Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa
File:                     3139302e32302e302e302f31362d3234203d3e2037343138.roa (raw, json)
Hash identifier:          RVMMPWhiM5u//sAMX1nVHDuqE5dLfp9Ogz6FkZCXtKs=
Subject key identifier:   38:02:14:F7:D5:5D:BE:B1:92:31:CE:A3:C2:84:FF:DE:46:AD:4B:91
Certificate issuer:       /CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
Certificate serial:       495DAA7C76417E0FC37BF620144F4A215EF351BF
Authority key identifier: 25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa
Signing time:             Tue 04 Feb 2025 18:29:51 +0000
ROA not before:           Tue 04 Feb 2025 18:24:51 +0000
ROA not after:            Tue 03 Feb 2026 18:29:51 +0000
asID:                     7418
IP address blocks:        190.20.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5d:aa:7c:76:41:7e:0f:c3:7b:f6:20:14:4f:4a:21:5e:f3:51:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25CD6A4FBC8BEE34A2DC371793A09E274E0E3661
        Validity
            Not Before: Feb  4 18:24:51 2025 GMT
            Not After : Feb  3 18:29:51 2026 GMT
        Subject: CN=380214F7D55DBEB19231CEA3C284FFDE46AD4B91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:64:31:e5:24:3c:c0:ad:48:0e:4b:5a:0e:9f:
                    c0:17:60:0f:0e:bb:2f:d2:e7:61:79:ea:b3:f7:bf:
                    2a:cd:e2:fd:73:75:b9:97:ab:70:e4:da:d5:9e:ac:
                    d6:e8:66:1a:92:41:77:b5:cb:3a:ec:6c:00:67:60:
                    af:93:f1:cc:d0:20:e2:bc:a8:bd:14:90:33:c8:36:
                    0f:68:09:5e:a5:c3:04:b2:2a:b7:5c:83:4d:78:e3:
                    73:52:92:85:bd:42:6e:11:50:4a:b8:00:27:f1:25:
                    d5:8f:c4:86:9e:f0:de:2b:8a:b9:02:58:57:b3:a9:
                    ba:79:db:ae:0a:0a:37:94:b8:77:2c:3d:0e:ee:c3:
                    ef:c4:53:05:be:b5:86:3d:c4:c5:5d:30:33:a7:a6:
                    dc:23:ea:7a:6a:b3:71:2c:fb:68:86:a3:b9:b4:9a:
                    a8:a3:90:f7:2d:69:d9:21:39:91:f8:df:ec:c1:11:
                    fc:35:ff:19:40:6b:8d:66:06:1a:5f:d0:18:3a:29:
                    a0:f7:8c:8a:e2:6d:35:a9:d0:7d:1c:1c:fc:2c:53:
                    9a:4e:5f:90:03:ce:56:92:cf:4a:6f:ab:d8:60:4a:
                    d6:d1:83:5a:62:0c:b6:37:3b:58:02:40:ad:2e:65:
                    ad:6d:dd:44:86:7a:3b:a6:b1:d5:bf:58:c3:a6:56:
                    5d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:02:14:F7:D5:5D:BE:B1:92:31:CE:A3:C2:84:FF:DE:46:AD:4B:91
            X509v3 Authority Key Identifier:
                keyid:25:CD:6A:4F:BC:8B:EE:34:A2:DC:37:17:93:A0:9E:27:4E:0E:36:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25CD6A4FBC8BEE34A2DC371793A09E274E0E3661.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D952BACB6D27E48267036F7CBD6CC4ADEE60BA1D1CFF5EF59481A90BA2071DD7/0/3139302e32302e302e302f31362d3234203d3e2037343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.20.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:71:82:60:34:a6:ad:d4:de:2c:07:d3:81:a7:0d:8d:91:50:
         cc:4a:78:26:a9:ff:b8:d9:6d:18:63:98:e0:08:09:aa:df:3a:
         ba:49:fa:5a:54:d9:71:ef:68:45:c2:2e:78:21:8d:b3:78:9f:
         01:22:55:18:f4:2e:25:e1:84:96:d9:91:02:eb:fd:9f:38:5f:
         e2:21:a6:cb:a9:3f:8a:df:f6:a7:a3:d3:47:bc:f3:63:1d:35:
         41:45:54:77:9f:e4:e5:ab:06:8d:fc:e1:70:b9:2b:32:ac:65:
         9a:df:1e:d8:c4:da:1c:09:d0:33:ea:5b:47:dd:e9:be:fa:aa:
         19:92:e2:67:0c:2e:30:96:fe:14:67:4f:df:49:94:8b:da:36:
         1d:38:ad:b7:3f:37:13:7f:26:3b:8f:da:a0:a3:92:49:a4:4b:
         96:dc:05:49:71:50:8b:02:88:c2:ac:fe:2e:12:4e:64:1e:dd:
         8e:dd:6a:3d:51:a0:7f:14:30:b3:ed:4d:e8:fe:fd:4a:f2:66:
         e5:2f:f8:e4:38:4d:e8:dd:76:95:f0:83:36:28:c2:a2:83:34:
         1f:ee:17:64:19:dc:6c:fd:05:4a:7d:5c:b9:03:55:33:23:42:
         9d:70:10:4b:d4:a0:73:8e:e5:5c:38:8d:9e:2c:7b:1d:a0:2f:
         e9:75:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:31 2025 by rpki-client