Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32342d3234203d3e20323632353839.roa
File:                     3139302e39302e32342e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          rbk+zSu+2dfuIdKY8kUlwy5oXS2OpKOBoaIBP0q6aWk=
Subject key identifier:   AB:40:54:74:73:ED:21:C7:9E:1F:4F:8B:37:8C:AC:5A:32:CD:0F:9D
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       1C1EE927B6A4DC715BBC69A555F4E913352B25B3
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 25 Feb 2025 20:15:02 +0000
ROA not before:           Tue 25 Feb 2025 20:10:02 +0000
ROA not after:            Tue 24 Feb 2026 20:15:02 +0000
asID:                     262589
IP address blocks:        190.90.24.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1e:e9:27:b6:a4:dc:71:5b:bc:69:a5:55:f4:e9:13:35:2b:25:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 25 20:10:02 2025 GMT
            Not After : Feb 24 20:15:02 2026 GMT
        Subject: CN=AB40547473ED21C79E1F4F8B378CAC5A32CD0F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:e5:14:2b:0a:be:17:f3:23:29:a9:b9:64:
                    e3:d0:c0:14:c5:65:00:7c:53:f4:4c:b1:33:dd:60:
                    d1:2d:02:4c:ab:bf:b7:78:bb:27:45:19:6f:30:c9:
                    eb:ef:e3:3c:b6:ce:ab:25:6b:0b:1b:85:6e:77:2e:
                    79:87:79:45:68:55:06:7e:8c:6e:55:be:35:93:b6:
                    a6:a9:48:40:2c:0b:c2:06:42:51:43:66:78:1e:14:
                    55:f1:77:c3:21:2f:31:0a:ce:2b:9a:2a:d6:cd:9d:
                    1b:d6:c4:83:14:2b:8d:04:a9:b2:9f:2e:dd:90:65:
                    a0:4d:65:7d:cf:d8:0d:04:fa:2b:cb:0e:82:a0:b3:
                    0e:08:9e:37:49:92:b7:57:83:ae:01:ad:49:45:9c:
                    09:3c:4c:87:33:bb:dd:27:ed:8b:f6:cb:6d:b3:8f:
                    4b:94:c5:8f:a4:66:2a:89:f6:3a:86:14:08:f9:75:
                    c0:80:10:5e:e4:79:60:28:03:7e:91:f0:5c:66:d8:
                    83:c2:10:1a:28:71:f8:66:23:6e:82:9b:9a:5c:48:
                    3d:2e:61:87:31:d8:6f:08:ca:8a:60:ae:de:8f:2e:
                    f4:c5:ce:25:71:ba:52:c0:bd:e8:96:4e:21:2e:9a:
                    19:77:02:bf:9c:45:57:1f:da:b1:c9:6e:22:b8:ef:
                    c1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:54:74:73:ED:21:C7:9E:1F:4F:8B:37:8C:AC:5A:32:CD:0F:9D
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32342e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:02:f0:25:1d:66:21:f3:0c:8f:0b:5f:0e:3f:84:44:c1:c2:
         7f:ec:dd:87:a9:99:74:47:a3:6d:94:ae:d3:f9:3c:8f:02:85:
         3f:b3:7d:80:89:08:de:ef:6f:da:60:0c:4d:25:2c:eb:e1:b8:
         7d:91:c3:6c:ea:d9:3c:12:58:61:21:9b:b7:7f:79:c0:df:78:
         d1:2d:36:10:9e:c9:c1:c2:61:d3:c1:46:d3:07:21:3d:9d:16:
         b2:6e:86:3b:d6:fa:1e:6f:3f:aa:97:6c:98:2e:f8:80:c1:70:
         34:24:28:59:4b:ca:d4:bd:c2:f9:ba:10:4f:32:7f:22:ce:93:
         3f:00:68:45:19:ee:b2:d0:1c:ec:44:43:eb:37:45:91:cd:55:
         ff:17:60:cd:f2:98:e6:d5:36:62:8b:86:5c:77:9a:b1:df:48:
         d3:69:6f:71:71:f7:87:f8:b5:35:cc:8f:23:49:bf:4d:ed:71:
         53:db:cc:e3:82:81:3b:ce:15:d7:30:d4:23:a1:a6:a0:f2:7d:
         72:06:13:d8:80:cc:09:c2:ec:17:42:e5:04:29:88:c8:ed:b3:
         fe:0b:66:61:95:1a:f0:c2:6a:7b:b8:76:5b:31:10:fc:aa:ae:
         c3:31:fb:13:1b:00:aa:d6:eb:51:4f:ad:67:95:ff:19:db:52:
         dd:bb:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:54:06 2025 by rpki-client