Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37372e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          BPClt3V8HB9c4gZf0aGJ6LNu3r8rnp0T48FgiFI7z34=
Subject key identifier:   65:B2:38:DC:54:7E:02:AB:DD:72:D5:DA:60:53:B7:EA:69:9D:BD:75
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       2125ACE3650BE75680ED09F4F5FE41E714268019
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:24 +0000
ROA not before:           Tue 04 Feb 2025 18:11:24 +0000
ROA not after:            Tue 03 Feb 2026 18:16:24 +0000
asID:                     52328
IP address blocks:        190.211.77.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:25:ac:e3:65:0b:e7:56:80:ed:09:f4:f5:fe:41:e7:14:26:80:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:24 2025 GMT
            Not After : Feb  3 18:16:24 2026 GMT
        Subject: CN=65B238DC547E02ABDD72D5DA6053B7EA699DBD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e8:11:28:60:f4:f6:7c:72:13:5e:4a:aa:63:
                    57:04:78:07:db:18:95:31:3c:aa:76:11:5e:37:16:
                    42:35:b4:18:b7:ec:a6:7a:8d:7c:6c:42:8e:29:94:
                    1f:aa:16:88:42:a5:cf:b3:2d:b6:ee:a5:b4:83:20:
                    16:69:c2:c4:bd:d1:c7:1d:0e:3d:c0:b5:96:c1:6c:
                    58:d6:86:67:53:7b:98:aa:4b:2b:bb:e7:43:05:2a:
                    c1:56:df:c8:cd:86:d9:84:5b:26:35:8b:ab:36:db:
                    c9:14:9c:72:fa:5d:96:a1:40:e3:62:e4:ff:5a:7c:
                    d0:3e:56:f1:5b:7b:8b:50:c4:fa:74:66:01:8d:d0:
                    d7:e7:39:0e:a7:26:30:84:17:26:57:20:e9:a4:e5:
                    44:f3:92:6a:2b:be:85:8a:34:db:98:79:7c:74:cb:
                    90:9f:a8:90:04:a4:88:7a:d7:96:ad:a4:31:c5:68:
                    c3:a3:3a:46:56:62:6f:1f:c3:4f:40:dd:6d:cf:5b:
                    6a:72:9c:36:84:5c:74:26:11:61:e2:e9:a2:f2:3d:
                    c4:9a:75:1e:07:7f:43:ee:ad:97:e8:e8:4b:27:8e:
                    95:f0:0a:9a:41:ee:77:e7:b9:fa:0a:7b:76:f4:d9:
                    07:a8:09:f5:40:97:bb:91:38:36:ee:34:3e:3e:6a:
                    32:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B2:38:DC:54:7E:02:AB:DD:72:D5:DA:60:53:B7:EA:69:9D:BD:75
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37372e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:ee:ef:ee:7e:d3:c8:21:78:42:af:29:87:42:b1:88:7e:
         76:d5:b3:16:24:32:71:ef:48:e8:eb:20:cc:68:cd:5f:ad:a4:
         80:fc:88:fe:54:49:cc:f2:0b:26:7b:7a:26:25:26:19:0e:6d:
         b2:82:e3:09:a8:77:ae:05:ae:fc:ea:dc:0e:32:69:6c:9d:fa:
         ca:a7:6c:d1:51:cd:b5:af:d0:7c:16:cc:fd:9f:82:73:9f:f0:
         cc:7c:d3:e5:5c:37:ad:67:d1:6a:9d:dd:7c:5f:e0:ae:ab:3b:
         d0:7c:00:3e:ce:78:15:11:6e:c2:46:39:96:e9:0b:fc:d2:e0:
         39:86:2d:10:12:82:87:41:24:72:d4:59:c3:af:94:7e:44:1e:
         9b:c8:1e:cf:9a:58:ed:af:7f:3e:5d:00:6e:a2:df:e3:9c:9f:
         af:52:9f:17:aa:da:c3:37:0c:00:47:e6:bc:21:5f:f0:97:70:
         7c:47:19:8b:c3:96:cb:d8:42:b3:f4:49:83:a0:a3:f8:72:4c:
         12:fa:6b:c4:11:0c:cc:ac:58:56:5f:e3:a5:3e:37:18:3f:a8:
         5b:85:15:9f:9c:6d:a5:3e:cc:3b:c3:8f:4b:ff:c7:90:54:67:
         be:23:91:f6:82:02:ae:e7:17:72:c2:6f:a5:61:0c:13:a7:ea:
         24:1c:6d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:12 2025 by rpki-client