Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137342e302f32342d3234203d3e203238303939.roa
File:                     3139302e332e3137342e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          RCig7ooYRXRqJTBjILasMOpZKUSasFAgzSLtaQ0LINA=
Subject key identifier:   92:8C:0B:1E:84:67:EA:C0:FB:0E:45:B8:F5:24:E7:3F:E0:84:FC:FD
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       5B6DB52C4506A848585659069F83F72086C77DB1
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137342e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:51 +0000
ROA not before:           Tue 04 Feb 2025 18:22:51 +0000
ROA not after:            Tue 03 Feb 2026 18:27:51 +0000
asID:                     28099
IP address blocks:        190.3.174.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:6d:b5:2c:45:06:a8:48:58:56:59:06:9f:83:f7:20:86:c7:7d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:51 2025 GMT
            Not After : Feb  3 18:27:51 2026 GMT
        Subject: CN=928C0B1E8467EAC0FB0E45B8F524E73FE084FCFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:9f:b4:0d:a8:8f:49:9b:4a:21:7c:91:88:
                    41:74:cb:14:2b:8b:66:9e:d9:14:57:be:9b:05:53:
                    d3:90:ce:92:5b:d9:1d:d4:b6:ed:5a:e3:1a:1d:94:
                    a4:22:3b:8a:6b:8b:a3:8c:7c:44:54:da:b1:60:a3:
                    ab:85:97:38:f5:e4:05:9a:e8:57:4b:13:cd:60:da:
                    5c:44:f1:52:d7:22:f3:1a:0c:99:0b:6b:76:53:73:
                    3e:37:56:30:67:c8:71:75:81:88:cc:d1:9e:0a:a2:
                    d6:03:39:58:14:42:a6:48:96:e6:5f:e0:49:74:a1:
                    ae:a8:4d:cc:7b:b0:27:50:9b:c1:6e:32:ce:33:6d:
                    d2:c0:d7:ff:d9:da:44:8f:c7:a1:c5:4f:44:78:2b:
                    0b:cd:4c:e6:5e:b7:fc:74:70:45:9a:e6:79:4a:e7:
                    eb:52:df:0f:c1:27:d9:aa:b6:d2:ae:79:87:f3:f3:
                    77:70:57:77:2d:d0:34:91:c9:8b:6f:11:5f:ab:d5:
                    24:ee:a3:19:5c:f7:13:63:a0:51:f4:5a:88:a6:e3:
                    22:cb:1e:3d:f1:2c:5b:5b:19:e8:b6:a4:9d:07:6d:
                    03:71:c9:42:e3:a2:c0:b4:12:3d:9c:ef:e5:cf:19:
                    bf:68:64:da:50:89:d5:64:d3:18:e5:00:75:69:dd:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8C:0B:1E:84:67:EA:C0:FB:0E:45:B8:F5:24:E7:3F:E0:84:FC:FD
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3139302e332e3137342e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.3.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:ba:6e:a5:69:98:db:77:64:1a:d9:4a:13:9b:05:a1:64:
         cc:87:dd:57:5d:70:d7:43:b5:c7:c9:64:0a:a3:44:3a:4b:2a:
         ee:1d:0d:8d:b1:63:d7:fc:e0:b2:be:72:dc:9e:e5:4d:5d:a2:
         8d:19:d0:c5:9a:d6:0c:1b:38:ea:7d:ae:d9:1c:4e:6d:49:ac:
         d6:fd:e5:dc:99:0e:1d:c4:f3:35:01:3c:f2:8d:fe:7f:00:84:
         8e:e8:57:b1:8c:68:e6:0e:a8:8b:3a:f3:6d:80:27:5c:5a:6f:
         2d:ee:4f:08:e6:52:ad:64:fa:d7:83:b0:c9:5c:9a:eb:a2:26:
         57:70:79:fc:4b:3d:f3:1a:be:64:02:4f:e8:a0:10:17:37:9e:
         fa:08:b5:1c:50:1a:87:29:dd:6c:9a:60:f4:c2:3d:f4:12:07:
         f1:4c:1b:b7:2e:07:75:cf:08:ed:eb:9e:f0:d0:5e:1a:4e:9a:
         fc:cc:0a:33:99:e5:a7:27:4e:b8:16:0e:0f:2e:88:44:9f:99:
         7c:81:07:16:4b:40:71:71:04:04:b0:d6:d5:cf:b7:05:02:3d:
         39:cb:df:82:ae:7e:5b:4d:e5:63:fc:a9:2d:48:6b:8f:81:ca:
         9d:2b:31:a0:53:8a:3b:a5:c7:f3:fa:ed:38:08:a4:34:90:19:
         fa:83:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:50:42 2025 by rpki-client