Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa
File:                     3139302e35342e3134322e302f32332d3233203d3e2036353335.roa (raw, json)
Hash identifier:          /Re2MmIY+5zcRLeIXNd6d8rOvTl+EkD3znjnOBpPeKk=
Subject key identifier:   CE:88:0E:4B:B3:C5:22:1F:EF:19:B5:DD:8F:91:37:E9:B1:8D:06:CF
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       02B282AD61DFCB51DD5E71F52898ADA3D6D964A9
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:27 +0000
ROA not before:           Tue 04 Feb 2025 19:58:27 +0000
ROA not after:            Tue 03 Feb 2026 20:03:27 +0000
asID:                     6535
IP address blocks:        190.54.142.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b2:82:ad:61:df:cb:51:dd:5e:71:f5:28:98:ad:a3:d6:d9:64:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:27 2025 GMT
            Not After : Feb  3 20:03:27 2026 GMT
        Subject: CN=CE880E4BB3C5221FEF19B5DD8F9137E9B18D06CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:a6:54:24:9f:77:a9:09:ea:61:98:fc:dc:
                    3f:03:b3:e9:da:33:09:b8:38:f4:8a:15:03:23:7c:
                    55:f3:b4:0f:1e:20:08:18:23:fe:fb:de:d1:54:fe:
                    51:08:26:7c:a4:fc:03:81:6f:e8:f1:14:8d:1d:56:
                    0f:95:be:9e:17:2c:f0:cb:0e:ab:f6:21:ce:7a:1d:
                    94:d3:80:16:eb:22:f6:f3:de:95:b4:ee:60:51:74:
                    67:af:18:1e:b5:ed:ee:00:cf:29:52:64:13:88:33:
                    7f:ab:16:22:8e:bd:51:66:18:1b:b8:58:7c:99:58:
                    d0:02:b1:79:6b:b6:28:6d:2b:38:a4:8e:38:7f:af:
                    29:ab:ee:ea:6a:36:30:2c:55:c8:8b:a1:b2:15:11:
                    00:71:76:ab:70:bc:27:3f:88:d1:38:c4:58:f9:55:
                    35:b8:f1:a7:65:a7:3c:31:76:d0:f1:8e:86:c8:87:
                    c1:e0:29:98:73:8e:e0:bc:bf:95:bc:cd:b8:4f:01:
                    b8:0f:e5:89:07:29:6c:6e:b1:98:8b:db:8a:7b:a7:
                    b2:72:10:97:dd:7a:5d:00:d3:07:83:bf:33:62:ea:
                    47:57:f1:5e:08:40:0a:87:81:f4:37:c0:62:87:d5:
                    34:6b:df:93:a0:74:37:48:3e:9e:51:fb:c5:c8:1e:
                    80:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:0E:4B:B3:C5:22:1F:EF:19:B5:DD:8F:91:37:E9:B1:8D:06:CF
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3134322e302f32332d3233203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:e4:07:90:02:e9:d9:47:07:09:31:c9:c0:9e:9c:ba:69:
         f0:22:ba:37:b4:9e:4f:69:45:ba:12:a9:ab:7f:d7:be:79:66:
         d3:41:6a:7f:30:ee:87:6c:5a:95:40:b7:9b:54:3f:95:4f:9a:
         c0:75:2d:39:7c:ea:6e:f8:70:f9:05:2c:07:38:29:68:8b:ba:
         d9:57:3a:d2:77:8e:b0:df:b4:db:9a:80:4d:50:69:ba:3e:07:
         76:b3:ec:e7:9c:5a:37:c7:b5:d6:0e:91:5d:1d:80:95:54:64:
         1f:7e:65:ff:56:ac:c2:36:58:c4:d8:8b:cd:85:8e:93:93:b7:
         41:70:0e:5c:85:f4:8b:e8:1b:5b:4b:07:fa:32:01:0b:2e:12:
         31:d6:a7:18:2e:00:ca:59:37:6c:b6:03:94:c1:4b:7f:d4:77:
         a3:4a:91:fc:a7:77:4c:3f:33:1f:e9:74:50:7a:44:26:8c:66:
         7d:3c:0d:c4:ab:20:74:0a:19:d0:8b:f3:6a:b4:71:3b:6b:63:
         ae:d6:f6:79:f3:f6:4a:89:37:80:bb:da:e7:b6:61:26:ad:1e:
         eb:36:86:62:65:a5:b2:0f:48:81:5f:f1:83:c3:1b:6d:01:57:
         ca:1a:0a:1a:46:52:9b:de:d6:6f:87:58:13:e0:47:6e:f9:d0:
         13:e7:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:48 2025 by rpki-client