Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa
File:                     3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa (raw, json)
Hash identifier:          JkR8jDcCtM5L2tlDWHaVmtXkobmAb9ve4ZSqG4QbTJ0=
Subject key identifier:   B0:58:60:91:3C:F5:70:43:CE:85:F8:7A:4A:26:7B:C4:5A:74:13:A5
Certificate issuer:       /CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
Certificate serial:       2B7B919FE4DE529E555ECF3648E3AB0F99FD342E
Authority key identifier: 0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa
Signing time:             Tue 04 Feb 2025 18:18:35 +0000
ROA not before:           Tue 04 Feb 2025 18:13:35 +0000
ROA not after:            Tue 03 Feb 2026 18:18:35 +0000
asID:                     271792
IP address blocks:        190.171.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7b:91:9f:e4:de:52:9e:55:5e:cf:36:48:e3:ab:0f:99:fd:34:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A72DC25D420B15DD00FF3323CB446E7A055F3BE
        Validity
            Not Before: Feb  4 18:13:35 2025 GMT
            Not After : Feb  3 18:18:35 2026 GMT
        Subject: CN=B05860913CF57043CE85F87A4A267BC45A7413A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8a:01:cd:7c:e0:63:db:45:fa:75:af:43:83:
                    e8:e7:c3:b5:e8:f9:1e:74:21:55:fc:54:ae:43:9f:
                    6d:78:60:cf:61:90:bf:96:35:4f:8d:f2:fe:08:c0:
                    64:ec:73:6c:0f:29:80:0f:29:5b:07:67:be:76:0c:
                    c3:22:07:b2:de:47:89:db:e5:a3:26:02:7d:b9:9e:
                    a9:97:94:c3:cd:83:aa:87:4f:77:45:83:91:95:63:
                    29:a0:96:27:ff:86:e4:5d:8d:6f:31:89:ba:cc:37:
                    f4:87:03:70:e2:bc:96:5c:80:b5:86:96:12:83:3a:
                    1d:15:74:d4:be:59:15:0f:c4:7e:a9:dc:ef:75:bd:
                    f1:6c:7d:ef:93:b9:d0:bb:01:60:23:7d:c9:16:e1:
                    c3:98:85:26:39:2e:01:11:93:83:95:30:3a:d6:76:
                    7e:d2:26:ae:cb:2c:27:15:76:4d:54:b8:ac:65:49:
                    10:b6:93:4a:23:44:82:5f:31:b9:0a:c3:aa:17:44:
                    9d:30:55:95:66:aa:ee:d1:13:2d:0a:7c:e9:e0:07:
                    f4:a6:ec:e7:c4:33:0b:ac:14:3d:c6:7f:bc:3d:ea:
                    8c:60:45:d6:bf:5c:f6:1d:d2:e9:b8:4b:f5:ed:69:
                    ee:1c:71:05:a9:8e:f1:0a:83:58:3b:73:27:8a:69:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:58:60:91:3C:F5:70:43:CE:85:F8:7A:4A:26:7B:C4:5A:74:13:A5
            X509v3 Authority Key Identifier:
                keyid:0A:72:DC:25:D4:20:B1:5D:D0:0F:F3:32:3C:B4:46:E7:A0:55:F3:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0A72DC25D420B15DD00FF3323CB446E7A055F3BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D986FF7194FB2000A64C23C93E048A61F1672C1CD6C5FB29EAD37980641AFCA7/0/3139302e3137312e37362e302f32322d3234203d3e20323731373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:ed:63:2f:c4:43:73:41:6c:a5:ae:53:f7:bf:f4:d8:33:ba:
         57:43:38:e4:ee:da:7a:89:fa:24:ed:57:bf:b1:58:a7:1c:e4:
         b5:7c:d3:eb:d1:11:19:d4:51:e4:73:0e:e0:f9:76:14:87:ba:
         88:c5:4e:7e:95:3e:42:76:bb:95:40:8e:46:38:22:51:71:e9:
         32:35:6f:9e:1f:e8:a2:3c:b7:7d:ee:6b:a6:a8:d6:c9:c3:a9:
         96:cd:2a:02:55:b7:82:6a:dc:74:61:ef:ae:d1:88:ff:9d:ca:
         f7:be:87:9f:cc:2b:b4:61:b9:fd:8d:03:a9:71:f4:b9:7c:58:
         14:97:3d:d5:cc:15:ea:21:32:73:03:a1:71:ce:f1:46:32:6e:
         56:17:d3:2c:d5:80:ac:bb:8d:cc:c3:75:df:b0:fe:38:a2:20:
         6d:b0:5c:fb:5c:60:2a:36:2a:78:64:ad:9b:a9:3d:b5:6f:9d:
         8c:6f:be:fd:ca:82:26:62:17:79:c1:2c:76:1e:43:0a:5f:de:
         f6:e7:70:90:dc:4a:04:4c:eb:57:4f:77:f3:44:96:50:6a:85:
         76:a4:e3:9a:44:ad:1e:b2:a2:02:52:98:0a:34:7f:5a:38:b3:
         b8:f5:0b:85:c1:22:0f:63:60:04:2e:1c:54:07:f5:ed:34:54:
         99:7e:5c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:53 2025 by rpki-client