Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383832.roa
File:                     3230302e39302e3134342e302f32312d3234203d3e203237383832.roa (raw, json)
Hash identifier:          tEGoNgrqwC0CxSyW0v+UhnFPpUfrEJ+c0L8pOKylgZQ=
Subject key identifier:   A1:B6:93:0E:A6:55:74:12:15:DA:CE:0B:EE:3E:A2:68:A9:67:BC:8E
Certificate issuer:       /CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
Certificate serial:       29B19AC4A95FEC2D415E3C29DEEA3E5CA22B1740
Authority key identifier: EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383832.roa
Signing time:             Fri 14 Mar 2025 15:15:00 +0000
ROA not before:           Fri 14 Mar 2025 15:10:00 +0000
ROA not after:            Fri 13 Mar 2026 15:15:00 +0000
asID:                     27882
IP address blocks:        200.90.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b1:9a:c4:a9:5f:ec:2d:41:5e:3c:29:de:ea:3e:5c:a2:2b:17:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B
        Validity
            Not Before: Mar 14 15:10:00 2025 GMT
            Not After : Mar 13 15:15:00 2026 GMT
        Subject: CN=A1B6930EA655741215DACE0BEE3EA268A967BC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:9e:d4:58:d7:6d:8e:0d:c3:c9:cc:fb:07:
                    07:13:12:fc:e5:d2:ba:62:08:3a:57:df:1e:7f:bf:
                    ac:8d:43:f4:59:6e:b6:5e:cc:f5:c1:4e:bf:dc:cd:
                    0c:f2:c8:ba:a4:1c:7e:a9:3d:3a:68:f1:6b:4e:41:
                    59:58:8b:48:60:1d:2a:c2:2f:67:8a:e9:37:72:d0:
                    3f:b1:1b:73:cd:64:c2:8d:33:53:f8:d2:5e:06:b0:
                    b6:36:2b:79:54:ad:31:7d:4b:9c:05:7e:52:c8:92:
                    14:ec:db:61:51:fa:00:08:69:32:42:7e:16:73:b9:
                    7f:65:0c:42:46:1a:7f:cb:f2:22:e4:19:69:8b:3e:
                    ab:79:7b:c0:48:cc:11:fe:e8:f9:a4:11:f7:bc:4d:
                    5e:bf:5b:47:ac:62:c3:1e:71:35:2f:7c:0d:55:97:
                    48:81:aa:41:35:b8:f5:1b:e7:9e:0d:b8:21:3d:b7:
                    90:c5:5c:ed:28:48:e1:5e:63:d7:cf:23:86:10:7b:
                    4a:88:1e:cb:f4:1f:a2:ed:5a:7b:23:c2:34:19:3b:
                    b9:46:3c:a4:3d:ad:03:b6:ef:59:f4:d3:74:6d:29:
                    5d:09:38:15:76:19:fa:3a:32:9b:c5:42:5d:a1:c9:
                    c3:34:7d:21:7a:e9:de:c4:e9:45:26:d9:86:4c:5a:
                    77:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:93:0E:A6:55:74:12:15:DA:CE:0B:EE:3E:A2:68:A9:67:BC:8E
            X509v3 Authority Key Identifier:
                keyid:EC:1F:06:8A:A5:7B:BF:89:BA:3D:7D:5A:D3:2A:93:EC:44:7D:C5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC1F068AA57BBF89BA3D7D5AD32A93EC447DC57B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94CA7BC7278C7389FE81E2A769A950B303284E9C1DE93B1649B261C3C0994760/0/3230302e39302e3134342e302f32312d3234203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         42:e6:6a:b7:87:e9:be:63:f1:f6:55:d6:7f:db:b4:fb:e7:db:
         04:b7:a9:dc:32:a3:fd:bd:51:fc:3e:b4:fd:30:81:3d:7f:ef:
         b6:b1:7f:ab:29:13:e9:a2:a9:6d:ab:8f:a3:d7:cd:7c:05:e5:
         d9:d0:39:c4:85:1c:34:41:e1:a6:51:65:e9:9e:5d:54:17:a1:
         0a:7c:be:d8:a1:14:ca:df:a1:a5:5d:f1:60:d7:13:ca:5a:4a:
         f4:58:ee:8f:5a:c0:e2:50:82:3b:cf:15:bd:c4:38:40:af:88:
         d8:6f:fb:e5:09:43:e2:e2:34:cf:8d:42:6f:7b:5e:18:64:88:
         76:a7:24:f4:f0:aa:bd:c5:40:4a:33:11:ed:76:4c:93:18:33:
         07:2d:69:92:32:cd:c7:c1:a5:af:ae:f1:33:5b:0a:96:59:3a:
         56:ec:34:1c:a4:55:a1:b3:57:1b:92:92:eb:4e:18:4a:5d:3d:
         d6:38:68:5f:75:8b:16:cf:31:5e:24:57:2f:45:b5:2d:9a:72:
         2a:4b:c5:6f:94:57:6e:42:8d:25:f8:e6:23:96:d1:a1:9e:54:
         f7:a8:0d:86:15:5b:bd:e7:0b:52:83:a6:2e:35:84:3c:b2:44:
         2f:5b:02:5a:61:06:b7:58:97:ab:ff:3f:2d:e8:a2:bc:fb:91:
         7f:53:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:01:37 2025 by rpki-client