Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f31382d3234203d3e203138363738.roa
File:                     3139302e39302e36342e302f31382d3234203d3e203138363738.roa (raw, json)
Hash identifier:          yCyKOpP/OKD+toOe4MUGgVDYs0O4Cb2Q+m80JdjoB1U=
Subject key identifier:   26:FE:F4:1F:4E:2C:A4:CF:67:02:84:46:52:76:AA:5D:D0:CC:1E:C4
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       482F98DFFB08A4C195DF7D03E498C3057D92F1AC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f31382d3234203d3e203138363738.roa
Signing time:             Fri 14 Feb 2025 22:00:00 +0000
ROA not before:           Fri 14 Feb 2025 21:55:00 +0000
ROA not after:            Fri 13 Feb 2026 22:00:00 +0000
asID:                     18678
IP address blocks:        190.90.64.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2f:98:df:fb:08:a4:c1:95:df:7d:03:e4:98:c3:05:7d:92:f1:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 14 21:55:00 2025 GMT
            Not After : Feb 13 22:00:00 2026 GMT
        Subject: CN=26FEF41F4E2CA4CF670284465276AA5DD0CC1EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e5:af:e4:21:51:c6:09:1f:dc:4d:28:fe:c1:
                    86:20:26:6a:63:70:1c:7c:42:ed:7b:17:b9:4a:03:
                    ca:6b:4e:7d:d4:32:57:6c:54:a4:15:35:7d:4b:b5:
                    6f:3f:4c:4c:ec:ed:de:57:79:a4:aa:39:52:14:85:
                    b4:a2:36:cd:05:3c:6c:de:99:40:94:99:3e:57:6d:
                    fe:83:b7:bf:50:b7:d2:2b:62:df:a7:6a:13:55:b4:
                    b0:bd:73:0f:20:bf:2d:a4:0f:2e:e5:72:54:34:54:
                    cc:68:25:e3:35:c1:cd:ac:4a:71:bb:ec:c0:77:5a:
                    d8:90:29:cb:19:44:ac:cc:bd:16:fa:63:5e:ae:52:
                    29:02:17:57:a7:86:6d:fa:59:07:e2:ec:de:39:9f:
                    73:df:3f:c7:1a:7e:7c:32:53:5e:9c:bd:06:c3:8f:
                    64:ff:a2:64:14:42:86:ae:14:26:12:7d:1e:73:d5:
                    d7:3e:57:00:5c:42:53:79:8a:f7:fe:29:b8:2b:c2:
                    d7:cd:7d:43:f9:1f:75:38:bf:25:f6:6f:fd:fc:13:
                    08:33:dd:ec:62:06:4c:30:c0:1a:5e:4d:00:5c:cd:
                    93:e6:b5:4f:0b:d5:dc:ed:57:21:05:44:60:71:27:
                    94:5e:cf:3b:a9:69:ff:ea:48:ed:aa:1b:0f:96:93:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FE:F4:1F:4E:2C:A4:CF:67:02:84:46:52:76:AA:5D:D0:CC:1E:C4
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e36342e302f31382d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         51:d3:af:50:92:42:9b:8a:0b:f8:f7:24:0c:20:9e:bd:9c:64:
         86:4a:ad:ed:58:ef:36:48:27:18:8e:c7:50:ac:b8:f5:d0:14:
         40:88:13:c1:6b:99:e6:7b:8a:22:10:65:b0:7e:67:99:81:93:
         a5:ff:c6:c0:e8:19:4c:1e:f5:f7:1d:05:09:f1:7c:86:07:30:
         d2:02:b9:1b:d7:27:0a:32:f2:28:95:51:6b:4f:90:38:64:8b:
         44:d0:4b:a9:41:eb:53:87:19:c7:ab:ae:fd:76:12:31:43:5a:
         90:f5:3b:e8:00:65:4f:b2:a7:07:f2:7f:06:7b:10:50:6d:25:
         9c:30:9b:08:a8:7d:f3:0e:4b:3c:70:1c:ed:52:64:42:f9:35:
         c2:1b:97:e2:e3:4d:8f:3b:23:1b:1b:14:58:26:87:7c:14:10:
         f5:bb:38:55:72:80:fe:f3:32:fb:16:5e:8b:09:90:39:15:16:
         4c:ea:ed:4e:ce:90:95:70:31:8b:bb:2c:96:3e:f8:71:08:c0:
         a6:0d:dd:63:3e:24:8e:8a:d0:26:90:cc:14:5f:e6:df:56:e2:
         3c:ef:f7:02:6e:0d:38:e5:11:2b:2f:c6:72:7d:f5:e5:2b:66:
         5d:43:d7:bb:b7:1a:b5:85:a5:21:ed:58:62:86:1a:bf:61:49:
         f6:1d:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:11:17 2025 by rpki-client