Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
File:                     3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa (raw, json)
Hash identifier:          mRyq8lxw3rWpBho/mYhSeCJ8uufErPCjhN28UIxJVms=
Subject key identifier:   AE:C4:DE:2D:61:4F:E6:BA:3D:8D:0A:43:9D:2E:FE:ED:62:3B:40:8B
Certificate issuer:       /CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
Certificate serial:       321571AB7EE531ED2ED11F8CF992AD03F98CC787
Authority key identifier: A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa
Signing time:             Tue 04 Feb 2025 18:37:21 +0000
ROA not before:           Tue 04 Feb 2025 18:32:21 +0000
ROA not after:            Tue 03 Feb 2026 18:37:21 +0000
asID:                     264688
IP address blocks:        190.196.231.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:15:71:ab:7e:e5:31:ed:2e:d1:1f:8c:f9:92:ad:03:f9:8c:c7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8157BBF3584469317EB4058D1B9B379DC9D17D9
        Validity
            Not Before: Feb  4 18:32:21 2025 GMT
            Not After : Feb  3 18:37:21 2026 GMT
        Subject: CN=AEC4DE2D614FE6BA3D8D0A439D2EFEED623B408B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:40:f2:8e:07:ad:7f:4a:54:dd:59:42:28:
                    1d:01:51:d3:51:e9:4e:a6:23:78:cc:21:a2:db:2d:
                    82:e8:ea:5f:9a:2c:ac:f2:5c:56:b8:19:5c:be:c8:
                    72:ef:7c:66:9c:30:5a:5c:bd:91:e0:6d:4a:5a:e5:
                    14:a8:af:9a:f8:18:bb:15:42:40:65:ce:bc:1d:ab:
                    8d:47:a7:01:ee:5f:48:c9:d2:15:dd:dc:78:2c:62:
                    ff:71:2d:2c:d1:51:75:2e:45:09:f6:e0:1d:1c:32:
                    11:b9:e3:f4:bc:d2:24:63:dc:1a:84:c0:d3:9c:27:
                    8e:4c:94:b4:df:95:db:37:7a:cd:68:d7:1c:5d:7e:
                    c2:62:9f:38:29:88:e1:14:12:14:83:74:75:3d:e3:
                    c6:a5:a9:00:5d:d7:b0:c1:a3:e7:d9:22:45:28:dc:
                    e4:da:48:ad:f6:f0:8a:e8:0c:de:dd:41:5b:cc:20:
                    ec:77:5e:e7:8d:bc:fa:38:37:56:74:13:f1:8d:01:
                    ea:65:71:0d:86:1b:26:fa:26:b9:0d:2d:0b:34:84:
                    39:be:c5:6e:0f:54:b0:0d:b2:12:29:b6:79:e4:83:
                    12:02:ce:5e:d3:b4:e8:61:af:b6:eb:72:50:d6:34:
                    58:a9:12:c3:f5:ef:c3:3c:5e:19:0c:ae:73:5c:71:
                    cf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C4:DE:2D:61:4F:E6:BA:3D:8D:0A:43:9D:2E:FE:ED:62:3B:40:8B
            X509v3 Authority Key Identifier:
                keyid:A8:15:7B:BF:35:84:46:93:17:EB:40:58:D1:B9:B3:79:DC:9D:17:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A8157BBF3584469317EB4058D1B9B379DC9D17D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D9394DB0072FBBD5EAFC54C5C56215DF6807F866B4C7255A82B1D72C9E97D6D/0/3139302e3139362e3233312e302f32342d3234203d3e20323634363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:ef:30:6b:2b:04:b7:6c:44:72:ce:04:1b:ee:a5:87:2b:d6:
         f1:bc:f0:18:b1:44:74:c4:b3:b7:6a:bc:9c:ad:7b:86:09:89:
         c0:71:43:48:dd:1b:f8:f0:24:6c:8f:42:ee:77:5b:6a:71:55:
         f4:9b:e8:42:95:50:80:2d:51:bb:ad:8e:73:ad:66:f5:4b:8d:
         1e:d7:8b:42:25:23:eb:df:e2:98:98:ab:0a:8f:23:80:4e:7c:
         69:ac:8d:d7:ec:42:8f:2a:0f:e4:eb:7e:ff:7f:63:37:ee:4e:
         52:4a:f2:2b:79:2c:d9:c6:f4:ae:67:b9:ca:3b:c6:50:9e:4e:
         9a:26:28:b2:5a:59:6c:f2:a8:a6:82:39:fc:ce:a4:1b:f2:7f:
         b2:59:fc:1f:b1:64:27:4d:8b:32:29:db:f6:9e:3e:61:a7:92:
         a6:c1:d3:ce:3b:9c:da:9a:97:22:81:ba:1c:b5:ca:a4:4b:b5:
         2f:d4:57:ac:ef:d7:75:78:73:72:bf:da:d1:da:bb:8c:a0:91:
         58:65:20:d8:fe:0e:bd:a9:84:4b:d0:74:97:2d:71:46:5b:9e:
         92:31:76:58:5b:5e:ff:54:7b:61:19:e1:9d:63:1a:7d:9d:a8:
         16:f2:59:d1:35:17:62:24:90:aa:df:83:3f:e8:1b:36:7f:76:
         96:7f:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:09 2025 by rpki-client