Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
File:                     3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa (raw, json)
Hash identifier:          qisJBnMoYEYPUX0w0J37TttSFZueiMfdbvfev1mfT34=
Subject key identifier:   9B:3C:B7:EE:04:17:E2:1B:11:32:B6:0A:7A:5F:9C:AB:D6:60:14:8C
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       4A0229AF9970EA70A26B3A938449B301B56BCE80
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa
Signing time:             Wed 04 Dec 2024 19:25:02 +0000
ROA not before:           Wed 04 Dec 2024 19:20:02 +0000
ROA not after:            Wed 03 Dec 2025 19:25:02 +0000
asID:                     262196
IP address blocks:        190.184.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:02:29:af:99:70:ea:70:a2:6b:3a:93:84:49:b3:01:b5:6b:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Dec  4 19:20:02 2024 GMT
            Not After : Dec  3 19:25:02 2025 GMT
        Subject: CN=9B3CB7EE0417E21B1132B60A7A5F9CABD660148C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c2:ee:0d:a0:b3:f8:61:7a:84:46:f5:fa:b9:
                    44:eb:0b:4d:bb:f8:93:1a:94:78:2f:07:f8:fe:c9:
                    6e:97:a5:36:63:6e:c7:a3:98:77:96:11:41:e5:8c:
                    f7:cc:5e:56:f5:fa:1b:f2:e6:c5:52:c1:83:89:a4:
                    cd:e2:37:bb:f9:37:b7:de:a5:60:bf:02:13:9c:dc:
                    90:41:5e:ff:68:ba:f6:0d:20:5d:69:65:1a:1c:df:
                    24:65:b6:e2:0f:de:9e:0f:ee:64:4b:cc:05:d7:18:
                    2a:29:5c:1c:3f:43:a8:db:e0:32:66:65:a9:82:d2:
                    6b:09:59:d3:70:16:a7:99:6f:3c:2f:6e:4e:97:eb:
                    5e:9d:81:3d:1f:2f:f6:89:c7:8a:bd:58:d4:d6:63:
                    2b:f7:72:32:df:d9:8d:3c:21:63:7a:9b:dc:ee:d3:
                    eb:69:69:8e:22:11:fb:92:3f:c3:02:cc:09:75:c0:
                    8d:4a:29:90:aa:1d:9b:f3:b9:ba:d5:a5:32:91:58:
                    5c:e2:f2:89:9f:e9:47:1f:60:ca:3e:f4:f1:c2:80:
                    75:b9:20:03:4c:ae:5e:51:ab:6d:e3:c8:f0:4e:8a:
                    ed:72:8a:a2:fd:1a:71:8f:a8:7a:46:e4:8e:15:7b:
                    b0:42:bd:40:a0:f1:b4:34:9a:2c:02:6b:4d:ba:b0:
                    21:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:B7:EE:04:17:E2:1B:11:32:B6:0A:7A:5F:9C:AB:D6:60:14:8C
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/3139302e3138342e3234302e302f32302d3234203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         75:9e:cd:26:25:b1:91:fd:49:8f:02:5f:af:6f:9f:c6:0a:a9:
         66:ef:3f:ea:e9:3a:95:af:c1:8d:83:31:9b:5e:03:70:48:8b:
         cb:5f:ce:a9:1b:4a:8c:56:b0:0c:05:a5:18:a0:61:15:8b:54:
         11:41:2a:d9:68:3d:02:5a:58:6f:a9:3a:bf:cc:4f:2a:f3:de:
         e2:4e:d8:45:e0:2b:d1:a9:e5:6a:df:13:2e:df:9d:cf:ef:b2:
         d6:24:38:50:22:05:d0:ca:b8:bc:03:67:b5:94:92:e7:6e:78:
         6e:87:10:45:f6:a0:bb:a0:9d:6c:e0:82:20:bc:37:f9:00:53:
         36:1a:23:44:5f:48:93:a6:f7:b1:99:f7:1f:6c:60:bb:63:39:
         00:b5:4e:0d:7a:d3:aa:36:94:fc:29:7f:10:96:51:2a:db:71:
         09:fe:3f:13:a7:44:e3:b4:63:d8:01:5a:fe:ff:63:a2:7e:df:
         10:92:5d:41:9a:5c:d6:48:f0:3c:63:fb:65:89:2a:bb:a7:75:
         19:2c:6f:53:27:18:12:b7:51:df:28:5d:d6:21:4d:84:f1:cc:
         f7:92:df:a5:5c:72:76:59:80:27:2e:78:3d:91:9f:52:13:3e:
         d0:d6:bd:8b:96:3a:07:9a:69:c0:8f:dd:5f:be:24:35:dc:b4:
         83:e6:56:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:06 2025 by rpki-client