Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          4iG5K9+H6l1gWfxymTnCKGuCpsgcyJ6sLBCRu2QUOyk=
Subject key identifier:   42:EB:AF:11:91:6F:08:ED:DB:C1:B3:07:6F:18:F6:38:9A:B4:D4:50
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       4AE05CF0B3AAA54BF94EE7322FFD6B225DE95B61
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:42 +0000
ROA not before:           Tue 04 Feb 2025 17:55:42 +0000
ROA not after:            Tue 03 Feb 2026 18:00:42 +0000
asID:                     262171
IP address blocks:        190.93.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e0:5c:f0:b3:aa:a5:4b:f9:4e:e7:32:2f:fd:6b:22:5d:e9:5b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:42 2025 GMT
            Not After : Feb  3 18:00:42 2026 GMT
        Subject: CN=42EBAF11916F08EDDBC1B3076F18F6389AB4D450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6f:ca:2f:fb:5b:29:c0:90:cf:51:5a:5e:40:
                    da:30:29:dc:f0:4e:75:fd:a2:74:1d:51:5d:e7:e1:
                    0f:d6:76:9e:55:0b:99:51:25:37:ec:8e:8f:0f:81:
                    9e:e9:ce:28:1f:8f:86:19:cc:ee:4b:34:8e:b8:a1:
                    1f:a7:83:73:0a:c2:0c:60:ab:81:3b:b0:51:14:39:
                    06:b8:bb:ae:64:fb:75:d2:b7:92:86:cb:25:0d:81:
                    5b:be:ec:a8:6b:e2:bd:60:e7:ff:64:e7:c7:d7:c1:
                    24:9a:e2:0a:55:ed:f9:46:88:04:c6:8b:78:62:2d:
                    ed:e3:81:6b:89:82:c6:eb:57:66:20:81:b2:a6:c2:
                    ca:a3:63:40:a5:9e:4b:e0:8a:c3:b5:64:7e:5c:33:
                    64:f9:49:54:b1:23:6e:4b:2a:f8:17:67:e2:02:45:
                    4e:23:59:c8:d8:dc:5d:b1:d9:a6:12:02:b2:a2:1a:
                    ea:50:63:d7:47:c8:bd:78:0b:1f:39:37:7a:54:72:
                    cb:e3:84:0d:cc:03:31:19:0b:13:bd:2b:d9:ea:63:
                    63:fa:f2:b8:6e:90:30:f1:df:26:e4:a4:d0:40:3e:
                    02:8a:82:70:56:bf:70:28:d6:7a:d8:2d:0c:e4:5e:
                    59:0d:67:6b:23:6b:ef:6a:c6:d9:80:d5:96:e0:31:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:AF:11:91:6F:08:ED:DB:C1:B3:07:6F:18:F6:38:9A:B4:D4:50
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136322e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:5e:1c:1e:8b:54:c3:79:3d:3d:6c:25:61:62:6c:c1:e2:
         7b:9f:76:9d:c1:20:d6:17:87:93:fd:72:29:79:49:4e:43:4b:
         56:a7:a3:f1:33:9e:13:17:10:ab:f0:45:47:63:2b:d2:cc:73:
         5c:77:ab:dc:37:6c:eb:0d:4f:ac:20:18:bf:70:5e:34:67:60:
         f4:13:0e:13:32:ed:9d:97:96:c9:81:00:da:53:ff:49:81:4b:
         55:28:1f:b3:8f:bd:5d:10:59:ef:5c:e2:f3:d9:ed:0f:b0:6b:
         61:c0:88:56:f3:83:9b:5c:0a:4f:5d:ac:78:2d:63:8b:3e:a4:
         04:e6:eb:83:46:5a:6c:b4:d4:70:50:f5:e9:58:b4:80:84:f4:
         c8:94:e2:20:92:35:b3:40:c9:e1:81:a9:38:44:c5:60:38:8c:
         88:dd:0b:5a:fe:29:43:16:bd:66:f3:0f:74:a5:fd:0b:5a:52:
         77:ef:36:2a:2a:4f:d4:82:05:a2:51:44:19:8c:74:72:26:bd:
         a9:f6:c9:1f:05:5f:68:ec:0d:0a:47:0e:2b:f5:1c:be:3f:fc:
         7d:a7:ed:c1:e0:85:cd:b6:ab:92:96:70:50:bd:ee:4d:0f:4f:
         2a:08:b7:38:2a:ba:f7:dd:c6:17:63:b9:34:a8:ee:10:74:e5:
         b6:47:a7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:59:40 2025 by rpki-client