Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32342d3234203d3e20323633313733.roa
File:                     3139302e35342e3138322e302f32342d3234203d3e20323633313733.roa (raw, json)
Hash identifier:          8VJyrvbQrzTkHsRTs88yn1CMqEtarhFe3GgrLzL3DKU=
Subject key identifier:   8D:0F:7F:12:ED:62:4F:0F:31:EA:10:50:FC:8B:0C:E5:4D:31:CF:5D
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       3A2458C5F1B49ED237E8B40A5B778885B1CB9086
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32342d3234203d3e20323633313733.roa
Signing time:             Tue 04 Feb 2025 20:03:19 +0000
ROA not before:           Tue 04 Feb 2025 19:58:19 +0000
ROA not after:            Tue 03 Feb 2026 20:03:19 +0000
asID:                     263173
IP address blocks:        190.54.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:24:58:c5:f1:b4:9e:d2:37:e8:b4:0a:5b:77:88:85:b1:cb:90:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:19 2025 GMT
            Not After : Feb  3 20:03:19 2026 GMT
        Subject: CN=8D0F7F12ED624F0F31EA1050FC8B0CE54D31CF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:36:91:e0:1a:11:c1:d1:61:7d:49:b5:a6:
                    94:b6:ac:81:40:a9:01:45:78:bc:d6:d8:44:d7:99:
                    37:67:01:f8:3f:9c:43:4f:4e:f8:1b:36:f7:9f:85:
                    8c:30:f8:a1:4b:2a:ff:96:f0:2f:af:00:d8:25:f4:
                    f4:12:1d:fc:17:28:55:b8:2f:e0:83:70:b1:74:3a:
                    7d:70:ef:37:2b:f0:4f:9e:31:f5:e8:99:bf:5a:10:
                    20:fa:87:e5:49:f4:22:a4:29:4b:d0:e3:08:34:28:
                    47:f9:83:be:2c:72:8e:a7:86:af:43:78:04:d2:58:
                    cc:7e:88:3d:c3:18:14:58:d6:aa:dd:08:78:43:63:
                    a4:12:46:b2:a3:91:1c:e6:57:f1:2c:03:29:ad:73:
                    35:09:b7:83:04:e9:7c:3e:f5:5a:f0:1b:ab:d4:9d:
                    81:1e:94:d4:78:87:34:9c:2a:53:c8:e5:b6:ae:ab:
                    64:54:bd:8a:6c:84:7a:78:1e:40:9b:d6:b9:ca:03:
                    54:45:2b:d0:49:44:98:37:be:09:7a:49:06:34:49:
                    70:f3:c7:3e:81:0b:03:58:38:1e:81:f6:d3:67:7f:
                    07:5c:02:93:26:04:b2:2c:71:71:5c:e7:63:99:70:
                    40:06:25:0f:60:5a:eb:12:e8:d8:82:7f:c9:b9:ae:
                    1b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:7F:12:ED:62:4F:0F:31:EA:10:50:FC:8B:0C:E5:4D:31:CF:5D
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138322e302f32342d3234203d3e20323633313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:b3:b2:30:32:5c:3f:da:5a:5c:d8:f4:f9:a0:46:87:fa:
         a2:37:c7:f9:53:0a:21:cc:22:d5:ba:67:5d:64:ee:7f:a9:13:
         6e:0b:d3:d6:9d:2c:77:ed:ba:59:e2:43:e0:86:f8:d6:76:07:
         44:9e:8e:28:6b:a6:5f:7a:b1:89:4b:34:7d:be:a7:c4:66:22:
         83:fb:f4:71:a3:89:42:1e:32:e7:ef:eb:f5:ed:57:3a:eb:f1:
         1b:d7:31:a9:45:03:c4:10:e8:69:35:86:02:4b:c1:5b:4f:12:
         7e:b1:9d:1c:7c:eb:b8:19:22:8f:c3:3d:f5:0a:a1:5f:96:3e:
         6c:b8:62:8b:52:1f:62:6f:c2:a6:94:68:42:79:89:03:88:9c:
         fc:3c:20:f0:e4:d1:44:0b:6b:fd:1b:71:27:04:29:09:1c:2b:
         60:a0:04:b4:fb:6b:55:51:ed:14:d8:36:f5:39:23:a3:5c:00:
         50:fa:08:00:00:72:9c:d9:3c:06:58:4a:88:c6:4d:c6:f3:09:
         28:0f:c0:e1:6e:94:49:8c:a6:a1:f6:fe:51:e0:d7:57:59:8c:
         fa:7d:fa:b1:db:3f:04:3b:90:3a:de:76:3f:db:74:d6:55:00:
         a7:51:56:28:7c:3b:40:98:f3:92:8a:e3:e1:46:64:91:56:2c:
         96:88:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:19 2025 by rpki-client