Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20333935313631.roa
File:                     3139302e3130332e3137362e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          t/ffXsRrk9u5o2AJehvfRiI8paHxT4rS0Psj7ydMGsc=
Subject key identifier:   D7:47:12:9F:3E:5E:D1:84:00:35:0B:BC:0D:47:F0:7D:4D:11:AF:DA
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       2486D0043F533C0A438E8FEAC9EE77F221F3ECAD
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 04 Feb 2025 18:52:36 +0000
ROA not before:           Tue 04 Feb 2025 18:47:36 +0000
ROA not after:            Tue 03 Feb 2026 18:52:36 +0000
asID:                     395161
IP address blocks:        190.103.176.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:d0:04:3f:53:3c:0a:43:8e:8f:ea:c9:ee:77:f2:21:f3:ec:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Feb  4 18:47:36 2025 GMT
            Not After : Feb  3 18:52:36 2026 GMT
        Subject: CN=D747129F3E5ED18400350BBC0D47F07D4D11AFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:41:da:38:78:28:8c:d1:58:49:d1:fd:dc:eb:
                    54:fa:a3:a7:cb:5c:04:a7:06:72:14:d9:6a:db:ed:
                    53:39:35:53:02:f3:b1:f1:5f:e0:a1:d1:a7:a8:b4:
                    ec:93:8e:40:d6:fc:fd:a4:8b:0d:82:4f:1d:fd:b4:
                    4f:8c:c6:e1:c6:00:88:b3:3f:f7:72:66:c9:74:1b:
                    24:91:04:a0:78:06:b6:b6:a5:30:07:4c:8e:0d:f8:
                    56:c8:07:6a:82:54:fd:d3:ad:58:b6:28:a7:b1:0f:
                    97:30:0a:67:42:84:dc:df:c0:77:b0:b3:53:64:c0:
                    c4:4e:48:45:08:05:e3:f2:a9:ad:21:7e:60:9d:e0:
                    db:b1:9b:6f:a0:38:e4:6a:72:52:04:9a:8c:fb:82:
                    0d:70:31:e5:c5:d4:a8:e1:bf:cf:52:d2:e3:28:26:
                    73:b7:0d:b6:44:bb:64:06:4d:7e:9c:c2:26:16:61:
                    47:65:a6:14:cf:67:7b:a7:55:30:6d:e0:06:1b:cd:
                    a8:31:b4:e9:a3:75:92:64:06:12:fd:bf:3e:2d:e5:
                    f0:c3:5f:99:c8:a0:44:b6:81:33:46:ba:97:bd:00:
                    b3:9b:db:dd:a1:cd:2c:d3:5e:67:fc:d4:de:3c:c3:
                    b6:14:6e:d6:1e:a8:b8:c4:f1:b1:e0:74:79:91:ea:
                    dd:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:12:9F:3E:5E:D1:84:00:35:0B:BC:0D:47:F0:7D:4D:11:AF:DA
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3139302e3130332e3137362e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:34:7c:f8:5e:36:e4:91:13:5f:49:c6:db:a7:3f:4b:ab:40:
         7f:2a:7d:83:74:f9:9f:d9:a2:b3:a6:80:e7:73:31:bd:2c:7f:
         78:ea:97:95:f3:f5:4c:ed:fc:c8:0a:0f:c3:db:37:29:56:ad:
         fb:a2:2b:81:15:a6:42:01:7a:ed:de:e5:fd:8d:fe:63:d5:40:
         87:3d:89:fe:ed:be:e5:b1:da:53:4f:97:30:40:68:9c:45:99:
         96:31:8b:dc:ab:c7:2f:80:4c:a8:88:a7:17:19:4e:86:36:12:
         2e:6d:5d:6b:76:fd:50:5d:25:30:5e:a6:41:30:8e:45:dc:d1:
         45:70:ff:2c:2f:75:7b:c1:8e:f5:58:aa:16:65:19:8c:aa:dd:
         45:16:b4:4a:8d:9e:5f:59:df:de:7d:ea:d0:74:0b:2b:cb:aa:
         0f:d3:f5:6a:4e:56:59:b7:e2:36:4e:74:10:66:27:ab:fe:9d:
         05:82:64:96:ae:c6:f2:ed:4f:c3:c1:b3:78:51:7a:c5:7a:f6:
         b7:da:2b:dd:50:f4:05:4f:fb:b7:59:e9:13:d7:24:78:53:1f:
         3e:38:ee:90:56:fe:6e:08:9f:75:69:fd:2a:a3:79:81:e6:8d:
         df:15:4a:87:a8:be:95:8f:ec:40:ba:e2:8f:f9:5a:48:cf:0d:
         ff:ac:d7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:07:38 2025 by rpki-client