Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3232203d3e2036353335.roa
File:                     3139302e3230392e302e302f31362d3232203d3e2036353335.roa (raw, json)
Hash identifier:          zMZs/h61vr46kpEMBL4Mq0lBaYEVwU2p7T/N5OQWLoA=
Subject key identifier:   37:82:BD:F7:F3:AF:FD:1B:44:19:2A:82:2D:8D:11:70:A4:8F:9D:FE
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       0C6967E121D0AE359B3AD9D47A96F05060B26028
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3232203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:27 +0000
ROA not before:           Tue 04 Feb 2025 19:58:27 +0000
ROA not after:            Tue 03 Feb 2026 20:03:27 +0000
asID:                     6535
IP address blocks:        190.209.0.0/16 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:69:67:e1:21:d0:ae:35:9b:3a:d9:d4:7a:96:f0:50:60:b2:60:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:27 2025 GMT
            Not After : Feb  3 20:03:27 2026 GMT
        Subject: CN=3782BDF7F3AFFD1B44192A822D8D1170A48F9DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:11:0b:79:88:8b:4d:b5:e8:9b:e4:8b:96:
                    b8:fe:a5:42:2c:e0:19:e6:43:70:3f:0a:83:52:32:
                    b1:34:f8:f3:48:7b:ac:53:54:d6:bd:b3:c6:90:14:
                    56:4c:38:bb:3b:42:43:da:3a:b7:9b:e4:0e:62:7d:
                    f9:58:9b:ef:2a:a8:f1:23:b1:3a:5f:1e:7b:67:80:
                    60:d2:a0:42:70:be:c6:76:52:4b:f4:a5:fe:08:99:
                    67:3a:c8:e6:21:48:2d:a1:c4:73:0d:88:24:99:54:
                    a9:a3:8c:f5:52:4a:f5:3d:2a:92:8c:6b:a7:1b:9f:
                    77:fd:60:48:70:3d:ed:c3:fb:54:0d:34:6d:61:3f:
                    e6:ef:d9:2a:69:3e:6a:40:3e:34:5f:bd:82:80:8a:
                    51:2f:9c:43:b5:b5:0d:85:e4:d5:c6:4e:60:12:49:
                    52:dd:21:4d:0f:a4:4b:ee:e3:84:05:4a:78:d3:94:
                    85:9b:8c:55:1d:39:a8:e1:e3:ea:db:83:8b:19:4b:
                    d1:04:49:ad:e6:db:f2:c8:bd:f3:e7:e3:e3:7e:1c:
                    3f:3b:c3:11:5f:d5:44:c6:86:7a:47:42:2d:78:95:
                    ff:f5:f8:5d:39:52:c5:60:c1:b2:89:f7:8b:b2:52:
                    98:ca:4e:03:8b:d1:1f:e1:ab:86:fb:a5:68:e1:e0:
                    4d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:82:BD:F7:F3:AF:FD:1B:44:19:2A:82:2D:8D:11:70:A4:8F:9D:FE
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e3230392e302e302f31362d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:c9:39:30:8d:a8:1f:7a:6a:b2:60:fe:7b:61:83:1a:bd:dd:
         1f:9c:6b:1d:a4:1f:7a:3e:55:7a:7f:cf:27:0b:40:f4:9f:e2:
         d3:1a:e8:9c:4a:9d:fc:8f:7d:0d:1c:b1:c9:ba:22:d0:2d:08:
         3e:42:69:4b:93:01:62:81:c5:a0:dc:be:c1:f5:ee:17:bc:77:
         47:db:24:94:1c:aa:60:f9:e8:c0:5c:f8:2a:18:8c:e2:70:f7:
         9c:2c:05:c6:b6:f6:ae:9d:57:6b:8c:37:46:6e:c8:d9:77:f2:
         44:70:f7:60:8a:c3:c1:05:6f:62:24:6b:f2:37:3b:31:e5:e9:
         96:30:23:f1:a9:e9:65:bd:f1:c7:2b:fa:d0:1a:ea:6e:92:99:
         3c:94:ba:ef:f0:68:19:e6:41:d1:2d:6e:62:bb:c1:ca:d4:c6:
         28:41:78:75:67:56:a4:8a:3f:53:cc:a0:f7:b6:8d:b8:c7:f9:
         9c:56:63:e1:01:3e:9c:48:41:62:f3:7b:be:d7:52:5b:1a:4f:
         23:c2:d6:44:da:42:60:2b:96:8c:74:af:7c:0f:1b:92:73:80:
         11:fe:16:df:6b:87:0f:9e:8a:4e:d6:a2:26:d1:6d:df:ec:63:
         4a:31:9f:65:f7:94:71:2a:fd:de:1f:9a:f4:c8:df:91:60:c4:
         d2:75:d6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:32:13 2025 by rpki-client