Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37392e302f32342d3234203d3e203532333238.roa
File:                     3139302e3231312e37392e302f32342d3234203d3e203532333238.roa (raw, json)
Hash identifier:          SKZEA1uJGkyqcZtbbmj9rEdiptNA9kGUckLqlWm73rA=
Subject key identifier:   AD:55:56:F6:EB:A2:A1:C2:93:D8:B0:24:34:7B:69:AD:40:32:59:72
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       465E5ADBA1D51856E0633B0629571C8CF737B1E7
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37392e302f32342d3234203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:23 +0000
ROA not before:           Tue 04 Feb 2025 18:11:23 +0000
ROA not after:            Tue 03 Feb 2026 18:16:23 +0000
asID:                     52328
IP address blocks:        190.211.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5e:5a:db:a1:d5:18:56:e0:63:3b:06:29:57:1c:8c:f7:37:b1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:23 2025 GMT
            Not After : Feb  3 18:16:23 2026 GMT
        Subject: CN=AD5556F6EBA2A1C293D8B024347B69AD40325972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:57:cf:b5:63:39:18:34:3f:a4:77:31:d5:4f:
                    db:d5:9f:15:12:ca:3c:a7:03:d2:95:eb:d9:30:79:
                    bb:d3:da:79:35:3b:44:c4:0b:ad:7f:b7:31:3e:8a:
                    f3:1b:49:b9:42:1e:5f:db:ac:12:bf:6f:82:65:93:
                    73:57:0b:b3:d1:c3:95:a3:d0:86:47:7f:5d:c7:06:
                    88:6a:5a:91:dd:82:61:4a:d2:aa:89:9c:1c:0b:36:
                    ae:0d:63:c8:37:67:ca:c0:23:6d:41:93:01:21:5c:
                    04:c8:13:2a:c0:a5:1a:b7:95:50:6b:23:fe:b4:9c:
                    ed:0e:ae:44:57:64:fa:29:2e:df:80:22:7c:66:53:
                    e3:15:d8:ac:1a:e3:86:d4:d4:48:43:bc:1c:d8:72:
                    85:b7:e1:fa:7e:bc:87:25:dd:09:2a:1a:0c:11:87:
                    5c:36:5c:df:5f:d9:4e:8c:1e:62:12:71:df:c5:be:
                    bb:09:31:15:31:2a:04:7e:b4:3b:3f:99:2b:dd:c6:
                    e7:19:3b:5b:bc:ea:b8:ac:dd:7b:86:b6:2b:c6:fc:
                    96:69:0e:e2:35:9d:06:20:e9:3a:73:c8:6e:b1:83:
                    a2:35:67:dc:75:be:6e:2e:71:01:0c:0d:37:5b:ab:
                    69:bc:2c:5e:24:d0:89:05:e6:68:0c:6c:db:5e:16:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:56:F6:EB:A2:A1:C2:93:D8:B0:24:34:7B:69:AD:40:32:59:72
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37392e302f32342d3234203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:e5:d5:c0:b1:ff:6a:dc:69:54:e1:10:70:60:7e:66:03:86:
         7b:75:32:de:58:dd:7c:ac:bf:9e:7d:3c:a3:20:5c:71:85:0a:
         8e:86:84:99:d5:7e:30:ad:ff:b1:54:e6:76:7c:d4:c8:23:49:
         b2:75:b3:0e:75:ca:84:d5:b7:54:45:20:0d:cc:1c:eb:3a:cc:
         18:91:b3:80:b5:27:24:2c:f7:72:08:18:79:cc:8c:d2:5f:24:
         a7:94:0a:2b:e0:58:d3:c7:17:7a:8b:d2:3c:37:94:ef:ea:33:
         3c:ac:78:09:22:d2:e8:e5:70:57:79:41:b7:6a:c5:cd:45:04:
         13:8f:87:4c:6f:67:84:92:66:67:b1:de:4c:17:5c:9e:6b:ad:
         7c:ff:02:99:9b:69:56:81:c7:53:de:b9:ce:78:38:bd:43:2f:
         19:0d:f6:de:c5:b6:9f:50:79:26:c3:35:95:28:e8:2d:80:9f:
         84:40:21:9c:9d:52:e3:1d:9d:14:65:96:b0:88:46:c0:9f:a6:
         47:9a:62:3c:7e:bb:5c:f8:6a:f5:16:bd:f5:a2:fa:23:48:14:
         bd:32:75:45:3b:73:f1:7c:c4:6b:94:26:5f:be:1f:4d:a3:df:
         d0:2f:56:08:2c:8d:07:6f:eb:6f:2a:f7:96:d7:9c:a9:31:3d:
         7f:c0:8f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:40 2025 by rpki-client