Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
File:                     3139302e39382e3133362e302f32322d3234203d3e203238303336.roa (raw, json)
Hash identifier:          yF89gbB2Ve/ntEY0F8vcQawEGukZacqX2QSV25ObmRY=
Subject key identifier:   6E:D7:A5:4D:87:AB:E5:21:8F:E0:AD:32:9D:25:D7:1E:F7:04:12:F3
Certificate issuer:       /CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
Certificate serial:       1CAB894293E583669674C8CCC085F07DD45A58C6
Authority key identifier: B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa
Signing time:             Tue 04 Feb 2025 18:25:17 +0000
ROA not before:           Tue 04 Feb 2025 18:20:17 +0000
ROA not after:            Tue 03 Feb 2026 18:25:17 +0000
asID:                     28036
IP address blocks:        190.98.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:89:42:93:e5:83:66:96:74:c8:cc:c0:85:f0:7d:d4:5a:58:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B61ABF237277FEAF24117EBBE28D9D57E442433A
        Validity
            Not Before: Feb  4 18:20:17 2025 GMT
            Not After : Feb  3 18:25:17 2026 GMT
        Subject: CN=6ED7A54D87ABE5218FE0AD329D25D71EF70412F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:0a:76:1c:ed:f7:e8:6b:d6:43:72:71:f5:
                    13:a4:8d:00:c5:c2:94:9b:cc:14:e9:3f:4a:fc:c9:
                    bb:c1:9d:bf:34:39:09:7a:5e:9e:f5:28:ca:f8:c3:
                    29:fd:28:7e:67:9a:16:a3:f4:d3:11:e9:1c:f1:5f:
                    9f:6a:09:20:65:8d:b3:19:d7:c5:f2:4e:b5:58:37:
                    48:47:95:85:c2:65:d3:c5:18:ad:ca:87:f6:70:f4:
                    a9:2b:02:bd:91:68:1c:1f:95:19:61:a0:19:1a:b1:
                    4b:f0:ba:53:32:5e:21:71:1c:ba:4e:71:2c:1d:a2:
                    4f:73:18:95:12:29:21:c9:06:89:da:34:b8:c7:7e:
                    b2:16:42:02:06:26:e1:7a:19:e4:39:ef:df:ea:33:
                    99:5c:c8:7f:64:82:da:43:99:7d:5d:58:e3:9c:ee:
                    52:54:e3:56:f5:1b:1a:84:af:64:b5:9f:22:35:15:
                    c1:9e:cd:0f:c5:c6:ec:37:33:59:f2:00:fe:93:e2:
                    c2:06:85:17:8d:e0:d9:3b:34:11:3a:d9:06:95:40:
                    3c:5c:08:8a:a0:ee:f2:65:8e:02:0b:72:c5:d5:3c:
                    70:62:c4:68:ec:91:62:01:82:8b:30:0b:32:23:55:
                    9d:aa:69:15:32:79:e8:61:ae:d1:7a:2c:9b:ef:91:
                    bc:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D7:A5:4D:87:AB:E5:21:8F:E0:AD:32:9D:25:D7:1E:F7:04:12:F3
            X509v3 Authority Key Identifier:
                keyid:B6:1A:BF:23:72:77:FE:AF:24:11:7E:BB:E2:8D:9D:57:E4:42:43:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B61ABF237277FEAF24117EBBE28D9D57E442433A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD9D8109B5B0ED86FF91C022D96412D6DA086B8649C5975BADEB369F50F23923/0/3139302e39382e3133362e302f32322d3234203d3e203238303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:06:61:23:54:14:c7:01:40:65:1f:31:28:c1:99:c9:2e:
         e5:1d:00:56:fb:f7:e6:eb:8b:91:cb:62:68:2a:b3:03:f7:20:
         2b:0a:b9:de:1f:44:74:b9:08:45:78:00:ef:10:62:0e:ef:bc:
         ab:69:de:d6:61:55:8a:ae:ae:f4:7b:e4:a2:a6:dd:14:6a:92:
         90:29:08:38:d6:1e:c9:54:33:d4:60:9f:83:bf:9b:72:94:2a:
         74:63:87:ae:2f:3f:90:44:5a:14:14:70:8c:be:4f:61:39:4f:
         e4:49:e4:85:0a:96:a6:d5:1e:8d:27:1c:ec:35:bf:ba:6b:01:
         89:b9:96:d4:01:30:01:e0:20:90:37:c0:34:30:16:53:9d:a1:
         6f:ce:1c:cf:45:ea:33:70:24:ce:33:d7:2f:3a:e4:37:64:0d:
         ee:48:00:de:ae:3a:79:96:70:86:d0:03:bb:36:04:34:c5:b5:
         05:44:0a:f7:a7:39:34:67:46:05:32:da:65:7e:cc:72:b9:4f:
         52:97:55:c4:8c:96:df:a2:fa:9f:41:7c:75:32:dd:d2:92:f9:
         db:b8:22:78:cb:9d:c3:e1:2c:7c:47:59:02:75:75:c5:23:17:
         c2:0e:2e:1e:e4:09:fb:a6:16:c8:39:fe:0a:13:7d:5d:94:df:
         ee:6c:e9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:34 2025 by rpki-client