Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137312e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137312e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          Z0mPVYEKsOXQMgO6sGGtn5itTEMCmrhHIcdu1IHGgWY=
Subject key identifier:   6A:E4:9F:1E:2B:3E:90:8D:C5:C2:67:9E:9F:7E:67:A0:92:A4:F5:F9
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       39D3606F321969DB229EB2A6EAD33B156CF08A88
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137312e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:44 +0000
ROA not before:           Tue 04 Feb 2025 17:55:44 +0000
ROA not after:            Tue 03 Feb 2026 18:00:44 +0000
asID:                     262171
IP address blocks:        190.93.171.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d3:60:6f:32:19:69:db:22:9e:b2:a6:ea:d3:3b:15:6c:f0:8a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:44 2025 GMT
            Not After : Feb  3 18:00:44 2026 GMT
        Subject: CN=6AE49F1E2B3E908DC5C2679E9F7E67A092A4F5F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c4:22:47:cd:05:b0:86:2f:ae:69:3a:7f:96:
                    db:f5:1d:2c:ea:f3:dc:aa:4d:89:fd:be:73:81:67:
                    c7:7c:de:5d:50:2b:8e:c8:3b:d9:7d:d1:17:7b:92:
                    61:31:65:2f:4b:52:01:3c:c8:75:4f:59:1a:3e:a5:
                    a4:37:e9:be:d3:23:bc:b1:7c:9e:fb:5a:a5:c2:39:
                    6a:24:69:c9:f5:e5:b6:2e:9f:0f:e3:0e:61:e5:d8:
                    ca:ae:90:5f:e0:26:26:65:7b:6c:9e:9c:aa:47:34:
                    a2:a3:d7:15:0e:61:6d:50:5f:fc:8d:f0:00:a8:10:
                    fc:fd:d2:1d:84:95:13:57:26:10:4d:64:51:83:b1:
                    63:9f:40:f5:4b:17:93:86:60:79:91:82:65:85:54:
                    b7:fb:99:42:86:a7:6d:be:07:7d:15:7e:0a:35:e0:
                    64:78:10:34:a1:fc:f4:39:32:6c:38:ee:57:7a:57:
                    1b:a5:d9:f3:7c:87:15:61:a8:4b:b5:76:9d:b6:76:
                    0c:36:76:89:98:7b:95:cf:86:01:60:a2:16:92:dd:
                    f0:92:42:ba:d6:b6:ab:ca:f7:f9:75:6d:a8:a6:5f:
                    8a:6a:ac:e4:0d:4f:6e:4a:e1:25:37:96:33:91:41:
                    de:09:49:44:b6:38:e0:87:52:7f:28:3f:66:5e:38:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E4:9F:1E:2B:3E:90:8D:C5:C2:67:9E:9F:7E:67:A0:92:A4:F5:F9
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137312e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:28:0e:d5:46:f2:b7:60:76:ce:2a:22:8d:9f:3f:0f:e5:
         ed:3e:a1:8e:62:9c:2a:8b:26:e5:36:ff:6d:25:44:8e:45:51:
         7d:9f:3b:b2:c5:4c:fb:12:ee:a2:13:06:a7:ea:7e:ab:b8:4a:
         92:cb:e1:bf:29:6f:de:44:96:1c:21:59:57:c7:4f:c8:40:f5:
         ac:b5:10:6f:b7:04:02:4f:68:96:aa:ba:aa:b0:10:dd:c4:a0:
         1a:cc:2c:6b:89:44:84:98:2a:6e:74:ea:12:cc:0f:6e:1a:77:
         ae:05:5c:75:c3:a0:2a:3d:8e:c1:c0:4a:28:4b:8b:70:48:9c:
         06:0f:19:16:16:3e:21:50:81:be:5a:71:51:a1:81:fc:7a:fa:
         25:77:cd:2b:3b:4c:ed:ae:38:c3:cf:2e:07:be:8b:4d:ef:34:
         63:71:1e:f2:2b:47:c0:03:7c:9c:35:6b:a4:15:b4:e8:42:1a:
         c3:c3:52:66:6f:d7:49:f8:4a:27:9b:11:ba:74:5b:30:42:f3:
         27:10:68:9f:f5:4f:60:d5:01:9e:12:16:d7:b1:34:a3:52:84:
         79:b0:f7:46:43:88:50:52:bd:17:c1:c2:56:a3:cb:0f:e0:ce:
         70:72:ea:21:0d:8d:2e:a6:59:18:38:cc:8d:f3:93:fe:53:a6:
         1c:ff:ee:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:02:40 2025 by rpki-client