Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa
File:                     3139302e38332e382e302f32322d3332203d3e20323639393236.roa (raw, json)
Hash identifier:          AurYXLpwzS6Y/EXqaVjoAY7RKYMGjJK1F7eqUolf1cA=
Subject key identifier:   E1:8F:77:9F:10:0D:56:E2:99:4F:0F:4A:93:7F:E6:CC:53:3D:DD:68
Certificate issuer:       /CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
Certificate serial:       1AE7CF3DB531D22C0F63B93F25CD740CABB01086
Authority key identifier: 28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa
Signing time:             Tue 04 Feb 2025 18:29:25 +0000
ROA not before:           Tue 04 Feb 2025 18:24:25 +0000
ROA not after:            Tue 03 Feb 2026 18:29:25 +0000
asID:                     269926
IP address blocks:        190.83.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:cf:3d:b5:31:d2:2c:0f:63:b9:3f:25:cd:74:0c:ab:b0:10:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28CCEC43A92B4BCC9B792D757C716F93C5133B6F
        Validity
            Not Before: Feb  4 18:24:25 2025 GMT
            Not After : Feb  3 18:29:25 2026 GMT
        Subject: CN=E18F779F100D56E2994F0F4A937FE6CC533DDD68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:31:10:7b:69:d1:ec:92:94:d0:3e:42:a0:
                    f6:7e:4a:32:a4:49:69:d9:c9:ba:f9:7a:d4:2b:c0:
                    07:2d:88:64:5f:48:6c:28:f9:f3:b2:06:03:d6:e8:
                    88:b5:84:8d:7a:35:88:e4:2b:7c:a7:a6:07:b0:eb:
                    3e:62:f5:03:70:92:74:59:2d:35:e2:43:6c:4a:e9:
                    b7:96:b7:db:86:41:73:7f:ce:72:b7:e2:bb:49:8b:
                    8d:c2:46:2f:f0:07:46:b1:e2:05:75:05:82:97:19:
                    45:a6:7a:92:26:16:85:39:4d:90:95:e8:98:8b:e4:
                    b6:d8:de:a2:b4:b3:51:4d:86:da:16:75:36:01:ac:
                    3e:f0:4f:3d:72:2e:2c:5a:60:9f:db:a8:99:43:45:
                    54:70:34:26:63:3b:88:ec:64:ff:d8:0f:4f:77:dd:
                    71:96:65:eb:43:7f:f8:61:80:e5:62:b9:5b:b2:b2:
                    2d:af:d5:94:f6:5a:d7:11:92:33:10:a9:94:7b:6c:
                    59:24:38:3f:06:52:7d:0b:d3:91:a3:11:b7:0b:73:
                    f1:7a:2b:bd:28:de:6e:69:32:27:bf:ce:6c:ba:3c:
                    66:18:55:7a:27:bb:f0:bd:92:e2:cf:f5:b7:a2:64:
                    fd:e4:af:7a:ce:18:a1:3f:de:51:3d:b0:de:0f:12:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8F:77:9F:10:0D:56:E2:99:4F:0F:4A:93:7F:E6:CC:53:3D:DD:68
            X509v3 Authority Key Identifier:
                keyid:28:CC:EC:43:A9:2B:4B:CC:9B:79:2D:75:7C:71:6F:93:C5:13:3B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/28CCEC43A92B4BCC9B792D757C716F93C5133B6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ED81BD5F6096A6AD52178286CD692BFA335006CB16DF0E5FBB8E1CA97372E800/0/3139302e38332e382e302f32322d3332203d3e20323639393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:97:8e:84:6c:7d:bf:1a:2d:8d:a6:96:b5:b0:9a:7e:00:
         1d:36:a4:01:a4:c5:fd:f6:43:58:28:a1:1d:50:48:6b:4e:2b:
         90:a5:94:23:12:ca:2e:53:83:23:dd:31:c4:75:88:02:88:2a:
         ed:ab:20:fb:be:bf:ab:a6:02:68:1a:b4:84:f0:96:92:c3:83:
         05:66:5b:68:ab:cc:2d:87:20:eb:63:6a:d5:f7:65:0c:80:cd:
         f5:af:90:83:dd:0f:2e:35:d5:90:66:86:81:a0:da:b0:78:e2:
         0f:6e:57:44:62:75:6e:7c:96:57:fa:79:35:c6:c9:dd:8b:42:
         40:4a:69:f4:bd:13:db:31:d9:2f:87:3c:a7:8b:a1:c1:b7:5e:
         94:62:09:45:a6:64:0d:dc:26:ad:df:4c:75:94:9b:eb:f4:bf:
         9c:df:77:18:e4:8f:aa:a4:1c:66:7d:96:4b:d2:da:a8:75:90:
         7a:0e:2b:e4:53:f8:da:f5:6f:ed:b2:3f:28:a9:e2:dc:61:cb:
         6d:65:43:92:d5:8f:43:22:0a:01:37:24:2b:8b:53:64:ab:44:
         7a:97:a7:0f:cc:71:38:66:c6:d3:a5:2f:05:61:b9:c5:20:16:
         36:ac:66:51:07:82:b8:16:02:81:b2:60:c1:86:52:85:e6:66:
         fa:22:d9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:25:58 2025 by rpki-client