Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132342e302f32322d3234203d3e20323733323034.roa
File:                     3139302e3130322e3132342e302f32322d3234203d3e20323733323034.roa (raw, json)
Hash identifier:          0eEiA6lpTNwuBT5eTSeJWT4T04PC8KfCv367Njax3BA=
Subject key identifier:   68:22:44:AC:45:EF:7C:1F:A4:D0:1F:D8:46:9C:7C:81:F7:50:6A:38
Certificate issuer:       /CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
Certificate serial:       71E667B08605FCCC576B9ADC20FBDFDC019DB4F7
Authority key identifier: 0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132342e302f32322d3234203d3e20323733323034.roa
Signing time:             Wed 26 Mar 2025 18:12:58 +0000
ROA not before:           Wed 26 Mar 2025 18:07:58 +0000
ROA not after:            Wed 25 Mar 2026 18:12:58 +0000
asID:                     273204
IP address blocks:        190.102.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e6:67:b0:86:05:fc:cc:57:6b:9a:dc:20:fb:df:dc:01:9d:b4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F225EF900A741ED0067293A5D9297AE3DA8CE60
        Validity
            Not Before: Mar 26 18:07:58 2025 GMT
            Not After : Mar 25 18:12:58 2026 GMT
        Subject: CN=682244AC45EF7C1FA4D01FD8469C7C81F7506A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:77:e5:cf:52:cd:12:be:b6:8d:71:b9:d9:
                    cd:cf:4c:34:3e:07:a7:bb:17:8c:27:17:43:fa:ac:
                    0b:b2:a0:c4:17:5b:fd:0c:d8:50:2e:24:53:88:bb:
                    0d:76:16:00:4d:37:59:45:7c:7b:20:22:00:2f:dc:
                    68:5f:73:e0:97:3b:46:47:ad:e4:b8:7c:65:b2:77:
                    26:e2:34:35:f1:38:1a:6f:82:05:a8:c7:65:78:19:
                    e5:fb:b9:11:fa:59:09:25:21:b7:3c:62:85:b4:76:
                    d5:50:f2:ba:0e:1a:32:59:24:0f:56:ac:ab:5a:eb:
                    f6:02:69:aa:4f:f7:33:f0:0a:48:08:bc:58:17:f9:
                    ea:94:44:0c:f6:55:b9:41:89:bf:07:2c:5b:9d:31:
                    af:09:c1:41:90:67:2c:f8:43:01:e0:9f:37:e0:3f:
                    ea:32:5d:fb:58:f8:b1:71:a1:3c:e5:9d:4e:f7:f6:
                    bd:48:4d:dd:06:51:71:d2:f5:0c:6c:7a:9e:e9:82:
                    96:94:32:b3:0d:1f:13:9a:a0:47:fb:32:a6:77:8e:
                    74:b2:95:92:12:08:09:81:df:69:40:6b:41:d7:a5:
                    47:46:0c:d4:36:05:1d:d6:30:ef:12:0b:d2:93:b1:
                    cd:fe:76:a6:90:f9:54:c8:a1:76:6f:51:99:29:c0:
                    be:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:22:44:AC:45:EF:7C:1F:A4:D0:1F:D8:46:9C:7C:81:F7:50:6A:38
            X509v3 Authority Key Identifier:
                keyid:0F:22:5E:F9:00:A7:41:ED:00:67:29:3A:5D:92:97:AE:3D:A8:CE:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F225EF900A741ED0067293A5D9297AE3DA8CE60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB50886B8EF3600BE6CD999C5EFE5C66996A5B0E802DC336F3EF451384813E54/0/3139302e3130322e3132342e302f32322d3234203d3e20323733323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:67:ca:57:a4:f3:44:7f:46:f9:be:60:ad:ec:eb:16:2f:
         da:5b:16:18:1b:46:fa:2d:f0:7e:f2:7e:18:c3:44:6a:8e:72:
         16:0f:2b:5b:7b:d6:78:01:55:95:0b:11:10:76:b5:9d:df:32:
         88:8b:48:6f:f2:b9:73:79:06:f6:60:18:4e:09:07:48:2c:5c:
         bb:52:8f:e2:dd:c0:af:b9:e8:84:93:66:58:52:c4:76:f8:9d:
         e2:e8:5b:d9:01:ff:47:ed:ff:11:10:b5:4a:47:5b:c7:78:f2:
         f5:1f:55:fe:b7:f1:e0:71:d8:8e:aa:7d:c4:97:39:ec:70:bf:
         1e:14:2d:ef:4c:f6:fb:0b:a0:70:fb:df:a0:9c:da:4f:e2:5b:
         d6:27:67:d8:95:f5:ff:26:86:08:64:87:5c:7d:e6:26:b4:3f:
         40:21:2c:59:07:b6:98:3c:aa:7c:4e:49:6e:09:66:38:55:81:
         e9:4b:3b:60:c0:cd:f6:d3:42:4e:40:e7:3b:13:af:46:d6:a6:
         85:ac:f7:eb:8e:f8:f1:22:a6:0f:eb:5f:dd:f7:56:37:e4:49:
         78:94:07:e2:70:42:71:07:37:fb:3e:1b:98:49:60:81:c1:7d:
         ea:b4:bd:11:91:26:fa:66:1e:73:80:da:2b:8b:18:1b:3d:5b:
         31:78:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:38:37 2025 by rpki-client