Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
File:                     3139302e3130372e36342e302f32302d3232203d3e203237393032.roa (raw, json)
Hash identifier:          R4CIhwObLivO2zFfRNevHDcXAyBBQvTi6xG3Fue6Qg8=
Subject key identifier:   E8:6F:F6:9D:94:C3:77:07:C3:56:6A:09:06:AA:75:5E:BB:28:2E:10
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       14CD5883A148C64550B1DC064C2AF59E59CAE0FD
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa
Signing time:             Tue 04 Feb 2025 18:42:10 +0000
ROA not before:           Tue 04 Feb 2025 18:37:10 +0000
ROA not after:            Tue 03 Feb 2026 18:42:10 +0000
asID:                     27902
IP address blocks:        190.107.64.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cd:58:83:a1:48:c6:45:50:b1:dc:06:4c:2a:f5:9e:59:ca:e0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Feb  4 18:37:10 2025 GMT
            Not After : Feb  3 18:42:10 2026 GMT
        Subject: CN=E86FF69D94C37707C3566A0906AA755EBB282E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:6e:5e:af:4c:11:68:3d:93:d3:95:8b:0d:
                    36:f2:bb:94:ed:6c:d3:be:d1:9c:b8:db:88:0b:d8:
                    f4:2b:df:5a:fa:27:4b:37:26:06:76:ca:85:00:42:
                    6c:4d:24:be:dc:26:37:1e:96:31:f6:ac:41:c4:a6:
                    66:50:ac:f9:38:c1:63:d4:d2:c8:4c:d4:43:5d:61:
                    0c:42:48:3f:79:f0:15:ab:55:0a:12:27:50:e8:f9:
                    e3:95:0b:aa:84:85:b0:12:62:9a:3b:c3:7c:de:cd:
                    a6:b2:21:1b:fe:85:06:4d:9a:c2:53:6f:e6:67:e6:
                    a9:b0:54:63:30:ba:54:15:51:63:6c:3c:3e:d6:97:
                    fe:d0:9d:05:dc:8e:13:ab:8c:18:f2:6c:28:3e:c8:
                    44:4c:cb:41:46:8f:07:79:3f:a6:7a:26:a6:86:cc:
                    be:20:d8:ba:4d:76:c8:73:2a:f8:15:8d:bb:3c:0a:
                    ac:61:9b:ec:a6:c8:8d:e6:6a:d7:08:3e:83:b6:df:
                    5b:d1:4f:28:48:90:e8:19:81:22:cd:92:83:0b:2d:
                    bc:5a:ca:d9:df:13:74:95:c2:f1:14:b6:ae:c4:de:
                    85:e0:0d:4d:3c:ec:31:03:97:9f:0d:48:35:cd:56:
                    bc:12:b4:bc:b9:a6:6f:ee:c2:1e:e2:41:5a:05:86:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:F6:9D:94:C3:77:07:C3:56:6A:09:06:AA:75:5E:BB:28:2E:10
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e36342e302f32302d3232203d3e203237393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:21:e2:00:f6:59:3a:d3:6b:16:14:68:4f:31:ca:b4:e0:00:
         4c:13:de:6f:33:a8:de:e1:6e:d8:a8:bd:77:13:0e:b9:3c:42:
         a2:27:bb:6f:30:d7:bc:63:6a:5d:ce:76:1d:ea:f2:6f:61:9e:
         fa:5e:7d:6d:40:20:90:ae:1f:0c:89:fc:ed:82:27:e3:cb:bd:
         d7:2c:ed:f7:d0:cd:3a:b2:d8:84:86:ee:76:26:95:4e:62:c5:
         e5:bf:08:32:f3:8c:41:38:c2:4b:38:4c:39:14:55:8b:03:76:
         da:f0:0b:eb:6b:c2:d0:ed:af:3e:92:fc:54:fd:4c:3b:2d:42:
         91:58:31:ea:3f:56:e7:78:f8:cc:64:d4:20:9e:0d:bb:46:14:
         c2:f0:50:0d:c1:c4:54:7e:0b:cb:bd:6c:67:ee:dd:24:71:c0:
         fc:6b:44:68:b5:38:9c:99:18:df:77:2c:8b:17:98:b2:53:21:
         51:26:a5:fc:08:d4:41:05:38:dd:6f:66:cc:ec:38:01:ce:ec:
         f9:6e:1c:6e:58:5c:d7:f2:e1:ed:dc:6a:56:1b:01:a9:dc:3c:
         77:09:73:f0:ca:05:57:27:6f:9c:34:e6:3d:0c:0c:7d:d9:79:
         b7:61:c7:a2:25:39:92:93:16:45:cb:6d:36:c4:8d:1f:90:07:
         1c:ee:9d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:15:46 2025 by rpki-client