Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3234203d3e203532343235.roa
File:                     3139302e39322e3130342e302f32322d3234203d3e203532343235.roa (raw, json)
Hash identifier:          STvpJsRgbS+z8CvzH2JUdOniDlL8uW4ylQXsS/WJ0+I=
Subject key identifier:   B6:38:D6:2A:9E:1B:73:29:6B:08:C1:69:30:B6:BE:82:ED:4F:F8:B1
Certificate issuer:       /CN=D663037914FA22285F5A90948270F4B18D3F2D85
Certificate serial:       617F176C1C104100FF0E7AC3013C00B172C9796A
Authority key identifier: D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3234203d3e203532343235.roa
Signing time:             Tue 04 Feb 2025 18:05:58 +0000
ROA not before:           Tue 04 Feb 2025 18:00:58 +0000
ROA not after:            Tue 03 Feb 2026 18:05:58 +0000
asID:                     52425
IP address blocks:        190.92.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:17:6c:1c:10:41:00:ff:0e:7a:c3:01:3c:00:b1:72:c9:79:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D663037914FA22285F5A90948270F4B18D3F2D85
        Validity
            Not Before: Feb  4 18:00:58 2025 GMT
            Not After : Feb  3 18:05:58 2026 GMT
        Subject: CN=B638D62A9E1B73296B08C16930B6BE82ED4FF8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:ed:c0:09:3a:3f:4a:d8:e0:0e:40:cd:79:
                    33:b2:0d:32:92:39:0d:95:b4:ed:39:b6:40:f7:f9:
                    07:af:6c:2a:a8:bc:01:f9:d9:d3:60:95:b9:13:62:
                    43:ea:1c:33:4a:92:08:c0:8d:d3:44:55:7c:37:1d:
                    75:0f:91:0d:7c:17:ae:d7:96:65:2f:b1:04:47:22:
                    aa:f2:f9:66:fa:ed:69:02:7e:4c:10:16:d1:e6:55:
                    06:6b:60:1e:e4:ac:f6:93:c8:59:c4:03:e7:73:f0:
                    26:ab:a5:37:f5:bc:77:f0:1e:38:f8:d7:41:82:31:
                    9f:0c:86:68:ea:f7:bd:61:8b:18:e8:6f:4a:e8:fb:
                    7a:4b:2c:61:9f:cd:f8:fa:fb:a9:80:3b:d4:3b:f1:
                    a7:5a:c3:f1:cf:20:a4:8d:4c:31:45:d0:b9:a0:e4:
                    40:2a:e1:f3:37:96:af:5e:1f:01:57:0a:ce:dd:33:
                    81:2e:1a:19:5b:07:01:de:5a:29:52:09:43:0f:90:
                    56:2f:10:21:30:11:3b:6b:2a:6b:6b:e6:d3:70:e4:
                    c9:09:36:4a:3a:e1:b9:86:8e:f0:f5:1f:94:96:b7:
                    40:81:89:91:b6:ff:8a:5c:56:65:af:a4:93:67:6b:
                    2d:6b:b4:e2:ee:17:a5:ec:32:78:e7:6b:b3:43:47:
                    3b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:38:D6:2A:9E:1B:73:29:6B:08:C1:69:30:B6:BE:82:ED:4F:F8:B1
            X509v3 Authority Key Identifier:
                keyid:D6:63:03:79:14:FA:22:28:5F:5A:90:94:82:70:F4:B1:8D:3F:2D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/D663037914FA22285F5A90948270F4B18D3F2D85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D663037914FA22285F5A90948270F4B18D3F2D85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BBFFBF6405F5FE441C4C5CCF0763F033426C3B473A8B887A4F3EA9F065235D4C/0/3139302e39322e3130342e302f32322d3234203d3e203532343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:41:2f:51:03:9d:0d:bf:69:cd:00:dc:85:9b:c5:23:0d:f9:
         75:cb:77:6e:19:1e:af:ba:3e:59:8d:af:3d:7a:fc:2e:2d:22:
         fd:a1:21:96:25:35:c8:91:d1:51:42:d6:b4:d8:97:92:b5:70:
         40:96:2c:32:32:5e:57:50:3b:aa:7d:60:88:5b:24:3e:09:f2:
         c4:e3:36:40:a6:8d:76:a0:0b:35:c2:bc:b7:d2:61:6d:32:d0:
         dd:52:c4:64:a5:d3:72:01:22:63:39:c0:d4:37:fc:2f:3d:a1:
         de:16:20:ba:c9:f9:8a:92:f5:ec:51:37:30:56:a2:8d:4b:ca:
         aa:54:e9:41:8b:9f:bd:46:6c:c4:de:e9:8d:ed:5b:a9:3a:d0:
         f0:3a:ce:58:f2:94:c3:c6:f0:91:51:07:d3:d9:b8:a8:a4:c5:
         90:11:8e:9a:dd:42:84:73:5c:70:78:98:7b:11:be:dc:58:86:
         af:2d:45:f3:5d:24:46:e1:13:60:c3:d2:a9:ef:f6:48:c6:29:
         4f:89:13:6f:ce:1e:97:30:a2:fc:9f:04:c7:56:fa:92:8a:67:
         3e:00:2e:75:43:60:0b:b2:b3:57:0d:30:af:77:33:e9:8f:4f:
         cd:d7:22:3c:b6:b6:43:01:62:26:18:61:10:4b:51:b3:51:4a:
         fa:6d:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:07 2025 by rpki-client