Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34302e302f32312d3234203d3e203237383337.roa
File:                     3139302e39302e34302e302f32312d3234203d3e203237383337.roa (raw, json)
Hash identifier:          fcp9qk3g9hnc4LrXuCa0on9SFYnCKtSxM/QYNNvgPrg=
Subject key identifier:   44:92:73:F4:72:3D:1F:79:8A:4C:7F:FC:88:3A:28:7B:43:53:CA:D3
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0EBE3B74AA60FB9BF05831BEB9BDC2AA4C9F9174
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34302e302f32312d3234203d3e203237383337.roa
Signing time:             Tue 04 Feb 2025 18:17:15 +0000
ROA not before:           Tue 04 Feb 2025 18:12:15 +0000
ROA not after:            Tue 03 Feb 2026 18:17:15 +0000
asID:                     27837
IP address blocks:        190.90.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:be:3b:74:aa:60:fb:9b:f0:58:31:be:b9:bd:c2:aa:4c:9f:91:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:15 2025 GMT
            Not After : Feb  3 18:17:15 2026 GMT
        Subject: CN=449273F4723D1F798A4C7FFC883A287B4353CAD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:3e:62:b8:a6:3c:be:89:b8:3e:86:b0:e9:
                    61:5f:19:18:c6:04:8a:75:52:81:3b:0d:47:c8:14:
                    cb:d3:6f:2e:06:a0:93:c6:33:00:8c:9d:5a:04:1b:
                    fa:09:ea:e7:c9:37:08:72:68:be:f3:72:e4:a3:16:
                    31:08:8f:7d:f8:bf:72:86:93:35:4a:03:2c:b6:a2:
                    d4:e2:ef:3a:4c:f9:db:7f:43:6a:fc:e1:84:ef:d0:
                    cb:b3:ed:c6:0e:73:83:82:1f:88:5e:3d:65:b2:f9:
                    4a:fc:3a:14:32:d4:35:93:68:b8:f0:ab:5c:08:aa:
                    29:ba:13:0a:43:6a:c5:be:f6:0a:9e:ed:ad:cb:66:
                    ac:b1:b2:3c:a3:04:14:a5:b4:01:a1:da:10:74:f6:
                    12:e6:3e:e2:b5:c7:a4:fa:a7:d9:fc:31:8f:21:80:
                    7d:da:98:e9:51:6f:82:25:45:31:3d:f7:37:06:ca:
                    09:fc:54:4b:02:86:5d:46:0c:9b:4a:f7:91:31:ed:
                    3e:21:d8:a0:f3:3e:7a:67:02:e1:6f:d5:28:40:50:
                    a6:27:30:6e:22:24:2b:cb:3d:51:43:00:e5:71:38:
                    23:36:49:32:e4:d8:f3:bc:f1:ae:39:1b:d9:cc:67:
                    19:0d:bb:44:b6:dc:6b:1f:e2:53:79:83:5c:9c:3e:
                    a1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:73:F4:72:3D:1F:79:8A:4C:7F:FC:88:3A:28:7B:43:53:CA:D3
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e34302e302f32312d3234203d3e203237383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:43:b6:71:76:3b:9d:59:c7:10:ff:a7:82:cc:0d:b7:af:c2:
         2b:48:1e:62:4d:22:c4:70:dc:e7:fb:ce:4d:1c:f0:c0:66:d7:
         59:9b:38:a1:d2:14:da:58:c9:e5:97:c0:94:f7:56:44:46:62:
         08:d5:db:03:5c:39:76:e3:c4:f8:64:11:7b:b5:90:b1:f1:ac:
         95:e7:29:81:81:ed:79:6c:e8:a2:d5:da:28:03:f7:d6:8d:f3:
         b8:7f:d4:08:c5:72:ef:5b:5d:bf:1a:56:6d:25:f8:0e:3c:72:
         d6:82:97:b0:f9:90:8c:63:ff:1d:08:53:33:20:2e:08:a1:c4:
         48:8f:1b:50:36:49:28:b5:9d:24:07:92:e2:28:1d:c2:cc:0f:
         56:b8:c5:af:a8:94:f6:63:16:0a:1b:12:75:c2:cb:3f:7f:47:
         ec:56:5f:36:19:43:d9:2c:ea:62:3d:78:3e:61:25:c4:19:b8:
         dc:95:fc:8d:07:68:37:44:24:81:31:18:7c:bf:37:0d:43:7e:
         b8:60:84:f4:ff:05:e9:93:91:7e:21:2e:ff:dd:ab:79:e0:c7:
         08:92:8d:8c:db:6a:8d:0a:52:f7:32:9f:94:40:d8:21:80:f9:
         86:94:16:71:bf:1c:04:d7:0a:72:71:c2:a5:10:35:3e:c9:a4:
         ef:8c:1b:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:45 2025 by rpki-client