Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e362e302f32342d3234203d3e20323732383538.roa
File:                     3139302e35342e362e302f32342d3234203d3e20323732383538.roa (raw, json)
Hash identifier:          TDxdeD7YuAvPZse+EnBmRM6bmxom+jOtmDmMOduD4Cg=
Subject key identifier:   0B:E9:EE:91:40:0C:60:41:F8:A4:F4:91:BE:40:C4:BA:A8:27:62:55
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       61D9C0B6592CA84FCD9B5DF19A356E0DB3E93CD7
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e362e302f32342d3234203d3e20323732383538.roa
Signing time:             Tue 04 Feb 2025 20:03:26 +0000
ROA not before:           Tue 04 Feb 2025 19:58:26 +0000
ROA not after:            Tue 03 Feb 2026 20:03:26 +0000
asID:                     272858
IP address blocks:        190.54.6.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:c0:b6:59:2c:a8:4f:cd:9b:5d:f1:9a:35:6e:0d:b3:e9:3c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Feb  4 19:58:26 2025 GMT
            Not After : Feb  3 20:03:26 2026 GMT
        Subject: CN=0BE9EE91400C6041F8A4F491BE40C4BAA8276255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:44:9c:da:18:ef:71:cf:ab:39:2f:01:e5:
                    32:3f:dd:38:3f:37:e5:0d:62:b1:0f:82:11:d4:a2:
                    0c:b8:57:4b:14:e2:7a:dd:90:31:e9:9c:30:fe:65:
                    b4:cc:94:68:e2:09:e8:6d:1d:a9:5b:84:35:18:00:
                    ca:eb:51:09:6d:48:4d:17:13:b7:05:b4:fb:cc:20:
                    eb:00:4e:7d:77:bd:36:40:8e:38:8c:d4:cd:48:d5:
                    bc:34:78:7b:35:1a:0d:37:63:ec:a1:21:09:03:cc:
                    d3:c8:aa:fb:1c:98:ac:ae:87:b1:61:9b:ca:6f:d9:
                    38:10:0f:b3:8e:2f:3d:46:85:64:ea:5e:67:02:48:
                    78:49:39:fa:44:34:db:8f:c1:28:fa:ae:d4:68:3e:
                    3d:7d:3e:66:5e:ab:ca:e2:ba:6e:4e:3f:eb:47:a8:
                    1f:23:9d:d9:bd:a1:7e:a8:58:76:28:ee:4b:9e:99:
                    00:d2:dc:3f:fd:93:c8:6c:0d:31:52:eb:e9:7f:51:
                    0b:ec:ec:78:e4:a4:ae:92:32:64:0c:7b:c1:41:ff:
                    1d:25:b7:93:4c:b2:87:16:8e:b7:6d:42:3d:5c:a6:
                    98:c9:fd:db:5e:a5:72:28:97:ee:e0:0e:e2:cf:a9:
                    2a:87:d5:dd:2b:d5:1a:e8:9e:c9:ce:61:56:a7:5a:
                    ca:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E9:EE:91:40:0C:60:41:F8:A4:F4:91:BE:40:C4:BA:A8:27:62:55
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e362e302f32342d3234203d3e20323732383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bb:f2:03:c9:51:ca:40:d7:ba:ae:87:42:4b:0b:94:c4:0d:
         f3:91:0c:eb:9d:4c:cc:a1:4f:13:3d:4b:b1:af:65:a8:95:b4:
