Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa
File:                     3139302e38382e36342e302f31382d3138203d3e203131303831.roa (raw, json)
Hash identifier:          mQtVi4jQALT3JlpCBReF+EnzxBvQtZ5JoErKK7raTDk=
Subject key identifier:   7D:05:BB:04:D1:F5:7C:C1:BA:36:26:C8:B1:AF:81:76:8B:CB:0F:13
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       205B7D50391585C9183B26C9ECC31C8378ABA6E5
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa
Signing time:             Tue 04 Feb 2025 18:50:59 +0000
ROA not before:           Tue 04 Feb 2025 18:45:59 +0000
ROA not after:            Tue 03 Feb 2026 18:50:59 +0000
asID:                     11081
IP address blocks:        190.88.64.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5b:7d:50:39:15:85:c9:18:3b:26:c9:ec:c3:1c:83:78:ab:a6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:59 2025 GMT
            Not After : Feb  3 18:50:59 2026 GMT
        Subject: CN=7D05BB04D1F57CC1BA3626C8B1AF81768BCB0F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:0e:ab:c3:f9:f1:d9:8d:6a:84:48:12:60:
                    2c:5c:d6:84:5f:e9:b9:91:6c:e6:ae:46:dd:d4:e0:
                    fd:f9:9a:cb:3d:ab:bd:dc:a5:27:a0:c6:a8:ea:a6:
                    37:bd:25:bb:50:a6:c2:78:28:97:bf:18:65:eb:fa:
                    bf:6e:0f:f0:7b:be:8b:c4:02:43:46:68:5b:d8:f8:
                    f1:51:4f:ee:9a:97:5c:55:56:10:aa:05:7a:95:44:
                    1a:66:d5:5c:cc:de:14:ff:db:1e:5c:0b:1a:ce:29:
                    16:e2:65:48:83:1d:05:c4:ec:56:2d:25:8e:8f:45:
                    59:83:28:ce:5b:f9:21:49:9a:e9:49:6d:48:17:7d:
                    2c:89:f8:73:b4:bb:e4:d6:fd:b3:4f:91:1d:3d:f3:
                    0a:37:e5:64:25:5f:82:81:64:f5:2f:dd:5c:c9:89:
                    43:e9:ef:3e:07:41:b1:2f:85:05:56:a8:bb:d6:97:
                    4d:b9:9f:f5:20:82:d7:ec:85:e4:5f:f2:7f:c4:83:
                    6b:73:6a:8a:3d:a2:e0:9a:6e:cb:65:26:06:9f:cd:
                    c1:59:0d:ca:a4:19:97:71:8f:c3:1c:39:43:f5:6b:
                    b8:9b:1c:40:41:85:c9:ad:62:2b:47:c9:c8:ba:ba:
                    e9:fd:a9:17:ca:f6:41:ba:9a:71:8e:70:75:84:29:
                    cd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:05:BB:04:D1:F5:7C:C1:BA:36:26:C8:B1:AF:81:76:8B:CB:0F:13
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e36342e302f31382d3138203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         66:89:b2:46:d5:19:bc:09:23:09:3c:9d:24:07:8d:5c:5b:8a:
         01:40:f6:f4:00:a6:fe:10:d4:6d:66:26:f3:88:4e:40:09:b4:
         f7:38:e9:48:5c:72:79:38:99:2d:d0:15:c9:bb:c3:ea:bc:b0:
         bc:07:77:87:1f:23:30:2a:0c:34:17:75:85:d7:f3:b4:35:51:
         a5:1d:b5:71:1e:d1:48:0e:f8:f8:3c:f3:2c:a5:ca:97:2a:44:
         aa:23:5a:10:d1:1e:01:57:f9:08:fc:f6:87:48:7c:e0:07:1b:
         d6:b6:97:bf:b2:10:a9:52:0c:51:2d:f9:eb:d2:2e:bf:b6:8e:
         4c:d0:48:e3:f6:66:13:a7:f6:4b:2f:76:09:70:6b:57:db:6a:
         71:c6:d9:b7:f4:09:35:24:a4:0a:2b:04:90:e9:72:7f:ec:74:
         92:bc:29:dd:4f:d5:d0:67:ed:59:74:31:8b:3a:6a:cb:1c:38:
         f4:d9:4a:a6:c6:91:8f:5f:c0:28:c5:a2:9a:a9:2b:75:37:ea:
         5a:52:6b:dc:be:eb:4a:86:ab:47:0d:d1:72:5c:ff:ec:04:56:
         a7:32:f3:0c:87:ac:dc:84:91:21:79:c8:75:c2:07:a8:20:5b:
         6e:fb:e0:5f:d1:f8:c0:0e:34:fd:de:28:9c:bd:50:ec:2c:a9:
         be:dd:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:20 2025 by rpki-client