Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa
File:                     3139302e35342e3138362e302f32342d3234203d3e2036353335.roa (raw, json)
Hash identifier:          +i8Gtvisrm8u1FzSP90Hg5WjGTvOsrhUlKKb54+kiE0=
Subject key identifier:   94:D5:53:10:F2:3D:98:06:95:43:20:7B:94:CD:D7:30:89:EF:7C:41
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       6EB5CE7C41372B4E521D9D652E12B20129C40D8E
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa
Signing time:             Tue 04 Feb 2025 20:03:23 +0000
ROA not before:           Tue 04 Feb 2025 19:58:23 +0000
ROA not after:            Tue 03 Feb 2026 20:03:23 +0000
asID:                     6535
IP address blocks:        190.54.186.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b5:ce:7c:41:37:2b:4e:52:1d:9d:65:2e:12:b2:01:29:c4:0d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:23 2025 GMT
            Not After : Feb  3 20:03:23 2026 GMT
        Subject: CN=94D55310F23D98069543207B94CDD73089EF7C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:92:21:2d:c0:18:76:78:3b:73:69:d0:d0:a2:
                    1f:8e:37:8c:ab:27:43:ca:4e:8c:00:50:df:86:be:
                    71:d1:c1:70:93:97:55:95:f2:b1:29:f0:b8:bf:31:
                    8f:e9:ec:ee:37:10:66:cb:32:2b:67:c5:47:40:7c:
                    0b:23:4b:b2:ad:c3:ad:e1:d8:52:71:f5:cc:31:63:
                    cb:5e:8f:e9:7b:e3:d2:79:be:00:19:57:ff:a5:d0:
                    97:9a:bc:1b:7a:a6:c3:93:9f:d4:75:51:3d:d9:b2:
                    c2:71:90:44:67:33:26:57:a2:3b:78:7e:3c:1c:e7:
                    ce:3c:2d:a2:68:bb:92:8a:1f:47:de:f9:66:5e:91:
                    06:a3:41:c9:5e:c7:59:24:a3:a7:d1:6b:0b:d0:39:
                    55:20:7f:92:c7:0b:88:df:f2:d6:ec:e5:9f:d6:4a:
                    1b:24:96:b7:a0:3c:6b:cc:47:54:64:81:55:98:dd:
                    db:e7:89:1e:73:5d:85:1f:44:14:e4:6e:60:23:e7:
                    41:3a:cc:5f:7e:af:8c:a2:46:d8:93:30:3c:45:4c:
                    11:7f:85:ef:ed:bb:e0:b4:ab:ec:21:4c:4d:e2:6d:
                    f7:bd:90:81:f6:3f:86:cd:3a:67:2e:79:a8:d5:76:
                    16:85:a9:7a:91:fd:1a:bb:cc:53:3d:41:9c:f9:77:
                    6b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D5:53:10:F2:3D:98:06:95:43:20:7B:94:CD:D7:30:89:EF:7C:41
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138362e302f32342d3234203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:40:a1:ac:d2:f4:68:3e:28:fd:3b:81:65:a8:3a:ad:3a:ab:
         3f:bf:a3:c8:e0:c0:5f:94:83:d9:73:2c:89:4c:bb:f5:e9:9a:
         0b:17:3c:de:33:20:2a:c4:dd:33:24:88:81:a3:47:c3:b5:78:
         b6:e8:d0:01:f8:16:37:42:78:e5:a9:41:1e:ae:e6:36:d1:11:
         d4:8f:7b:07:a9:ec:ec:e4:d0:d4:ad:fd:1b:ab:40:40:54:42:
         29:30:90:89:c9:0d:8f:7d:2f:65:c7:62:82:37:c6:ca:1f:b2:
         41:10:ba:11:85:e2:95:8b:d5:af:75:34:24:f7:a9:14:42:88:
         3e:4d:0e:70:dd:c5:b1:97:c6:8e:bc:cf:94:52:59:ec:65:7c:
         00:6a:d4:0c:a2:13:6c:95:eb:31:b8:dd:a7:7e:8e:5c:2e:92:
         d6:30:b7:14:be:43:11:af:d4:a2:12:c9:77:01:72:59:57:c7:
         47:8e:25:fb:5d:c8:65:01:e3:0b:45:14:48:15:6e:46:fd:af:
         f7:dd:af:00:d9:11:71:89:dd:9e:95:f7:16:25:af:b2:2c:e2:
         a8:20:c3:9b:02:76:7f:02:78:25:10:8e:e5:32:15:69:87:94:
         47:ba:49:05:bb:e3:22:20:6b:76:0e:f2:03:c2:0f:13:29:1f:
         2d:dd:b9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:52 2025 by rpki-client