Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa
File:                     3139302e39302e35322e302f32322d3234203d3e203138363738.roa (raw, json)
Hash identifier:          jd9AKZsuPAnFWYUf8y/Znf/0TjZiavTgNaXGNLuLiaY=
Subject key identifier:   C6:CA:2D:ED:24:65:D6:76:FC:67:97:F7:44:76:A1:AB:E1:3F:1C:65
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       4046114DB9D5B069CB6E2E5FDD76E8A4A7139EF7
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa
Signing time:             Thu 13 Feb 2025 15:45:00 +0000
ROA not before:           Thu 13 Feb 2025 15:40:00 +0000
ROA not after:            Thu 12 Feb 2026 15:45:00 +0000
asID:                     18678
IP address blocks:        190.90.52.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:46:11:4d:b9:d5:b0:69:cb:6e:2e:5f:dd:76:e8:a4:a7:13:9e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 13 15:40:00 2025 GMT
            Not After : Feb 12 15:45:00 2026 GMT
        Subject: CN=C6CA2DED2465D676FC6797F74476A1ABE13F1C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:36:b1:73:33:d0:4f:0c:d4:4b:ba:00:c5:
                    a7:14:df:47:f2:07:b9:d3:f4:36:33:fd:7b:9c:27:
                    71:d9:7b:0b:f8:06:9a:e6:2e:a0:3f:0c:7a:73:32:
                    c2:0b:21:2e:cf:a5:97:ae:91:43:ed:0f:c7:73:6c:
                    b6:9d:9f:dd:0c:9f:d1:12:d3:c0:e6:d8:1c:0a:06:
                    ee:40:54:93:b0:40:e6:cc:66:be:09:f8:d7:98:11:
                    58:d1:6f:24:4f:52:b7:98:de:a9:9a:52:01:6f:e1:
                    6e:94:d6:19:8f:c7:75:fd:d1:73:2e:85:c8:d6:9a:
                    d8:0d:63:15:e4:d6:31:63:72:45:42:d4:95:c4:77:
                    c7:5e:e6:b2:3d:54:3e:2f:41:b7:03:b0:f1:45:79:
                    bd:80:1a:49:1c:28:ee:d4:aa:91:2b:bd:21:19:9b:
                    6a:df:8e:5b:97:31:ba:1a:30:29:58:8d:62:13:b1:
                    fb:f0:96:58:2d:fa:4d:e9:a1:27:22:4b:f7:fc:6d:
                    3a:07:fc:06:99:a1:bb:8f:3b:39:09:71:eb:50:c2:
                    2e:26:93:3f:00:d3:2c:a9:8d:8e:38:fb:2b:85:d3:
                    71:5d:86:50:23:c3:71:76:89:d8:75:3d:fb:1f:51:
                    95:51:9b:ae:a9:d1:af:2e:3b:4f:5c:8d:50:a7:15:
                    ca:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CA:2D:ED:24:65:D6:76:FC:67:97:F7:44:76:A1:AB:E1:3F:1C:65
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e35322e302f32322d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:df:f2:c9:d6:b3:ed:93:c9:af:e3:97:5b:67:b2:3e:24:c8:
         fe:ab:d1:1c:c7:df:65:b9:33:b8:3b:ac:3e:7c:4c:6e:1f:13:
         44:0b:8f:aa:b4:e8:68:33:46:ec:1a:eb:a9:0b:a3:f7:01:66:
         5a:82:03:ef:2a:5f:0a:62:2c:29:ea:28:67:cc:61:e5:e3:61:
         e9:1a:e7:8a:1b:0d:4a:af:9b:83:6a:68:50:70:31:5f:a9:72:
         5d:e7:cb:91:fd:6e:c6:50:a9:ce:bd:1b:c2:53:cb:88:ad:fe:
         fe:4a:63:c0:10:17:f6:0f:30:29:16:44:0b:16:75:8e:6a:8f:
         f3:32:d2:d0:21:3a:29:cc:ab:a9:05:d1:69:bc:e2:8e:0c:b1:
         ed:d6:6f:9c:b1:40:65:80:f9:2f:33:0f:4d:ec:a9:74:21:52:
         6d:5b:ec:22:dd:50:15:7a:84:46:c2:2d:c2:e9:bc:c9:1d:ce:
         54:87:e8:67:a7:eb:f1:da:bc:c0:b4:39:59:4e:0f:3b:97:90:
         12:03:86:cf:be:ec:38:a6:52:4e:19:24:ce:26:8c:00:56:38:
         65:09:c0:69:39:6b:da:c8:78:fb:05:69:09:a1:5e:1d:15:29:
         4f:69:71:48:f4:6d:d2:96:f9:b7:a4:00:cb:11:5d:f2:12:4e:
         59:e9:8c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:28:40 2025 by rpki-client