Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3234362e302f32342d3234203d3e203238313033.roa
File:                     3139302e3131302e3234362e302f32342d3234203d3e203238313033.roa (raw, json)
Hash identifier:          PnaqdLtQq9y1nTV12f0E2wzQykWdcoc6EzMpm7h9i2U=
Subject key identifier:   9F:0D:53:A9:8B:CD:DD:EE:CC:C7:5B:9C:EC:21:EF:B1:49:B2:42:FB
Certificate issuer:       /CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
Certificate serial:       21542EB71BD499EE5BC651B3C19014DE48040A40
Authority key identifier: 31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3234362e302f32342d3234203d3e203238313033.roa
Signing time:             Wed 15 Jan 2025 12:45:00 +0000
ROA not before:           Wed 15 Jan 2025 12:40:00 +0000
ROA not after:            Wed 14 Jan 2026 12:45:00 +0000
asID:                     28103
IP address blocks:        190.110.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:54:2e:b7:1b:d4:99:ee:5b:c6:51:b3:c1:90:14:de:48:04:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=310B6E7E481FA87B7B29582BAD1348FE7F657C57
        Validity
            Not Before: Jan 15 12:40:00 2025 GMT
            Not After : Jan 14 12:45:00 2026 GMT
        Subject: CN=9F0D53A98BCDDDEECCC75B9CEC21EFB149B242FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:47:2f:ec:e7:04:1e:86:ac:d6:db:f1:58:
                    db:25:3c:53:e0:30:7b:1c:05:b7:fe:63:f9:68:cc:
                    f5:5f:ca:31:0a:b1:87:d9:20:62:f9:4f:70:5e:38:
                    8c:b6:70:1a:42:ad:4b:14:6e:4c:df:50:2f:1f:24:
                    33:8e:e2:e7:ce:49:60:4f:42:46:36:d3:28:5d:04:
                    c2:cc:4b:54:86:89:fc:32:46:9b:2c:f0:93:1d:42:
                    6b:23:fb:7b:91:b4:ca:da:9f:70:1a:47:8e:00:9d:
                    73:3e:65:2f:af:83:9b:7c:ed:b5:b7:c1:3a:23:ff:
                    ba:fe:35:3c:e0:e4:4f:a2:dc:7b:4e:ff:ac:32:9f:
                    33:05:e4:5c:61:39:5a:7d:aa:dd:e7:72:10:0d:12:
                    55:8f:37:2c:5a:50:f4:f8:6c:b1:07:94:e5:b9:75:
                    8d:ad:a9:e0:a6:f4:b7:db:eb:43:0d:3c:48:71:8f:
                    d5:11:65:e8:39:42:7f:9b:03:54:c5:df:dc:26:40:
                    81:d0:83:19:0f:f6:78:c2:87:e1:4e:07:2f:56:f2:
                    3a:dd:0c:87:80:02:77:e8:56:d2:2a:f6:45:10:c8:
                    cb:84:09:a2:3e:19:e7:de:33:cc:49:a9:87:04:e4:
                    99:1d:9c:51:23:34:84:b8:69:b1:78:05:f9:a5:f9:
                    37:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:53:A9:8B:CD:DD:EE:CC:C7:5B:9C:EC:21:EF:B1:49:B2:42:FB
            X509v3 Authority Key Identifier:
                keyid:31:0B:6E:7E:48:1F:A8:7B:7B:29:58:2B:AD:13:48:FE:7F:65:7C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/310B6E7E481FA87B7B29582BAD1348FE7F657C57.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A2EF6BF03621B3ABFA492E138DFD0871A2D410AA7D3C4F6BAD917A271F88F989/0/3139302e3131302e3234362e302f32342d3234203d3e203238313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:54:9d:d3:c1:e0:21:14:b8:fc:e5:79:2f:d3:82:b7:e7:5c:
         e0:f8:c8:4b:5c:35:f8:29:e6:79:fb:7a:de:d0:b2:48:44:e2:
         ec:ae:07:86:be:bc:52:02:a4:3f:d5:fd:c5:ed:0c:e2:44:e1:
         65:43:06:77:f6:74:0e:66:67:f2:3e:2e:02:dd:9e:46:12:15:
         03:13:09:5c:3a:2a:a8:0b:28:c9:7f:0e:bf:18:69:45:9a:71:
         6f:89:fb:de:0d:62:9a:20:86:ed:48:47:b6:50:44:26:a1:9c:
         de:01:3f:e1:62:b0:6e:45:0d:63:b4:85:a0:a0:a0:50:00:14:
         6a:30:c6:29:96:c5:79:10:d2:12:7e:bc:f8:ef:cc:64:87:0f:
         25:cc:c8:ac:c1:a7:64:07:e3:8e:c5:8b:16:83:c8:bb:56:ac:
         44:2f:3a:ad:57:1a:73:3f:1f:b9:ef:8a:b3:32:50:3a:33:4b:
         28:fd:45:55:81:f3:95:3b:84:22:25:c3:9b:cf:c1:f7:d5:af:
         bc:86:69:ca:a5:80:7f:c0:b6:97:99:2b:ea:a0:07:f8:75:f1:
         3d:36:9a:54:20:9a:07:c9:a8:4a:8d:1d:ad:5c:0c:77:1c:0a:
         85:11:b8:b5:9f:11:4f:69:a8:fe:07:65:d0:58:30:11:98:85:
         b8:8b:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:22 2025 by rpki-client