Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa
File:                     3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa (raw, json)
Hash identifier:          eHnFuC4OErGFnkv3vlmnPGIRG+b2YZla1AwYErkQqzM=
Subject key identifier:   EB:D8:1C:83:42:5A:32:2C:54:E4:83:DF:D2:DA:6A:90:A3:E7:F8:3D
Certificate issuer:       /CN=D6578B90795CFC3357FE4AF953B5F071689073D0
Certificate serial:       5C04F829B65635C548DD627E0C5DEACFF1E7121C
Authority key identifier: D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa
Signing time:             Tue 04 Feb 2025 18:43:21 +0000
ROA not before:           Tue 04 Feb 2025 18:38:21 +0000
ROA not after:            Tue 03 Feb 2026 18:43:21 +0000
asID:                     263218
IP address blocks:        191.98.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:04:f8:29:b6:56:35:c5:48:dd:62:7e:0c:5d:ea:cf:f1:e7:12:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6578B90795CFC3357FE4AF953B5F071689073D0
        Validity
            Not Before: Feb  4 18:38:21 2025 GMT
            Not After : Feb  3 18:43:21 2026 GMT
        Subject: CN=EBD81C83425A322C54E483DFD2DA6A90A3E7F83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:f1:de:a4:13:99:ea:3a:2c:3b:34:e7:b8:
                    0d:89:c9:09:87:ab:e0:ed:21:07:8d:16:f3:ae:23:
                    fe:d8:e6:f9:27:8a:ed:1d:a7:c3:23:b1:3e:7c:43:
                    0e:14:b7:49:87:e0:b5:59:84:30:03:7e:fc:89:d8:
                    36:f5:e5:8c:eb:dc:81:d6:4b:a1:75:3f:94:3f:e2:
                    98:f9:bd:f2:05:6d:a5:9b:00:ce:50:c3:4c:ee:6b:
                    01:2d:8d:e8:9a:3d:88:7c:f8:83:c1:81:d8:1b:99:
                    5b:5f:dd:f1:cb:52:4d:fc:3f:af:72:f3:91:65:90:
                    de:93:c7:0c:f5:7e:4a:dc:3e:1c:1f:8c:c8:02:de:
                    10:65:80:d1:42:33:89:f4:b5:28:8a:82:61:4d:c9:
                    5f:b9:06:6b:3e:c6:dc:4b:5b:32:f1:51:94:4e:a7:
                    af:b2:1e:ed:62:f4:3b:0c:d8:da:37:4c:89:6b:52:
                    34:5d:34:39:4d:e4:b5:75:94:f4:71:a6:08:2f:b7:
                    b4:2c:4f:20:33:05:74:ad:25:54:57:6a:e4:2f:1e:
                    d0:33:ed:db:a7:cf:6e:d8:b3:a5:8a:0c:f3:9d:a0:
                    93:29:4b:13:01:58:24:c2:c9:49:78:8f:76:74:9b:
                    60:a7:2a:a4:d0:ce:d0:a3:ab:20:da:24:0b:18:a5:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D8:1C:83:42:5A:32:2C:54:E4:83:DF:D2:DA:6A:90:A3:E7:F8:3D
            X509v3 Authority Key Identifier:
                keyid:D6:57:8B:90:79:5C:FC:33:57:FE:4A:F9:53:B5:F0:71:68:90:73:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/D6578B90795CFC3357FE4AF953B5F071689073D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D6578B90795CFC3357FE4AF953B5F071689073D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D37B4E30A7975DEA3BA26AB388FAC5427AC353E5752B5A22679FF6CE2E84E75/0/3139312e39382e3139342e302f32342d3234203d3e20323633323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:14:ed:9c:e4:15:34:5d:75:5b:c8:11:e1:18:9f:c7:4e:c6:
         75:9e:47:2e:21:90:9f:05:2d:b9:9f:f0:a8:51:24:3d:1d:4c:
         19:4b:6b:31:3b:b9:0b:75:13:4e:87:8e:9e:60:3b:3d:15:79:
         0c:94:4d:1a:29:5c:2d:14:43:8d:c7:b0:15:73:91:cf:98:78:
         0d:00:13:c4:cc:90:12:88:15:05:f5:54:eb:fc:6a:4e:01:f9:
         b6:11:a8:f5:82:d6:57:8a:87:77:89:9d:a6:61:98:33:c0:d2:
         47:70:a7:10:7a:82:c5:8f:4a:f4:3c:10:72:3b:6a:82:08:0a:
         3b:53:1f:98:b8:f8:6e:4b:e8:7f:cd:73:bf:4d:6c:71:cc:03:
         84:e8:a5:51:fe:70:df:2b:ea:33:0a:72:53:29:7a:33:36:b9:
         e5:a9:e6:1e:f3:3f:2e:66:3d:a7:1a:f3:67:1b:fa:ba:c5:de:
         81:9d:62:30:40:ef:d8:6e:96:bd:8c:6c:f8:46:71:83:c7:b0:
         8c:4e:8f:85:22:a9:39:f9:7d:59:b5:67:81:9e:89:5b:2d:59:
         6e:2b:4f:55:f5:8a:fd:c1:fe:6c:2d:88:cb:38:90:98:95:3b:
         19:7f:67:ea:a7:71:09:51:ba:de:66:ad:07:bb:65:c1:94:1b:
         bb:3b:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:09:06 2025 by rpki-client