         d5:4f:97:b1:1f:29:1d:2a:c4:96:24:ab:ad:49:fc:5f:4b:74:
         34:43:47:44:42:c3:1a:ed:dd:61:d9:60:5d:1d:4c:ce:5a:ef:
         68:ec:6d:f8:67:dd:f7:74:28:dc:79:0b:ac:ff:54:7c:02:82:
         5b:db:fd:7b:f0:e3:66:78:41:22:64:73:27:f4:a5:e7:55:29:
         e2:de:de:c2:ba:d5:66:56:98:b9:34:0b:5f:2d:39:37:a2:14:
         ea:b7:12:8d:0b:49:c0:ca:85:99:e9:08:29:55:00:cb:3a:0e:
         79:00:fc:10:0b:55:98:d8:ae:fe:e9:bb:8d:9d:67:f1:fa:e0:
         cd:c5:d5:12:5e:1f:d4:bf:a4:6b:fe:17:aa:e1:2f:51:a1:e7:
         1b:4f:af:2d:e5:38:15:6f:36:bb:b8:2f:a0:65:1e:7a:c6:e6:
         72:33:0f:c1:d3:a6:1c:e1:4b:c2:7d:e4:db:81:20:66:38:1e:
         fc:5f:21:82:03:a3:46:c7:ec:91:93:5f:1c:49:9d:ef:29:a8:
         75:9d:ff:03:e5:19:c1:bb:9a:ac:6f:0f:95:80:d3:21:0b:9b:
         c4:2c:e9:20
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUYdnAtlksqE/Nm13xmjVuDbPpPNcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0FDQUQ3MENGNThCMTcyRTZEMzE5QTgzRDk3RUUzN0RC
NUI0M0U4QjAeFw0yNTAyMDQxOTU4MjZaFw0yNjAyMDMyMDAzMjZaMDMxMTAvBgNV
BAMTKDBCRTlFRTkxNDAwQzYwNDFGOEE0RjQ5MUJFNDBDNEJBQTgyNzYyNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmaESc2hjvcc+rOS8B5TI/3Tg/
N+UNYrEPghHUogy4V0sU4nrdkDHpnDD+ZbTMlGjiCehtHalbhDUYAMrrUQltSE0X
E7cFtPvMIOsATn13vTZAjjiM1M1I1bw0eHs1Gg03Y+yhIQkDzNPIqvscmKyuh7Fh
m8pv2TgQD7OOLz1GhWTqXmcCSHhJOfpENNuPwSj6rtRoPj19PmZeq8rium5OP+tH
qB8jndm9oX6oWHYo7kuemQDS3D/9k8hsDTFS6+l/UQvs7HjkpK6SMmQMe8FB/x0l
t5NMsocWjrdtQj1cppjJ/dtepXIol+7gDuLPqSqH1d0r1RronsnOYVanWsrNAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUC+nukUAMYEH4pPSRvkDEuqgnYlUwHwYDVR0j
BBgwFoAUysrXDPWLFy5tMZqD2X7jfbW0PoswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNzA3ODQwRENGNTlBODMzRjVGOTczNUFCQjdEQUI5QTMx
QkMzQTM2QTM4ODcxOUIyMzhFNzlDQkQyODU4NjlCLzAvQ0FDQUQ3MENGNThCMTcy
RTZEMzE5QTgzRDk3RUUzN0RCNUI0M0U4Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQUNBRDcwQ0Y1OEIxNzJFNkQz
MTlBODNEOTdFRTM3REI1QjQzRThCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTcwNzg0MERDRjU5QTgzM0Y1Rjk3MzVBQkI3REFCOUEzMUJDM0EzNkEz
ODg3MTlCMjM4RTc5Q0JEMjg1ODY5Qi8wLzMxMzkzMDJlMzUzNDJlMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM3MzIzODM1Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+NgYwDQYJ
KoZIhvcNAQELBQADggEBAAu78gPJUcpA17quh0JLC5TEDfORDOudTMyhTxM9S7Gv
ZaiVtNVPl7EfKR0qxJYkq61J/F9LdDRDR0RCwxrt3WHZYF0dTM5a72jsbfhn3fd0
KNx5C6z/VHwCglvb/Xvw42Z4QSJkcyf0pedVKeLe3sK61WZWmLk0C18tOTeiFOq3
Eo0LScDKhZnpCClVAMs6DnkA/BALVZjYrv7pu42dZ/H64M3F1RJeH9S/pGv+F6rh
L1Gh5xtPry3lOBVvNru4L6BlHnrG5nIzD8HTphzhS8J95NuBIGY4HvxfIYIDo0bH
7JGTXxxJne8pqHWd/wPlGcG7mqxvD5WA0yELm8Qs6SA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:27 2025 by rpki-client