Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136352e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136352e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          m/IdKdKnoT0SWWJSh/jXEmwLZi9ppjd0gzSShik4NLw=
Subject key identifier:   C1:27:AE:DD:EC:6A:9A:95:7B:9D:FB:BA:A0:DB:8A:7E:28:78:49:BA
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       7F7F9055948BA9DF6AAC2B712C47880187488A64
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136352e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:43 +0000
ROA not before:           Tue 04 Feb 2025 17:55:43 +0000
ROA not after:            Tue 03 Feb 2026 18:00:43 +0000
asID:                     262171
IP address blocks:        190.93.165.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:7f:90:55:94:8b:a9:df:6a:ac:2b:71:2c:47:88:01:87:48:8a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:43 2025 GMT
            Not After : Feb  3 18:00:43 2026 GMT
        Subject: CN=C127AEDDEC6A9A957B9DFBBAA0DB8A7E287849BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4e:05:c0:e1:56:d0:7a:3a:e0:f3:4b:fd:e5:
                    de:35:9b:88:f0:f4:67:76:d5:99:98:64:5b:2a:ba:
                    53:35:65:86:d0:86:58:9f:c8:3a:46:b6:95:80:f6:
                    66:b3:c4:a5:87:12:26:ee:23:55:5e:fb:9e:5c:01:
                    b5:dd:78:18:e1:5f:c7:59:0e:ac:c5:61:08:7e:55:
                    14:64:40:b1:5b:03:8c:f9:75:c7:fa:51:33:ed:5f:
                    d6:cc:b3:0e:e5:57:ec:16:a0:33:8d:d4:bd:ba:3c:
                    7a:7b:35:9e:ae:eb:d7:48:c1:79:34:db:1c:43:5a:
                    c5:29:2b:79:b9:90:d1:23:66:a7:7a:08:20:bd:ad:
                    25:9b:72:c5:7b:3c:b7:02:09:80:28:8d:b7:46:7e:
                    1a:dd:12:3a:14:6a:17:41:f3:b0:13:fb:6e:06:92:
                    53:a9:cc:b4:1a:87:66:5f:51:ab:76:d4:7f:2f:b6:
                    10:01:f4:9e:57:06:b0:31:36:02:cc:ac:72:d3:34:
                    66:08:06:d4:2c:62:27:75:a4:43:52:89:67:bf:ec:
                    85:25:a7:55:84:29:1a:7b:63:41:72:3a:37:2c:84:
                    5d:0c:5b:f3:5d:a5:ad:b0:6a:39:84:34:55:e9:fa:
                    b5:4a:28:3a:6d:76:0a:60:9a:f7:1d:aa:2f:88:ec:
                    6d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:27:AE:DD:EC:6A:9A:95:7B:9D:FB:BA:A0:DB:8A:7E:28:78:49:BA
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136352e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:52:cc:a5:5a:29:31:71:67:a4:c8:47:30:f0:7d:d2:b7:3d:
         65:df:42:90:fc:e7:03:d3:8a:8f:1f:e4:13:73:a1:e7:2d:20:
         13:96:34:b4:7b:18:75:bc:7b:34:34:d3:73:6d:01:bf:0e:f6:
         c1:5c:11:e7:79:4e:f4:12:26:df:51:ec:f2:54:50:4c:85:82:
         08:44:a8:68:76:a9:3f:62:56:40:fd:25:92:78:89:6c:ac:48:
         ad:fb:03:3f:31:40:18:6e:2b:5b:a1:3e:54:6d:2c:b8:1f:1f:
         e3:20:dc:73:38:ba:a4:47:31:39:4d:b5:12:1f:cb:55:56:cc:
         3d:e7:cb:82:af:40:06:38:bc:2f:48:54:5a:3a:6c:a4:5a:ab:
         da:96:bf:51:66:9c:e1:eb:fe:9c:85:50:ca:80:10:95:3e:37:
         8e:71:3f:32:6b:40:24:c9:37:14:ad:d7:fb:10:38:86:1c:c2:
         79:fb:5f:45:81:5e:3e:3f:37:09:88:49:13:67:0a:de:3c:e4:
         dd:56:b6:98:97:b4:32:6c:bd:37:22:c2:0c:3c:6a:81:57:4a:
         b7:be:26:07:a1:38:2a:af:db:d9:0d:62:bc:4b:a8:b5:ee:8d:
         d0:f8:ca:06:a1:2f:79:98:5f:e8:61:b8:68:8d:92:79:26:2b:
         01:11:6c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:42 2025 by rpki-client