Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa
File:                     3139302e3231312e37342e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier:          5kzbL1D6girewWKUtFcdF0JiQtSSpA2FEsQ/oOLPmB8=
Subject key identifier:   89:76:AE:92:21:F2:3C:A2:6C:C6:59:76:5F:60:E2:7B:A8:91:19:EF
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       1585DF4CF6289E31D5A20883D393A8892C301A1C
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:25 +0000
ROA not before:           Tue 04 Feb 2025 18:11:25 +0000
ROA not after:            Tue 03 Feb 2026 18:16:25 +0000
asID:                     52328
IP address blocks:        190.211.74.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:85:df:4c:f6:28:9e:31:d5:a2:08:83:d3:93:a8:89:2c:30:1a:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:25 2025 GMT
            Not After : Feb  3 18:16:25 2026 GMT
        Subject: CN=8976AE9221F23CA26CC659765F60E27BA89119EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:13:14:92:92:a3:b4:6c:a4:d6:b7:a5:d1:
                    b2:37:cf:bf:3d:70:51:ba:61:a3:a1:09:b1:f2:16:
                    ac:00:4e:08:31:32:21:b9:d5:e9:94:bf:17:75:0e:
                    fa:56:34:ae:96:5a:2f:ea:47:e7:63:e6:51:ee:12:
                    03:c7:a4:f0:6d:1f:6b:2a:f7:a6:ab:18:96:01:14:
                    54:ce:26:97:fd:92:99:c6:60:d4:59:1a:5c:cd:c0:
                    d5:cc:43:b7:89:6b:32:90:30:3e:68:95:61:7c:98:
                    fb:e9:6d:05:02:d9:48:f4:ec:44:fa:fd:64:d8:84:
                    67:28:08:88:88:4d:cc:f9:3c:91:eb:92:3b:b4:7c:
                    44:ad:c1:b8:b3:ef:28:aa:f3:7c:20:ff:16:37:83:
                    3f:f1:0a:fa:ee:cc:6a:21:89:82:03:d3:0d:18:2b:
                    bd:81:7e:ee:5b:fc:8c:3a:15:21:99:cc:5c:02:fc:
                    2f:7d:a7:26:15:9c:bb:ad:cb:24:da:1e:d7:0b:f1:
                    44:07:77:4f:86:e6:a1:02:b8:96:1b:d1:00:8b:c7:
                    c6:eb:89:e4:ce:f4:a1:e1:fd:90:82:b9:92:d2:ca:
                    14:c6:55:da:fb:eb:d3:71:bb:89:57:66:22:92:52:
                    04:ac:b4:2c:01:19:7d:49:da:27:f4:bb:88:a5:53:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:AE:92:21:F2:3C:A2:6C:C6:59:76:5F:60:E2:7B:A8:91:19:EF
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37342e302f32332d3233203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:97:24:a4:95:0a:66:b6:c7:92:cf:6f:0d:3b:16:e2:f1:60:
         8b:18:3e:8a:bf:b5:67:47:1a:30:05:a8:42:b9:4f:fc:b0:65:
         23:d0:d9:16:94:90:d3:c9:3e:3f:7f:c7:b0:dd:70:93:a8:7f:
         e8:dc:99:2a:2c:1c:32:3f:c3:e5:5a:fb:81:75:b3:a3:2b:c3:
         4e:e0:a0:78:1c:5b:9e:5a:f9:36:5e:00:8c:00:7c:c5:34:83:
         65:37:89:12:6f:e4:8e:ee:f6:ee:a7:c1:11:5f:18:46:ec:58:
         dc:c8:12:24:e0:b4:5a:98:41:35:ec:2e:ca:69:bf:c3:92:c5:
         96:ca:9a:6b:5c:de:8b:cb:f8:e8:67:9c:ab:ed:63:89:19:68:
         47:26:34:7b:bf:d5:2b:f1:11:a1:b7:9a:04:f6:ed:d3:af:b8:
         4c:bb:bd:4e:77:04:4c:eb:c5:13:e4:c9:2e:f0:53:48:52:16:
         de:04:db:7e:0a:be:04:20:06:22:58:59:41:63:68:70:43:77:
         13:6a:30:e5:4a:80:4a:fd:ac:03:20:36:08:28:c0:36:92:56:
         8c:13:23:a9:2d:e4:fb:92:aa:bd:99:55:b2:44:64:9d:2e:b8:
         e4:fd:90:ae:2a:d9:33:2c:53:51:de:47:a8:1c:a4:47:be:db:
         56:7d:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:56 2025 by rpki-client