Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa
File:                     3139302e39302e302e302f31372d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          jIuUFDncrQ5UO28MonvRn7JA043Wk0bNxDaXzoN1oe4=
Subject key identifier:   2B:FD:47:A2:94:74:03:D5:B9:BA:04:FB:4A:B1:F0:F7:7D:D8:77:84
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       569EF6A89375FC2581D17AE90F8D2A59EBD1AAB8
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:26 +0000
ROA not before:           Tue 04 Feb 2025 18:12:26 +0000
ROA not after:            Tue 03 Feb 2026 18:17:26 +0000
asID:                     262589
IP address blocks:        190.90.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9e:f6:a8:93:75:fc:25:81:d1:7a:e9:0f:8d:2a:59:eb:d1:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:26 2025 GMT
            Not After : Feb  3 18:17:26 2026 GMT
        Subject: CN=2BFD47A2947403D5B9BA04FB4AB1F0F77DD87784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d5:30:1b:94:95:a8:2d:94:24:8a:0e:58:65:
                    ef:17:b1:6b:a8:1a:f7:9f:db:69:8b:db:86:fd:4b:
                    e9:d7:81:07:bd:39:8a:f6:f7:3a:27:58:c9:56:3b:
                    9a:a9:59:97:27:63:3a:87:38:ed:7f:a7:65:50:ad:
                    38:c5:ba:86:81:54:c7:99:04:f5:69:91:16:41:cd:
                    8d:ff:b3:91:36:73:e5:d6:65:80:6f:e8:8e:53:b7:
                    a8:32:64:86:23:24:be:ac:05:8a:d9:61:cc:2d:c2:
                    34:b2:bc:2f:19:dc:3c:c7:9c:2b:5d:fa:79:91:36:
                    f2:14:e1:54:e5:6f:c8:1b:19:98:04:04:4c:c1:e3:
                    dc:e0:b3:ee:95:93:0b:41:20:e8:48:67:30:f6:00:
                    2a:b5:54:29:af:06:ca:1f:57:87:65:fc:75:58:92:
                    5c:d3:60:43:a7:65:e6:a6:df:0e:8b:67:53:6b:de:
                    d8:d9:ae:31:ba:f8:31:2c:63:d6:0b:fe:90:f6:69:
                    0f:2c:e5:1c:06:cb:cf:e3:49:46:fe:a1:d6:8f:28:
                    e2:ab:3e:8f:28:37:f3:a0:5d:8e:00:36:2b:60:59:
                    ab:76:5d:f4:53:77:b1:d7:04:95:1f:8a:0a:3a:90:
                    d8:86:8b:de:0b:4d:99:14:7c:d1:17:42:04:c2:d5:
                    96:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FD:47:A2:94:74:03:D5:B9:BA:04:FB:4A:B1:F0:F7:7D:D8:77:84
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:6e:0d:30:3e:78:25:b4:90:c1:e5:05:3a:8c:e4:1d:a9:
         35:eb:70:e0:06:b6:d6:fe:21:fb:b6:74:f9:82:23:52:0e:59:
         b7:57:df:fc:2d:3f:b2:8d:9d:c4:25:7c:6e:bd:44:99:79:7e:
         bb:b3:34:0d:1a:ba:54:ad:4a:5c:f1:d3:7d:63:cc:2f:85:59:
         3c:87:5c:cb:96:74:ac:8d:7b:f7:4b:41:d1:06:39:a8:5f:70:
         60:8d:5f:88:02:08:27:26:3b:fa:ac:b2:3f:37:5b:80:8f:01:
         cb:f9:1a:0b:84:1b:84:75:03:5a:28:67:d0:be:35:0c:e9:d5:
         8a:c6:4d:b1:8a:f8:e1:4d:e8:7b:8d:94:35:eb:80:e5:f7:b5:
         81:d6:db:3e:41:3a:94:80:17:4d:e7:32:ed:da:4f:30:95:bb:
         eb:5d:79:3b:e1:c3:4b:fd:28:21:a1:db:57:3c:24:34:99:c8:
         af:d0:0f:8d:37:c1:61:93:98:b8:16:66:be:9b:31:4f:7e:2d:
         72:e4:5d:d4:ec:d0:6b:cd:52:67:61:23:53:ca:ed:ec:3e:b5:
         a5:b2:40:fd:3b:9e:a9:7a:c1:65:88:4d:28:85:6a:b8:ef:f5:
         1b:4b:2a:05:66:52:b8:46:c7:45:05:e4:bc:be:9f:9d:89:65:
         09:48:9f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----