Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          9FMVaQwOvkJe4ejMVwiJFIYqx4JrLbfvB9ImYZ/0AwI=
Subject key identifier:   5F:9E:C3:57:85:D2:E7:76:22:CB:80:C7:A7:36:4A:16:01:2B:C4:17
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       74173AF58765AEB56E9C9F331910A3BD18966F91
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:19 +0000
ROA not before:           Tue 04 Feb 2025 18:32:19 +0000
ROA not after:            Tue 03 Feb 2026 18:37:19 +0000
asID:                     264688
IP address blocks:        190.107.244.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:3a:f5:87:65:ae:b5:6e:9c:9f:33:19:10:a3:bd:18:96:6f:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:19 2025 GMT
            Not After : Feb  3 18:37:19 2026 GMT
        Subject: CN=5F9EC35785D2E77622CB80C7A7364A16012BC417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:73:cc:29:07:9b:5e:73:7b:76:98:58:89:
                    09:14:5a:58:cf:7e:1a:5b:61:6a:69:84:03:78:f1:
                    8e:c2:ad:1e:7c:92:da:7a:7b:1f:3e:25:d8:03:22:
                    95:19:3b:fb:ab:73:aa:50:fc:80:31:24:27:c8:87:
                    61:80:0c:b0:dc:4c:f3:69:b2:9e:fc:38:f9:93:a0:
                    1e:b1:60:a7:e2:51:ae:a7:e9:7a:3c:4b:ec:6b:38:
                    5c:dc:d7:90:e5:f7:12:e2:db:5a:bf:72:61:10:d3:
                    e8:5f:2e:24:28:46:b1:8b:f1:61:d6:ca:df:ac:91:
                    b6:04:0c:16:18:ae:0f:85:33:66:09:7f:8d:7e:35:
                    e7:4f:de:9b:00:48:18:76:e5:f7:b4:f3:7f:a6:cf:
                    1f:0b:84:fe:a2:d4:de:f6:de:db:a5:c7:12:66:8f:
                    a9:d8:f8:7c:ac:d2:9f:50:1d:dc:bd:f4:c9:f1:ee:
                    80:e4:51:6e:a0:49:fc:e7:d6:48:b5:36:a6:1a:bc:
                    f0:d8:48:28:ac:82:0f:cf:45:c4:6a:23:ee:ee:50:
                    d8:0c:99:34:18:77:2c:57:f3:2b:a6:b4:68:fa:98:
                    db:f0:41:c0:a2:09:53:53:4d:a9:74:07:27:6c:22:
                    6e:d6:62:c7:4d:bc:7e:e1:a5:85:a6:3c:c3:bb:4c:
                    8e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9E:C3:57:85:D2:E7:76:22:CB:80:C7:A7:36:4A:16:01:2B:C4:17
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3130372e3234342e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:8a:39:c3:64:b5:07:a8:d9:5a:d3:62:3f:33:1e:f9:40:
         1f:45:14:8e:4d:d0:46:35:fb:44:e6:55:a0:f0:53:d0:78:59:
         8e:96:c3:1b:eb:22:e4:26:0b:62:8f:1f:29:2a:5d:32:ce:a1:
         9f:4e:68:90:da:8e:78:cc:c1:fd:4c:07:6c:8a:d5:89:bc:82:
         a2:e9:7f:4d:04:b3:f1:12:c2:ab:ba:11:17:c0:ef:86:9d:45:
         60:b0:ee:48:dc:58:de:50:1e:e1:a1:53:62:e2:d1:4a:b1:29:
         42:75:ec:88:9e:91:2f:5f:98:14:5b:86:57:63:d8:0f:cb:39:
         1b:7d:0e:ad:58:62:4e:43:9a:de:83:14:4b:60:96:6f:33:a7:
         04:c2:3f:00:56:fc:43:eb:cc:80:ac:68:8d:8f:8d:43:d6:c2:
         70:10:15:a4:fb:58:31:a1:55:9d:ef:16:1a:fa:d9:c8:6a:d1:
         8b:93:a5:51:9f:c8:08:0b:8b:f6:23:c4:4a:b4:71:64:a5:b0:
         74:90:e3:09:27:a2:e9:8f:d0:8c:05:70:6c:1f:3a:30:88:a4:
         56:75:c8:6c:f7:00:0f:eb:75:a6:2e:74:c3:f9:92:ac:87:40:
         f3:58:bb:82:c0:52:18:44:fe:69:0a:52:4a:5b:ec:6a:8c:64:
         03:b2:92:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:12 2025 by rpki-client