Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa
File:                     3139302e35342e3138302e302f32342d3234203d3e2036343239.roa (raw, json)
Hash identifier:          HCklhF185dbtlQm6uq0xT537ir+r4Z7OZbaqtrDJvCQ=
Subject key identifier:   95:27:11:D7:23:9F:DE:14:3B:42:93:E1:17:E1:35:CA:A0:B4:D8:93
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       2CDFDA93438DE4CEB6EE3BF56627BC2112932A1A
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa
Signing time:             Tue 04 Feb 2025 20:03:31 +0000
ROA not before:           Tue 04 Feb 2025 19:58:31 +0000
ROA not after:            Tue 03 Feb 2026 20:03:31 +0000
asID:                     6429
IP address blocks:        190.54.180.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:df:da:93:43:8d:e4:ce:b6:ee:3b:f5:66:27:bc:21:12:93:2a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:31 2025 GMT
            Not After : Feb  3 20:03:31 2026 GMT
        Subject: CN=952711D7239FDE143B4293E117E135CAA0B4D893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:5e:d7:76:16:b9:a5:77:92:e9:8c:3d:a4:
                    4d:52:92:99:7e:4e:7c:09:bd:19:1a:c9:f2:4a:a8:
                    20:23:91:10:03:09:cd:5f:34:93:6c:79:c4:37:f4:
                    79:b8:9a:87:3d:56:39:fd:26:0e:2e:23:f7:2a:73:
                    9c:4b:84:ff:da:92:a4:e7:d1:83:87:89:fb:1f:6c:
                    8e:20:db:9c:39:3b:5f:dd:11:9d:21:3c:e8:df:23:
                    8a:73:0f:cf:d5:17:7f:98:d3:de:f8:7d:c3:20:19:
                    83:59:f0:5c:48:54:e9:43:a8:f6:93:58:c9:27:6c:
                    24:2e:bf:4b:ce:11:40:56:d0:f1:78:dd:93:48:f0:
                    b7:f8:35:87:fa:13:34:61:a9:62:0b:65:df:39:cc:
                    08:79:1b:78:ef:d1:b5:da:34:85:d1:1b:62:5c:96:
                    1b:b7:12:8a:8e:8c:d9:2a:82:6a:d6:bb:89:08:b7:
                    88:7e:61:01:4c:a5:60:0c:3d:d2:c9:dd:c9:a0:b9:
                    9a:ba:47:27:1c:3e:96:a8:b2:1f:45:58:e4:df:2f:
                    60:65:58:82:aa:b9:31:68:90:54:52:dd:8c:f4:2e:
                    c0:37:df:c8:e8:f3:d6:18:63:f8:e1:15:bc:3c:7b:
                    da:25:dc:67:02:8c:35:26:f4:81:4a:35:60:ae:2a:
                    f5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:27:11:D7:23:9F:DE:14:3B:42:93:E1:17:E1:35:CA:A0:B4:D8:93
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138302e302f32342d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:8d:0a:32:09:86:a8:2f:89:ed:0d:35:ae:7b:6d:78:de:a8:
         44:5b:ef:d2:8e:40:70:f2:0c:ba:6c:99:2c:0e:58:3b:08:5f:
         36:53:80:b8:e8:4b:38:13:92:f1:23:88:b2:4f:4d:ab:52:b4:
         82:fb:73:d4:7a:c2:45:7e:b9:09:83:1a:89:00:ab:43:d6:b2:
         2c:91:4c:82:95:31:f4:1e:f3:42:3a:ab:52:e0:5b:6f:cb:76:
         54:78:ce:c9:99:8a:5e:46:12:6e:f3:78:70:f5:14:00:2c:fa:
         aa:5b:68:0e:2b:d1:24:06:b4:1c:08:05:58:60:ed:5f:b8:b4:
         f5:6c:82:37:08:12:b1:99:c0:56:bc:da:7a:03:ab:e7:50:db:
         75:8c:24:27:58:5b:12:00:bc:a0:93:73:86:87:39:12:bc:6a:
         5a:51:99:3c:f8:3f:ed:42:26:be:cf:57:18:88:33:77:4a:50:
         02:61:21:55:fe:da:c9:9f:ba:7c:f3:32:8d:82:dc:5b:68:d8:
         49:5c:02:38:cd:3f:3e:90:c2:50:00:30:e7:2b:79:45:65:18:
         ec:61:0f:da:c8:71:ac:f3:96:ca:93:e0:d9:e0:e0:0b:f9:c1:
         25:e7:8f:e8:7c:17:03:5a:63:d7:ae:63:ab:cb:29:bd:c3:37:
         86:28:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:28 2025 by rpki-client