Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231352e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3231352e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          mSmM2DAHe5pRtHQxILZ+CiOazwTGqgisNSJDsLPk5F4=
Subject key identifier:   8C:84:7F:9E:1E:EE:40:BD:FD:05:16:84:45:C4:C5:73:F2:9C:94:E2
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       12AA2E1E4EBB7E0C82C7AC7B3AC13F48217748B7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231352e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:17:29 +0000
ROA not before:           Tue 04 Feb 2025 18:12:29 +0000
ROA not after:            Tue 03 Feb 2026 18:17:29 +0000
asID:                     18678
IP address blocks:        190.90.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:2e:1e:4e:bb:7e:0c:82:c7:ac:7b:3a:c1:3f:48:21:77:48:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:29 2025 GMT
            Not After : Feb  3 18:17:29 2026 GMT
        Subject: CN=8C847F9E1EEE40BDFD05168445C4C573F29C94E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:24:f5:ae:d3:4e:63:ba:5a:f3:dc:ee:e1:
                    a1:bd:ca:93:31:80:c0:ec:91:07:33:75:f1:be:74:
                    18:b7:b2:75:ef:22:8c:40:f7:03:a4:32:80:f5:d0:
                    8d:c5:cd:69:3a:57:29:24:80:e0:15:0e:24:b3:13:
                    89:a6:5f:3c:1d:ee:c7:5a:91:32:0d:96:cb:22:72:
                    f7:bb:17:c4:87:a2:93:26:f2:94:8c:69:e6:10:0b:
                    64:63:db:7f:b3:32:e9:be:2a:55:e6:d0:17:4a:50:
                    70:6d:cc:a4:02:cc:38:96:5b:2e:d2:ea:fc:9b:b8:
                    18:32:f5:2d:36:dc:26:95:16:d3:cd:c8:aa:7c:c2:
                    4b:2b:5f:35:3d:9e:6f:ba:7e:88:93:31:a5:9e:4d:
                    48:d8:e0:bf:6f:9d:44:bb:0e:eb:ec:35:f8:71:39:
                    b2:85:f9:c8:4d:fc:c3:b1:d8:cc:a8:96:78:51:30:
                    c5:e5:d1:35:cf:bc:5b:a0:3e:ce:22:43:b6:b2:11:
                    bf:15:8c:33:62:a0:c7:6d:99:2b:7e:38:e1:b0:3f:
                    d6:d1:cb:fe:d0:8e:46:64:85:f7:f9:5f:56:7c:35:
                    c0:31:07:06:96:28:66:8c:71:a3:18:8f:85:8b:57:
                    e6:13:8c:83:da:f5:e7:3a:7a:44:87:b9:fb:10:61:
                    e7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:84:7F:9E:1E:EE:40:BD:FD:05:16:84:45:C4:C5:73:F2:9C:94:E2
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3231352e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:92:ec:5f:29:73:0c:5d:3f:3f:99:45:a4:f5:83:91:ca:53:
         85:c6:a0:30:44:a0:77:a3:76:d3:f7:9b:65:f6:65:da:ba:4c:
         6a:7e:ff:89:3b:46:b3:4c:8f:81:6d:95:3d:dd:bf:ff:81:aa:
         74:82:ed:61:93:27:b4:55:8b:23:0d:20:58:9c:1a:63:a5:bb:
         10:96:17:9c:0a:b4:4d:3e:df:07:60:92:0f:44:88:14:da:0f:
         1a:4a:06:f6:4a:18:c6:ec:9e:10:b5:7d:58:70:78:6c:05:38:
         84:f6:41:1c:9f:30:40:72:13:e0:91:ea:99:06:95:52:e6:8b:
         f2:7e:83:5e:59:71:8a:15:60:8c:77:40:0a:e1:f6:3d:0e:79:
         c0:ec:01:d8:9e:ac:d2:23:8b:c9:93:7f:66:26:b2:bb:90:c6:
         a4:e2:fe:a2:1d:f4:68:4a:cd:b8:b7:fc:1a:b9:ec:1b:4f:21:
         db:12:71:20:d9:7a:bc:7e:0d:6e:4d:af:df:91:e4:fc:4f:22:
         56:45:5c:b9:8b:15:67:1a:85:4a:4c:5e:ef:33:5a:3c:13:06:
         90:5b:2a:3f:d4:fd:bd:15:7e:ed:6b:c0:78:6f:1a:57:61:d4:
         48:ba:dd:18:ba:97:c1:30:8d:9a:9f:2f:7a:44:ca:6a:55:d7:
         66:54:02:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:18 2025 by rpki-client