21:FC:C2:BE:BA:FB
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136312e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:51:09:76:4f:94:47:19:a5:c4:7e:1f:13:e4:82:5d:93:6f:
         ea:87:a4:22:6b:4d:47:fc:9a:6f:9a:d5:b6:6b:24:70:42:3e:
         9a:da:12:7e:6d:31:0d:f0:02:5a:b4:69:bc:db:94:8a:f0:6c:
         ee:c7:91:ac:09:96:53:e1:98:8f:e3:bb:fc:29:f8:37:bc:1b:
         1d:43:9a:2c:cd:f5:c5:5e:b5:1b:6b:98:2d:fc:b9:8e:f5:be:
         eb:e7:16:ff:b5:20:a0:63:94:93:4a:3c:34:7b:ff:68:cc:4a:
         36:c8:7f:66:2c:42:15:4a:2e:c1:73:cc:6a:4d:ce:91:b9:a5:
         96:fa:63:95:d7:1c:fe:2e:27:bd:0a:21:04:77:14:47:9e:e6:
         7f:d4:52:0c:cd:d0:0f:70:e5:ff:d7:10:7f:cb:72:73:00:a2:
         0c:0f:97:e4:2a:83:a7:da:43:75:1d:79:4c:6c:0a:cb:d0:5b:
         d4:f5:0b:ca:7a:55:74:59:3d:8a:94:81:7d:5a:7a:4e:ee:0b:
         88:48:00:af:7c:b1:df:b6:9d:39:bf:d9:05:bb:58:e2:48:be:
         23:c2:10:ee:e9:3b:c6:70:82:9e:d2:09:5b:df:8d:7d:dd:c4:
         a0:50:7f:a0:9e:ba:08:b8:cd:10:6a:dc:92:d1:23:f5:55:9e:
         f7:0d:89:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:49 2025 by rpki-client