Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137342e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3137342e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          0BsAlkSc3PasaQ4JfsU1gCoQmo9dIMWUbm90f6FN4+k=
Subject key identifier:   DE:E5:D2:15:BC:BB:6E:02:F2:44:31:C1:D6:72:CB:43:C9:36:A4:EB
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       2EDDAEBAA227D4CCBCFE7AC61F0F4B1BA80E21E4
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137342e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:41 +0000
ROA not before:           Tue 04 Feb 2025 17:55:41 +0000
ROA not after:            Tue 03 Feb 2026 18:00:41 +0000
asID:                     262171
IP address blocks:        190.93.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dd:ae:ba:a2:27:d4:cc:bc:fe:7a:c6:1f:0f:4b:1b:a8:0e:21:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:41 2025 GMT
            Not After : Feb  3 18:00:41 2026 GMT
        Subject: CN=DEE5D215BCBB6E02F24431C1D672CB43C936A4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:ea:a4:1c:00:48:85:b1:18:0f:53:0a:de:
                    d9:91:67:25:81:4b:f2:e4:cd:80:46:8f:c9:ab:84:
                    18:2c:e7:4b:29:e7:5a:b2:7e:79:aa:6d:dc:42:9a:
                    8b:d0:f8:d7:4a:be:3b:a0:18:d4:43:93:71:73:35:
                    01:b5:90:61:2a:ce:0a:57:5f:16:1c:6b:6a:a1:cd:
                    de:35:fb:5e:55:d3:03:d5:14:65:40:73:3f:4d:cd:
                    b8:b3:12:5c:2f:d1:41:48:89:c5:a7:81:aa:56:1f:
                    d2:32:d0:2d:74:03:61:af:9f:da:ff:9e:20:43:c3:
                    23:fc:83:41:f5:23:cf:2c:1f:82:09:5c:a2:c9:77:
                    5a:54:e9:01:ee:c9:74:a2:0b:ce:e2:f3:bd:2c:20:
                    b7:a2:ab:77:bc:98:b7:2f:b0:01:41:a9:42:8d:aa:
                    22:a3:89:41:73:b9:fa:ea:b9:1e:dc:3e:ff:4a:00:
                    ac:a1:be:3b:cc:1d:94:cc:2a:f3:87:7b:4b:e8:97:
                    db:32:03:de:48:1b:c9:a9:b9:68:9b:13:76:ad:12:
                    5e:d5:f2:87:73:fa:45:eb:95:56:ea:fa:2f:c1:2b:
                    dd:0c:7d:e3:00:68:90:76:26:d2:9f:5d:c3:74:ee:
                    91:15:69:b9:88:f8:ef:b2:9c:50:a2:5f:53:3c:8c:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E5:D2:15:BC:BB:6E:02:F2:44:31:C1:D6:72:CB:43:C9:36:A4:EB
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3137342e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:4e:c5:42:04:4f:94:75:5b:23:3c:9d:ee:aa:45:3d:d6:89:
         b4:14:d2:a8:3b:c9:70:05:20:91:e0:04:ac:90:24:a3:47:e4:
         eb:60:f4:9d:f9:b0:00:3c:1c:05:64:0e:8f:13:97:bf:37:42:
         7c:97:4c:76:73:5e:4b:2a:83:d2:04:2d:50:51:7e:83:4e:d8:
         c7:67:c3:e6:8e:5b:77:3d:33:9c:ec:d7:53:e0:37:34:e4:08:
         ad:1a:11:7e:b7:a1:8d:17:fb:70:2c:65:68:e4:98:cb:4b:a5:
         a4:de:66:4b:36:e8:d5:49:e4:fd:da:86:d5:18:a7:82:46:e8:
         bb:e5:ff:28:97:86:ff:95:6f:c7:ab:6e:22:9a:6b:8d:75:c1:
         ac:a9:61:88:8f:f2:66:5f:a2:db:6d:27:b5:d0:18:90:6d:3f:
         bd:b5:97:ff:e1:a2:cc:90:9a:6f:64:cd:bf:3e:d7:05:f5:b8:
         57:47:f6:6d:4c:26:d9:62:b1:13:26:0b:dd:a3:47:d6:c1:12:
         f6:30:b9:5d:10:aa:b7:50:d9:c8:5e:bc:69:b0:03:58:43:8e:
         ee:f6:0a:ec:bb:12:d4:0d:74:7b:94:ea:2c:ed:60:ec:d6:a0:
         cb:e1:64:b4:cb:2f:d5:02:eb:01:0d:e6:7b:51:69:d1:25:1f:
         73:80:fd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:03:08 2025 by rpki-client