Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37382e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          T+JDer4uOLXjrX9j0JOEol/bvvd3fZri9nOF4TROMnY=
Subject key identifier:   57:61:FE:A4:DE:1A:C7:AE:B0:B3:0B:D2:1F:21:07:C8:DF:8C:8E:31
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       1A6B869C2661AA8F6B3E77490FC58CE7AA9B00F2
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:28 +0000
ROA not before:           Tue 04 Feb 2025 18:11:28 +0000
ROA not after:            Tue 03 Feb 2026 18:16:28 +0000
asID:                     52328
IP address blocks:        190.211.78.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6b:86:9c:26:61:aa:8f:6b:3e:77:49:0f:c5:8c:e7:aa:9b:00:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:28 2025 GMT
            Not After : Feb  3 18:16:28 2026 GMT
        Subject: CN=5761FEA4DE1AC7AEB0B30BD21F2107C8DF8C8E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:77:12:53:81:c7:68:65:79:81:37:e2:59:
                    20:5c:4e:98:33:8c:1d:14:93:a1:ef:92:32:7b:2c:
                    a6:1f:cb:2c:d3:f9:e9:bc:21:b7:41:ca:01:48:97:
                    27:3f:c0:03:ef:43:7d:10:30:8a:e6:7a:dc:1a:aa:
                    0d:81:c6:a1:5e:bd:77:49:81:87:55:b4:b2:7a:09:
                    ba:75:a9:34:3a:2b:73:47:6b:7b:62:f3:1c:6a:da:
                    6a:e9:b5:50:50:b2:e9:21:8e:f2:1a:54:05:18:53:
                    37:eb:49:3e:5e:29:ee:5c:4c:9e:0d:dc:cc:03:a5:
                    2a:8e:8e:42:ed:f4:a1:eb:49:7b:c3:9a:eb:40:e3:
                    a4:b8:96:a4:a1:e0:db:33:bd:87:33:c1:b8:43:5d:
                    87:97:81:fe:1b:bc:b6:91:db:a6:51:dc:ad:58:bc:
                    2f:f4:64:64:62:3f:3d:a4:40:f9:f2:13:91:d6:a1:
                    33:e0:63:56:ad:e5:3a:f7:45:aa:89:ab:40:30:6e:
                    5d:c6:88:f9:11:8b:e7:fb:a2:76:76:0c:de:0e:16:
                    79:d6:91:86:0b:03:bc:fa:7c:0f:67:69:fb:0e:24:
                    03:f7:24:31:83:27:86:64:61:0c:ac:18:ad:00:9d:
                    bb:88:cf:aa:49:a8:3a:85:bb:37:81:bc:12:63:01:
                    43:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:FE:A4:DE:1A:C7:AE:B0:B3:0B:D2:1F:21:07:C8:DF:8C:8E:31
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37382e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:86:a5:5a:70:dd:4b:98:4c:9d:93:c1:38:8f:82:9e:26:a4:
         94:d9:9d:14:92:81:c2:b6:90:93:15:4f:b3:e9:40:e7:a2:e7:
         65:e4:f2:f1:67:ec:3b:07:6a:fa:cb:2e:3d:2d:9c:22:7f:eb:
         bf:ef:69:90:f5:8f:56:bb:00:4e:aa:44:21:1e:43:bf:ba:a3:
         fd:91:29:6a:0d:83:7a:a1:a8:5b:df:86:3e:e3:65:60:90:ca:
         3e:4f:69:4c:71:a7:e8:a0:bd:79:ca:23:59:1a:ba:6d:f8:37:
         a8:dd:56:e5:84:9b:7e:89:41:26:f2:30:2f:a8:b1:36:8f:63:
         0c:e1:08:0a:4a:5e:c5:54:a3:a0:0b:3f:9c:a5:b2:77:ee:d1:
         93:41:9e:1f:7c:ce:e3:6d:93:d1:43:68:1f:c9:b8:4d:02:dc:
         07:ef:7a:32:ac:0d:14:00:36:c3:a2:95:fe:d1:e4:69:2f:d2:
         37:eb:57:77:31:8b:fb:6c:b4:06:53:a8:69:9f:ac:10:33:18:
         f9:5f:22:45:69:0b:29:cf:49:87:e8:dc:7c:45:06:b3:a6:6a:
         f5:b2:bc:6d:ff:ed:fe:a9:89:24:47:c5:b6:44:dd:78:25:4e:
         c2:e6:3c:e1:9e:9f:ac:05:27:ed:a3:61:a4:bd:77:46:76:da:
         82:fd:ac:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:37 2025 by rpki-client