Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa
File:                     3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa (raw, json)
Hash identifier:          NlnUVhhACw3tXYXnMIfw7ckblzS++BVjuVFbbv7aXgk=
Subject key identifier:   B3:4B:30:87:48:10:16:CA:3F:D0:F2:F1:DB:9B:73:66:31:60:E7:60
Certificate issuer:       /CN=B2AB77730D91278D656A9B35B1E5343F359802A4
Certificate serial:       6B06D72F7546BAB6B52A99F08D9003E5D5480CA2
Authority key identifier: B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa
Signing time:             Tue 04 Feb 2025 18:51:10 +0000
ROA not before:           Tue 04 Feb 2025 18:46:10 +0000
ROA not after:            Tue 03 Feb 2026 18:51:10 +0000
asID:                     263245
IP address blocks:        190.107.238.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:06:d7:2f:75:46:ba:b6:b5:2a:99:f0:8d:90:03:e5:d5:48:0c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2AB77730D91278D656A9B35B1E5343F359802A4
        Validity
            Not Before: Feb  4 18:46:10 2025 GMT
            Not After : Feb  3 18:51:10 2026 GMT
        Subject: CN=B34B3087481016CA3FD0F2F1DB9B73663160E760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:33:8d:e1:ac:38:d9:68:89:ce:0e:ad:da:84:
                    13:26:62:8b:f9:e5:ae:62:f2:14:ae:c7:4a:f5:cf:
                    4e:f3:c2:be:20:29:c3:a8:6f:0d:aa:80:89:42:2a:
                    07:ea:35:c5:a3:38:83:2a:95:91:e8:6d:b5:15:e2:
                    e0:c9:02:45:fa:54:6c:a2:6f:df:ee:3b:3b:61:85:
                    a4:84:74:1a:ea:d3:c7:96:f9:af:d0:af:30:fd:ad:
                    8c:37:7a:ae:0e:5e:0a:3d:85:a3:13:6f:99:ee:b5:
                    82:ab:9b:9c:6f:9d:c4:7d:a7:69:ff:c7:c2:50:c6:
                    68:91:a4:d1:38:2a:eb:0c:fb:aa:a8:ab:50:14:ce:
                    18:3c:5f:39:98:34:13:9f:ee:ed:19:d5:09:61:83:
                    7f:4b:f9:d7:b9:2d:d6:5b:0e:6a:1c:b1:05:ab:16:
                    23:66:9a:99:02:19:5d:11:c2:17:96:de:5f:49:34:
                    ca:16:f9:67:cd:cf:74:8a:bc:24:68:86:25:2a:de:
                    81:b5:12:e4:b9:81:60:05:a7:4e:5e:99:9f:67:99:
                    d5:6b:9b:ee:89:95:1f:73:40:95:b1:2d:a9:79:8d:
                    e5:b1:dd:12:00:4a:10:e8:c8:73:0b:ff:f6:ad:b4:
                    24:e5:91:80:ab:cf:98:a6:d9:28:16:6f:b3:2f:d4:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:30:87:48:10:16:CA:3F:D0:F2:F1:DB:9B:73:66:31:60:E7:60
            X509v3 Authority Key Identifier:
                keyid:B2:AB:77:73:0D:91:27:8D:65:6A:9B:35:B1:E5:34:3F:35:98:02:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/B2AB77730D91278D656A9B35B1E5343F359802A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2AB77730D91278D656A9B35B1E5343F359802A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A949D0FF67E9A253632382D4E2CD443A8D30A7AD172953B01D35CF23AAFC4129/0/3139302e3130372e3233382e302f32342d3234203d3e20323633323435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:fe:aa:d2:35:24:04:50:ef:51:38:fc:80:fa:76:2c:93:9b:
         29:18:98:d0:24:72:76:70:b7:6f:64:c8:28:19:ec:f1:d9:cd:
         3e:9b:2e:fc:a5:57:bc:56:d9:9e:9f:c9:5d:6c:c6:49:0b:b7:
         7a:cf:1c:ce:1d:af:cf:c3:9c:07:8d:78:6a:c9:92:66:d3:9e:
         76:e4:29:f8:cf:00:74:5c:d7:be:be:3e:11:95:a2:0d:d9:cd:
         d9:2f:5f:36:30:3b:3a:41:cf:cd:43:08:67:0e:cc:5d:89:a0:
         b9:1f:da:b5:7d:75:cb:e4:89:de:01:dd:cb:cf:b9:0b:3a:c4:
         1c:df:26:9d:32:f7:40:1e:a6:9f:40:5e:a7:72:5b:64:3a:a5:
         34:d2:26:b7:54:57:cd:7a:6f:6d:68:0b:e1:6d:60:9e:e8:e9:
         1b:04:36:da:3c:c6:bb:91:6b:b0:ee:24:6b:31:c7:76:4a:53:
         e2:9f:aa:70:3f:4d:20:35:ae:11:76:64:44:f4:e6:fc:48:7f:
         eb:32:26:f8:85:74:3b:be:44:1e:61:40:60:76:a1:ac:ba:02:
         88:72:28:19:7f:8c:94:55:d8:17:04:5d:40:11:5d:e1:e2:27:
         aa:07:bf:98:1d:e6:34:c5:34:13:4b:c6:4a:ef:8f:a1:75:10:
         07:1e:b6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:55 2025 by rpki-client