Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa
File:                     3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa (raw, json)
Hash identifier:          6QS1jAWFlbbXyGLfNXoNWRTU4uibee+x+/p6w5E3468=
Subject key identifier:   37:4A:E7:B3:AC:C2:74:17:FC:62:0F:A9:83:5D:00:1E:F0:11:51:F3
Certificate issuer:       /CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
Certificate serial:       0DA49D42ED8DBE8560D1DB26AF66901885FA7A4A
Authority key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa
Signing time:             Tue 04 Feb 2025 18:42:10 +0000
ROA not before:           Tue 04 Feb 2025 18:37:10 +0000
ROA not after:            Tue 03 Feb 2026 18:42:10 +0000
asID:                     263238
IP address blocks:        190.107.70.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a4:9d:42:ed:8d:be:85:60:d1:db:26:af:66:90:18:85:fa:7a:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673
        Validity
            Not Before: Feb  4 18:37:10 2025 GMT
            Not After : Feb  3 18:42:10 2026 GMT
        Subject: CN=374AE7B3ACC27417FC620FA9835D001EF01151F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d3:06:4d:02:13:5a:0e:2d:90:2c:35:67:88:
                    22:83:b2:51:3e:42:0d:96:ce:bd:11:70:a0:8d:d2:
                    3f:46:bd:00:62:06:60:e6:63:ee:fb:12:fb:c0:92:
                    52:83:f1:83:b7:60:30:84:0c:ef:39:56:2d:82:42:
                    8d:a4:b4:b7:31:b5:19:06:e9:28:68:34:b5:8e:f6:
                    e4:37:d5:11:af:3d:09:1a:13:21:c3:00:03:bf:39:
                    8e:4a:0c:62:fa:be:66:c6:3e:bc:df:80:36:c0:85:
                    1a:87:f6:ed:60:dd:cf:ff:e3:9e:8d:b4:19:85:2e:
                    b2:7c:8a:f6:cd:78:43:6d:8a:96:52:16:23:48:d2:
                    03:36:95:4a:09:38:f8:f7:a2:fe:96:4c:93:d2:0b:
                    e2:cd:33:34:c1:b6:ee:a1:00:92:9b:e8:eb:79:d6:
                    70:1e:d4:00:ba:8a:86:bb:98:db:5c:fe:46:1e:3e:
                    91:92:d3:5a:8b:73:7f:92:9f:20:6a:d2:93:3f:d4:
                    f8:94:ff:ca:98:eb:4f:35:38:b9:01:91:fd:aa:58:
                    a1:4e:28:ed:ba:c9:ff:41:8d:1a:dd:f8:20:cc:15:
                    ba:c3:b9:dc:23:84:8c:20:2e:5e:2d:05:de:7c:4f:
                    49:24:62:14:99:bd:2a:fa:26:f0:67:83:7f:50:c8:
                    87:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4A:E7:B3:AC:C2:74:17:FC:62:0F:A9:83:5D:00:1E:F0:11:51:F3
            X509v3 Authority Key Identifier:
                keyid:FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/3139302e3130372e37302e302f32342d3234203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:7d:ad:a8:c5:f1:c1:1b:c8:e3:6e:7c:93:e9:40:d6:37:
         7e:e3:26:5e:55:61:46:cd:94:79:db:ed:06:dd:55:7c:e1:f7:
         f8:e7:07:65:b1:26:07:24:05:0c:6e:4b:f6:c1:56:e8:e1:6d:
         37:18:c3:78:80:6e:6a:6f:aa:19:f7:37:5d:ea:f3:a8:4c:fd:
         35:9c:3e:db:db:1f:f7:9e:91:de:0b:59:c7:e1:83:e2:0c:d0:
         a4:18:8c:45:d8:46:d5:91:73:9d:14:0e:1b:00:8b:18:eb:93:
         4a:04:f9:8b:44:f8:0b:be:83:bb:75:2a:f0:22:be:e8:78:78:
         3a:d9:50:d2:c2:91:ee:ae:3f:c3:3a:12:4a:7e:46:e2:b4:2a:
         82:f3:39:81:bc:83:55:51:59:7e:9a:50:c0:53:c5:e7:0b:c1:
         67:7f:81:ef:42:c8:5c:81:9a:31:7c:8c:dd:c9:30:53:ed:d5:
         47:52:76:bf:95:7f:0d:0b:6f:04:7f:68:c8:4f:c5:3a:48:21:
         80:22:c5:bd:16:28:bf:f0:4a:93:62:ca:3f:42:7c:da:f1:c8:
         6b:c1:3a:59:b2:60:27:44:f6:3a:3b:bb:72:c3:b4:2f:96:e1:
         bc:a6:cf:be:ba:c2:d3:b1:b2:95:b4:b2:b1:ee:20:db:b9:02:
         cb:3d:ee:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:57:44 2025 by rpki-client