Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa
File:                     3139302e39302e3138322e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          YHQCfJC3y6q4Q7iFw19ZdQZIc2sg0+KLIsZE53oFi7U=
Subject key identifier:   F6:92:4C:30:8D:EC:F8:68:C0:9E:BF:D4:45:18:CA:19:F2:1A:57:04
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       12C662640DCF8677F5AA5A43A061E097E8F51DA5
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa
Signing time:             Wed 05 Mar 2025 15:30:00 +0000
ROA not before:           Wed 05 Mar 2025 15:25:00 +0000
ROA not after:            Wed 04 Mar 2026 15:30:00 +0000
asID:                     26619
IP address blocks:        190.90.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c6:62:64:0d:cf:86:77:f5:aa:5a:43:a0:61:e0:97:e8:f5:1d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 15:25:00 2025 GMT
            Not After : Mar  4 15:30:00 2026 GMT
        Subject: CN=F6924C308DECF868C09EBFD44518CA19F21A5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a6:bb:d7:59:ee:a5:0d:52:f6:5a:3a:82:3c:
                    ef:4c:e9:73:0a:9c:20:0c:a4:1d:37:f4:af:69:b0:
                    ce:47:f2:d3:b2:55:32:8d:24:e6:6b:34:f8:ec:b1:
                    b0:53:74:67:9a:f5:6d:b0:50:4f:9e:b5:f1:84:34:
                    19:29:d7:56:5b:e0:48:4a:06:cb:80:d7:2a:3c:1e:
                    0a:d5:bd:af:e0:7b:7e:84:34:80:d3:f8:21:b8:10:
                    99:96:3f:47:26:44:bb:0f:82:d6:54:97:c6:8b:b4:
                    43:90:2e:96:8a:a7:a7:60:df:f2:83:04:ea:5a:1f:
                    4b:89:60:ab:8e:a4:70:20:f1:1b:48:07:53:fc:52:
                    96:ea:f8:2c:3a:c0:39:af:34:1c:5a:b8:eb:e3:67:
                    00:6e:95:f8:a6:b6:26:84:ef:25:3d:c6:e9:e4:23:
                    8f:4b:4f:38:94:fe:70:9f:47:da:5b:5e:d2:ca:f3:
                    fd:f4:b4:61:04:82:3a:58:05:35:4e:f1:1b:62:52:
                    26:79:6b:32:8f:3a:38:bc:c7:09:e2:c7:c4:73:55:
                    d8:0f:67:74:6e:88:1c:e2:09:2d:33:6c:04:4f:26:
                    61:45:3d:e2:3b:f0:3b:ab:1a:e1:16:d8:d7:d4:1e:
                    1c:3d:be:03:df:b4:cd:5a:02:56:22:d6:44:30:09:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:4C:30:8D:EC:F8:68:C0:9E:BF:D4:45:18:CA:19:F2:1A:57:04
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138322e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:91:fd:a9:a7:e7:05:f1:4b:a3:72:ba:e4:a5:93:83:81:d7:
         da:be:c5:65:a3:48:d3:c6:ba:e0:e8:a6:02:a3:c6:d2:64:52:
         73:7c:05:90:85:27:be:9a:df:c2:73:51:ea:fe:f3:6c:b8:fa:
         6b:1e:79:c3:3b:e9:cb:f3:fb:f6:63:74:57:1f:86:b8:ab:fd:
         6c:23:b3:32:aa:ec:c4:ce:1b:93:f7:f0:c9:2f:7a:5f:b8:3e:
         6c:30:d0:f3:92:4a:0d:4a:ca:12:70:2e:b8:b1:05:f3:61:4a:
         b9:f1:d4:fd:8f:63:59:e9:fa:37:08:fc:ce:ac:ef:f4:47:0b:
         c8:d1:af:71:c0:a9:a8:67:41:07:38:ec:ac:dd:a5:fe:95:af:
         a7:29:c7:16:74:69:06:57:83:5b:9b:2e:eb:00:8d:a5:e7:8c:
         bc:f2:5e:6d:5e:f1:06:87:f3:fc:7c:e8:79:57:c4:f8:0b:1c:
         96:84:09:40:67:c1:30:19:94:b8:b8:64:f4:63:28:7d:15:4a:
         e2:12:db:a3:6a:99:7a:a9:71:81:d5:68:09:56:56:4e:b0:89:
         f2:e3:4f:e4:23:be:f2:a8:4a:30:3f:10:8b:28:2d:eb:92:83:
         1b:31:08:c9:7a:ba:d5:b9:13:d5:0d:7c:37:a3:db:c1:8d:07:
         31:6d:51:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:14:10 2025 by rpki-client