Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa
File:                     3139302e322e302e302f31382d3234203d3e203136383134.roa (raw, json)
Hash identifier:          ot5a+5LIRlYttopqx4u3KE8lJBbxRzgDmAVlw/Itwmk=
Subject key identifier:   0D:77:B6:F2:57:8C:1C:7F:35:0E:98:A8:D2:22:10:BE:04:7B:F2:54
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       74053C1B35B7149912C11269462C507AECBBD044
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa
Signing time:             Tue 04 Feb 2025 20:04:12 +0000
ROA not before:           Tue 04 Feb 2025 19:59:12 +0000
ROA not after:            Tue 03 Feb 2026 20:04:12 +0000
asID:                     16814
IP address blocks:        190.2.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:05:3c:1b:35:b7:14:99:12:c1:12:69:46:2c:50:7a:ec:bb:d0:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:12 2025 GMT
            Not After : Feb  3 20:04:12 2026 GMT
        Subject: CN=0D77B6F2578C1C7F350E98A8D22210BE047BF254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:75:98:49:d7:99:54:7c:fe:35:e8:a8:16:
                    cc:15:5e:51:77:fb:72:7d:cb:8d:e8:2e:f0:03:a0:
                    f0:33:04:c2:7a:5e:c2:65:7a:00:0a:1e:7a:30:62:
                    48:c0:05:30:81:47:23:6f:7e:d4:85:da:f3:f8:05:
                    9a:ac:6e:b9:b9:38:7d:59:66:0b:67:38:20:26:3b:
                    72:07:2d:ba:f6:14:e4:58:30:40:12:76:39:66:b6:
                    39:0d:cd:9c:1a:e8:a3:80:22:bb:cb:89:31:c6:ab:
                    b5:cc:2c:1b:e8:b1:5b:e4:d5:5a:d6:a1:82:de:a6:
                    f1:20:d3:41:d8:57:0f:87:aa:bf:5f:cf:23:0f:ec:
                    97:07:25:90:33:d8:bc:2c:a6:47:fd:87:d8:fa:d8:
                    0d:21:7b:7b:6e:5d:f4:07:40:3b:8e:07:0b:be:ff:
                    ef:e0:8f:77:83:db:71:ea:d6:9b:4d:95:1a:62:e7:
                    19:cd:30:3f:16:d5:35:7d:87:73:32:ae:9f:91:20:
                    eb:cf:8f:d8:db:f4:83:c9:10:7f:9d:91:a8:10:ce:
                    20:03:e3:5e:f1:93:a9:10:5d:03:15:72:30:8e:f4:
                    6a:10:e9:3b:42:00:e2:cf:79:04:b2:2d:cf:ce:6c:
                    d3:57:5d:71:ec:a5:ac:cb:19:3d:a5:85:d8:01:00:
                    39:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:77:B6:F2:57:8C:1C:7F:35:0E:98:A8:D2:22:10:BE:04:7B:F2:54
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e322e302e302f31382d3234203d3e203136383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:09:fe:ce:2e:eb:fc:a3:7c:dd:f0:6e:30:90:e2:ba:64:
         19:cf:18:08:82:3c:c6:7e:e1:43:e4:4a:fb:bb:98:13:14:39:
         73:12:1a:1f:a2:75:cb:79:86:98:c8:b2:c8:c3:01:74:fd:17:
         8e:79:49:0c:4f:66:fa:4e:18:fd:90:e4:d4:d3:b8:16:d4:9a:
         b0:fd:2d:31:37:ae:26:23:0d:04:79:5f:b1:61:0e:cb:6b:1c:
         3e:72:1e:84:e1:48:e3:0e:12:ad:98:6e:0f:e4:f4:1c:d6:c5:
         62:0f:1f:54:b4:b6:db:6f:71:72:b5:dd:f3:96:13:41:6f:08:
         ef:2d:0c:ff:01:12:6d:46:b9:e7:c3:1d:64:ed:c7:a2:f5:35:
         95:6a:f5:69:54:45:3a:88:46:cf:c3:fd:37:fc:6d:ae:20:3d:
         cb:b6:7a:6c:57:2c:96:48:25:24:09:62:a8:bf:00:32:a0:d3:
         ba:df:02:4b:cf:31:a7:ec:9a:6a:c7:7a:fb:dd:3b:90:c5:a0:
         ac:f5:3c:ed:af:8d:0d:05:08:f8:a8:4a:c7:64:35:dc:ee:ee:
         39:a3:c5:5a:b5:4d:ec:c4:aa:f7:a4:b7:ac:ef:c9:fe:04:2b:
         59:58:35:81:b5:03:83:0c:f2:f9:12:fb:1d:a1:fd:c6:bf:96:
         7d:48:54:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:38:05 2025 by rpki-client