Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5bb81559dcc926e4c77ea9d71437264f8760ab0c.roa
File:                     5bb81559dcc926e4c77ea9d71437264f8760ab0c.roa (raw, json)
Hash identifier:          l3BMXGxzqS0MTB6hilBnwHiPzjZmAGSCzGW5kOBgYQU=
Subject key identifier:   D5:57:49:64:49:0D:7D:B3:A3:38:88:5C:95:E2:BE:26:F8:12:BC:16
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       219E93
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5bb81559dcc926e4c77ea9d71437264f8760ab0c.roa
Signing time:             Tue 14 Feb 2023 13:15:11 +0000
ROA not before:           Tue 09 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     18678
IP address blocks:        190.90.63.0/24 maxlen: 24
                          190.90.82.0/24 maxlen: 24
                          190.90.93.0/24 maxlen: 24
                          190.90.94.0/24 maxlen: 24
                          190.90.115.0/24 maxlen: 24
                          190.90.116.0/24 maxlen: 24
                          190.90.121.0/24 maxlen: 24
                          190.90.130.0/24 maxlen: 24
                          190.90.151.0/24 maxlen: 24
                          190.90.152.0/24 maxlen: 24
                          190.90.190.0/24 maxlen: 24
                          190.90.193.0/24 maxlen: 24
                          190.90.216.0/21 maxlen: 24
                          190.90.234.0/24 maxlen: 24
                          190.90.243.0/24 maxlen: 24
                          190.90.249.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203283 (0x219e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar  9 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=5bb81559dcc926e4c77ea9d71437264f8760ab0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:63:54:23:6e:ba:61:89:99:3a:a9:88:77:
                    df:42:3d:2f:07:a6:f3:a8:98:56:84:4c:0c:e2:15:
                    88:97:fb:5a:0a:00:99:0c:82:67:41:64:bd:97:d8:
                    e4:09:9d:8c:9e:88:44:86:e4:05:b0:3e:14:d0:7b:
                    2d:6b:f8:53:d4:f3:ca:e6:e3:a3:d6:de:b1:d9:08:
                    67:3c:fa:4d:c3:c1:c3:62:98:ba:d1:aa:f5:92:ff:
                    a1:ae:b8:76:a5:c3:bd:40:ed:b7:55:b7:e8:33:1b:
                    d1:ee:71:97:6d:81:0f:e3:f6:12:fd:2c:2b:9b:7d:
                    bb:e0:47:8e:b2:74:1f:c7:67:20:ef:27:4b:53:d6:
                    b7:8e:50:a0:bd:24:f0:98:81:30:3e:1a:a4:7b:81:
                    8a:1e:b5:56:11:03:e0:bc:2c:33:c4:cf:6b:00:99:
                    ff:55:bb:97:7f:5e:d2:f0:e2:d5:75:f0:25:16:7b:
                    2f:71:ab:85:61:6e:da:ed:30:d7:d1:73:08:db:72:
                    2a:9c:92:94:5d:92:bb:d1:c2:94:f8:84:63:63:f4:
                    11:5c:ee:4e:f9:11:43:3b:9d:28:d8:f5:c2:a5:39:
                    b5:54:84:58:f9:e2:88:6f:34:7c:d2:c0:b6:20:c5:
                    07:86:74:b3:fa:65:8d:13:60:13:7e:a9:8c:36:15:
                    1a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:57:49:64:49:0D:7D:B3:A3:38:88:5C:95:E2:BE:26:F8:12:BC:16
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/5bb81559dcc926e4c77ea9d71437264f8760ab0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.63.0/24
                  190.90.82.0/24
                  190.90.93.0-190.90.94.255
                  190.90.115.0-190.90.116.255
                  190.90.121.0/24
                  190.90.130.0/24
                  190.90.151.0-190.90.152.255
                  190.90.190.0/24
                  190.90.193.0/24
                  190.90.216.0/21
                  190.90.234.0/24
                  190.90.243.0/24
                  190.90.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:1e:2f:7f:25:18:fa:0a:d1:a8:2d:7d:52:1e:a1:da:68:79:
         12:8e:12:da:a2:5f:1a:b1:1c:29:6c:65:30:e9:cc:f7:68:ed:
         ce:72:8d:43:19:ba:07:64:8a:ca:e6:96:2c:40:15:d7:f5:4d:
         dd:f9:72:4b:a7:00:79:b5:ae:b3:78:cc:90:5c:4a:08:c1:87:
         2a:34:76:5a:1b:74:e8:93:e1:1a:cf:37:68:03:05:af:2e:3a:
         fd:39:b7:4f:d1:4b:ec:12:a3:13:67:1a:64:18:9e:6a:8e:8d:
         03:fc:45:ce:d4:2a:02:a3:6a:7b:85:aa:90:3c:4f:5a:1d:9f:
         a7:c3:37:ca:82:e7:e0:8b:ac:67:f8:f1:14:2c:64:e4:8b:8f:
         a8:9b:36:eb:f9:5b:06:11:99:5b:6a:76:e6:10:e6:db:f6:bb:
         90:11:0a:c4:6f:b5:18:28:aa:67:37:47:4d:70:7b:b2:2c:72:
         f8:3a:ce:e2:01:40:e6:17:e3:ae:b4:5e:ee:c4:46:2b:ea:67:
         9f:9f:5f:23:2b:aa:78:3c:18:61:1e:76:6c:83:dc:c6:29:1f:
         df:44:bb:7b:97:69:58:3c:89:3a:d0:1d:5d:19:a8:64:9b:da:
         15:27:f6:ab:dc:c0:77:13:4e:5d:1e:f0:6b:3f:e8:99:8c:55:
         4a:f3:dc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:55:05 2025 by rpki-client