Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa
File:                     3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa (raw, json)
Hash identifier:          hF97HIN7q803/Xoi+HOuCO3RG7zL0ugabO64D2nBvt8=
Subject key identifier:   5A:94:62:59:06:8D:1F:F5:F4:0D:9E:06:F6:A4:0B:FC:30:D8:38:A8
Certificate issuer:       /CN=C9AE029974BF7364D796B09E2D313FA4128E1865
Certificate serial:       6960625EEAAE810EE8D247C8FC583C63D2B35EC0
Authority key identifier: C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa
Signing time:             Tue 04 Feb 2025 18:55:52 +0000
ROA not before:           Tue 04 Feb 2025 18:50:52 +0000
ROA not after:            Tue 03 Feb 2026 18:55:52 +0000
asID:                     262178
IP address blocks:        190.113.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:60:62:5e:ea:ae:81:0e:e8:d2:47:c8:fc:58:3c:63:d2:b3:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9AE029974BF7364D796B09E2D313FA4128E1865
        Validity
            Not Before: Feb  4 18:50:52 2025 GMT
            Not After : Feb  3 18:55:52 2026 GMT
        Subject: CN=5A946259068D1FF5F40D9E06F6A40BFC30D838A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:a4:da:3d:fc:d9:b6:a5:58:1b:3f:17:4b:
                    3f:33:72:95:71:ce:9c:d9:24:cb:c4:32:31:5b:b9:
                    17:83:52:a0:e6:b8:58:c6:fa:a1:2d:71:b2:6f:16:
                    3b:65:6e:1d:3a:b6:07:6e:a5:eb:d9:a1:2f:df:58:
                    55:e9:ea:14:8f:d9:35:68:b1:ba:d6:52:9d:dd:a0:
                    d2:b1:91:43:91:72:a6:a1:c9:b5:a2:fa:b3:73:42:
                    66:02:0d:8b:63:f5:c1:79:dd:55:04:16:49:0a:ce:
                    a4:4c:f1:4e:87:95:d1:2c:11:6a:21:52:fe:64:8e:
                    8a:69:c6:be:de:c1:6e:21:b2:e7:e1:e0:25:2b:22:
                    63:e2:7d:d5:e4:f3:c5:ed:a1:43:8b:57:69:c6:e6:
                    a8:ad:e8:40:6a:9c:65:cc:7a:66:17:dd:10:5b:80:
                    b0:ef:78:2b:3f:0f:52:0c:28:a7:07:c5:3f:d1:42:
                    f8:0f:99:cc:ea:ed:e7:b3:6f:f4:4f:b9:97:9d:26:
                    b1:f8:a2:5a:d4:4d:f0:9c:a6:1a:b0:62:e0:fd:e8:
                    92:15:2c:f6:57:ac:c0:c9:af:87:29:0e:93:8f:35:
                    63:4a:4f:97:43:17:77:08:67:55:82:32:3c:82:17:
                    3d:b3:b7:f9:75:a7:a8:df:8d:2b:3d:9a:d7:e6:7f:
                    aa:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:62:59:06:8D:1F:F5:F4:0D:9E:06:F6:A4:0B:FC:30:D8:38:A8
            X509v3 Authority Key Identifier:
                keyid:C9:AE:02:99:74:BF:73:64:D7:96:B0:9E:2D:31:3F:A4:12:8E:18:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/C9AE029974BF7364D796B09E2D313FA4128E1865.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C9AE029974BF7364D796B09E2D313FA4128E1865.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EDA73E9B40BD4CB5AD89AA1516A142DD4912160A6D36AC9D3FF104FAF6618089/0/3139302e3131332e36342e302f32302d3234203d3e20323632313738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:73:bd:87:2c:ea:13:56:74:60:69:05:d4:6a:59:25:76:
         45:f1:16:eb:3b:e0:2e:d7:3a:d1:15:23:d8:d1:d3:8f:f4:8e:
         33:db:bb:55:8a:b5:ad:45:c1:5f:a6:e0:ee:d5:93:90:9c:2c:
         9d:27:7c:f5:a2:69:4b:fd:d5:b1:ce:79:88:46:2b:5b:28:76:
         f1:0c:29:2f:4f:d1:c1:b1:89:e8:62:f6:93:cb:d9:9b:f1:1c:
         ae:33:8d:bd:cf:8a:cd:6e:a4:18:f6:28:76:c3:0d:b7:60:a9:
         d2:e5:b5:44:ed:18:a8:c2:2b:27:a9:71:33:ac:b4:ac:c0:30:
         a8:2e:41:1e:f3:d3:9c:75:4d:87:15:9a:f2:29:22:f1:ee:56:
         2b:9e:85:95:ce:0f:9c:20:24:7c:25:2d:37:dd:22:99:d0:0f:
         fb:b6:6c:98:0e:a5:1e:21:e8:65:30:cc:4b:27:56:98:62:17:
         9a:0b:d6:48:69:e2:9b:45:f2:32:11:3c:91:d6:34:d4:c3:9b:
         85:66:5b:6a:07:13:2e:18:a2:5d:c1:0b:14:65:ce:90:dc:93:
         97:2c:a2:84:56:d8:30:34:a9:fe:35:c5:6e:bb:d0:3c:be:0c:
         b7:19:bd:8f:08:40:c7:fd:ef:fc:c4:a1:b0:62:e4:ed:61:92:
         bb:9c:2f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:10:43 2025 by rpki-client