Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e32362e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          oTveUhJ7CMSPHFOJcqtkI29waGwW3mO0VhwFioNP24A=
Subject key identifier:   ED:85:B6:72:80:FC:15:A7:D6:2B:3E:83:0C:53:2D:77:D3:7D:9C:8C
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0635913B526E679364003882C7F6B6DDEF760CD4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 04 Feb 2025 18:17:28 +0000
ROA not before:           Tue 04 Feb 2025 18:12:28 +0000
ROA not after:            Tue 03 Feb 2026 18:17:28 +0000
asID:                     26619
IP address blocks:        190.90.26.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:35:91:3b:52:6e:67:93:64:00:38:82:c7:f6:b6:dd:ef:76:0c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:28 2025 GMT
            Not After : Feb  3 18:17:28 2026 GMT
        Subject: CN=ED85B67280FC15A7D62B3E830C532D77D37D9C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:24:9f:98:28:ed:33:93:18:51:ad:b0:a3:
                    ce:8b:94:e0:4c:49:40:eb:ff:5e:b4:f4:cb:b9:7e:
                    e9:f4:24:40:2c:36:38:d1:45:30:c0:dd:38:7c:29:
                    6c:a6:1f:13:f9:1e:78:07:d2:e4:b9:6e:8d:ad:5b:
                    1d:b7:f4:b3:ca:de:bf:0e:c2:a3:96:ad:37:6b:db:
                    66:11:6b:c1:27:b5:bd:a2:54:44:7b:41:7d:55:c9:
                    95:af:61:01:c6:d1:59:e1:61:cb:7e:b5:b9:a4:19:
                    d0:82:ae:ea:b0:7d:b8:d4:a4:a3:3b:f1:1d:0b:7d:
                    17:0a:f6:48:28:90:de:aa:12:78:a8:89:24:82:55:
                    ef:65:ac:4b:29:63:5f:e7:70:7b:51:97:bf:da:f5:
                    9a:21:0a:25:04:c1:12:70:fb:1b:3e:8d:01:37:23:
                    83:59:d7:57:9d:94:3a:33:4c:03:76:6c:5f:3f:36:
                    f3:73:6d:22:f7:79:9b:91:4b:86:da:47:97:f2:4f:
                    85:2c:e3:10:57:ef:fb:d7:93:f2:5a:06:51:e7:4c:
                    d2:72:04:f3:ab:05:29:af:b9:26:eb:80:fa:b6:97:
                    a1:ad:71:7c:7f:d1:f9:7b:59:20:21:c0:ee:eb:f3:
                    e8:bb:c6:fb:9a:25:c9:39:3e:2e:ef:da:eb:59:b3:
                    c4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:B6:72:80:FC:15:A7:D6:2B:3E:83:0C:53:2D:77:D3:7D:9C:8C
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e32362e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:6b:b1:50:3f:1c:8f:f3:36:6c:d2:e3:54:d0:d7:e0:76:0e:
         30:e4:7a:44:16:6e:5b:33:e2:56:ea:20:c8:22:da:ce:e2:49:
         b9:5b:b2:d8:bb:77:69:15:52:94:80:3f:8e:fc:79:79:98:54:
         8b:33:b4:b6:7c:76:64:0d:f7:50:09:52:68:7f:c6:19:03:9d:
         ad:da:7b:57:28:2e:aa:97:c4:7e:48:35:c0:83:8f:10:be:e5:
         4e:bb:48:71:f9:c5:be:18:f3:ac:69:3a:79:66:73:43:5d:02:
         75:0d:a8:4f:63:e0:8f:24:9a:76:52:e8:c5:5d:e6:40:f2:6e:
         15:4e:5a:34:c1:c2:c1:ca:e8:94:7e:92:51:d2:37:01:eb:b5:
         07:14:5e:0d:b0:22:af:e7:18:6c:e5:69:28:f1:a1:f6:72:97:
         3c:41:28:46:40:d9:67:d9:ef:95:62:5e:0c:80:ba:b2:ab:44:
         ee:bd:a3:fe:38:26:b3:7f:53:1a:31:ef:75:d9:73:2e:91:78:
         96:d6:cb:7f:5e:9a:5a:4f:0b:dd:2f:02:e6:e9:1b:71:4b:28:
         24:aa:b2:11:a4:40:04:13:b3:ba:42:f5:6d:8e:34:3c:a2:7b:
         2b:8b:d4:45:72:76:2e:1d:e1:da:87:fd:00:4e:da:f1:51:09:
         e2:9a:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:16:33 2025 by rpki-client