Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036353335.roa
File:                     3139302e35342e3138342e302f32332d3234203d3e2036353335.roa (raw, json)
Hash identifier:          74i35ShLP5mGzfrX4/kwlh8W9bm5vGkiRaO5xZXdJhA=
Subject key identifier:   29:6D:D5:98:FF:96:D1:A9:59:1D:71:15:06:CD:F6:D0:D3:61:36:4F
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       3D64957D0CA608C65040F8AA8C777FC6FBBD1BB3
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:22 +0000
ROA not before:           Tue 04 Feb 2025 19:58:22 +0000
ROA not after:            Tue 03 Feb 2026 20:03:22 +0000
asID:                     6535
IP address blocks:        190.54.184.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:95:7d:0c:a6:08:c6:50:40:f8:aa:8c:77:7f:c6:fb:bd:1b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:22 2025 GMT
            Not After : Feb  3 20:03:22 2026 GMT
        Subject: CN=296DD598FF96D1A9591D711506CDF6D0D361364F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:b7:c2:be:b2:86:b1:e0:0d:db:c7:18:16:
                    c4:99:34:90:c2:5f:f6:6e:c2:28:12:b5:5a:e9:8c:
                    79:eb:9a:da:45:fc:0c:5a:f2:7d:e9:8c:39:a5:43:
                    29:21:ac:7c:9a:da:93:1f:03:b0:e4:1f:0e:95:bc:
                    ca:49:c3:e2:52:60:cf:0d:69:ab:cb:f1:d5:43:1b:
                    36:0a:db:87:95:e0:74:0e:fa:43:d5:3f:b1:7d:f1:
                    68:46:27:4b:0a:96:91:4b:04:00:73:b7:eb:1a:a0:
                    c1:2e:4b:2e:16:31:14:bb:94:3a:67:29:b3:7e:e5:
                    8b:a6:e7:c0:02:13:49:ac:a5:f2:36:8c:6e:9b:be:
                    fd:ea:af:38:5c:97:6e:7b:3f:0b:e4:63:1c:88:50:
                    9a:d2:a3:32:4c:f5:46:c4:16:96:93:0c:ec:7a:4b:
                    7c:37:a0:14:81:29:52:1d:38:7d:31:21:95:50:c3:
                    77:75:09:f4:25:c1:f2:7b:73:9f:85:2e:fb:e8:08:
                    cc:7e:3f:72:56:87:2e:f6:b0:9a:6f:72:17:d0:99:
                    dd:3f:95:99:56:b8:a1:85:0f:a4:90:da:4b:30:fd:
                    cb:32:b6:fa:9f:dc:5e:4f:51:65:89:4c:33:e1:70:
                    ad:0e:ea:88:d8:94:d4:86:61:10:8d:d4:8d:5b:1c:
                    53:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:6D:D5:98:FF:96:D1:A9:59:1D:71:15:06:CD:F6:D0:D3:61:36:4F
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:7f:e9:6b:50:f4:3a:41:a2:15:5a:15:a6:88:85:93:75:48:
         43:ff:31:38:8c:fe:f1:a3:c9:8a:11:a3:7c:82:25:fd:62:a4:
         cc:ad:f5:29:ba:59:e6:c1:76:a3:1b:11:ea:72:64:80:5a:07:
         49:4c:df:86:83:53:40:9e:04:14:df:e1:2a:d1:19:2d:e1:b9:
         df:09:60:d9:c2:99:47:00:1c:c7:c9:fc:3f:38:e8:4e:e7:7b:
         0f:82:34:a2:fc:46:21:19:72:0b:ff:a2:3e:77:41:5b:23:d6:
         6f:c3:29:91:3e:8f:aa:cb:18:ba:dd:f2:47:ab:4c:c1:2b:1a:
         dc:ff:24:7d:ea:24:e3:1c:ff:8c:1a:4c:30:43:7b:51:cc:74:
         05:82:93:89:db:dd:44:80:35:14:f1:e4:d1:f6:ab:5e:b8:4d:
         37:b9:d0:b4:58:49:d7:ec:d9:4d:62:aa:01:68:d9:ec:47:8d:
         23:81:67:4a:70:14:73:43:bd:9b:ac:c0:f9:b3:38:48:18:2a:
         40:8f:3c:ea:cf:b1:be:80:f4:b8:36:a3:1e:d8:e0:ed:5c:51:
         eb:11:be:05:c0:35:4e:48:fb:01:b6:ca:93:df:36:8f:61:70:
         c2:94:01:60:5f:bf:c4:fb:37:d4:63:20:6f:4b:58:48:d6:a8:
         f8:2c:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:15 2025 by rpki-client