Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131372e302f32342d3234203d3e203236363137.roa
File:                     3139302e3130342e3131372e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          5kcfTmA6U4UYo0w/NXjlm00Ny3tfLuATIoScq8wbQA4=
Subject key identifier:   85:C3:61:EB:3E:12:22:D9:9A:CC:DC:99:37:D9:DA:D4:37:9E:14:58
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       38C5322F55B207EC757649FD29C3FED4A564C670
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131372e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:06:32 +0000
ROA not before:           Tue 04 Feb 2025 18:01:32 +0000
ROA not after:            Tue 03 Feb 2026 18:06:32 +0000
asID:                     26617
IP address blocks:        190.104.117.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c5:32:2f:55:b2:07:ec:75:76:49:fd:29:c3:fe:d4:a5:64:c6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:32 2025 GMT
            Not After : Feb  3 18:06:32 2026 GMT
        Subject: CN=85C361EB3E1222D99ACCDC9937D9DAD4379E1458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:4b:df:3a:4b:a0:97:d0:af:9f:8e:47:d1:
                    81:ad:09:ce:94:5e:01:1d:e3:30:42:79:12:65:91:
                    53:39:ad:48:39:15:21:c4:8d:7e:75:24:87:f6:ff:
                    da:ab:a2:db:3f:f8:41:16:8e:04:b8:c0:25:71:28:
                    dc:61:27:10:6b:e0:7a:c0:1f:f3:da:ca:e9:51:c2:
                    90:77:66:d0:3e:32:dd:09:b5:37:ae:a2:19:8e:0b:
                    65:a9:8f:fc:bd:72:28:61:29:f5:bc:38:3e:4c:b2:
                    37:92:40:d6:95:df:18:93:b9:9f:04:25:0e:7e:f9:
                    98:5c:27:56:78:c1:a4:06:8b:50:22:88:88:62:10:
                    a1:89:9e:c4:04:b1:22:3f:d8:21:d9:25:4e:f5:83:
                    fc:93:93:b6:9b:32:fb:bf:c2:f0:61:f1:21:c1:18:
                    70:95:98:93:a4:a0:01:74:92:bd:63:72:19:8f:42:
                    b4:1e:48:80:8b:6b:05:0c:75:e8:f7:47:de:a0:f8:
                    ae:fd:21:90:59:51:5e:56:72:a9:10:15:b2:13:6b:
                    9e:47:0f:8e:89:7b:f2:84:9a:cf:e4:08:3e:8a:4f:
                    65:d1:dd:89:57:02:9b:a4:f5:87:0c:47:56:50:9a:
                    4d:ea:39:fd:97:91:6b:cb:27:aa:9b:77:b2:36:e9:
                    f9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C3:61:EB:3E:12:22:D9:9A:CC:DC:99:37:D9:DA:D4:37:9E:14:58
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e3130342e3131372e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:20:34:74:c4:0b:94:3c:ae:aa:05:fb:ad:e0:69:ff:66:49:
         62:09:9b:40:3a:4a:e7:74:c8:3b:7b:41:e5:66:9b:d9:02:7d:
         c9:8d:10:5a:0f:12:16:86:4a:5c:7d:af:c7:5a:c4:fa:49:4f:
         4b:28:00:35:90:4d:a2:ea:e3:8a:8b:2a:ba:1a:b1:86:d5:da:
         34:45:9c:6e:a6:c8:3d:10:e2:28:d1:18:9d:f2:15:e8:08:51:
         24:3b:98:d7:5f:1a:1d:c6:60:ab:f5:22:20:97:7a:da:73:9e:
         cd:ac:2d:20:bb:16:2a:00:01:ce:3d:a3:d7:d3:fb:9e:8b:84:
         d6:4c:e9:28:7e:e5:27:e3:02:b6:08:f0:83:e6:6f:ce:ab:7c:
         37:2f:19:18:e9:ea:3d:cf:79:64:7e:1a:8d:d7:d1:9b:13:cc:
         8b:54:4f:39:0d:50:23:5b:91:28:64:25:ed:59:b6:e1:3c:63:
         ab:34:1f:52:4b:36:27:1e:b5:e4:99:39:22:14:a3:2f:99:15:
         19:f3:05:dd:a2:41:0d:56:4b:07:c7:35:99:23:92:84:8d:90:
         50:4b:68:e9:6a:8b:b9:48:d9:39:e8:f5:dc:69:03:46:06:e5:
         ea:12:47:d5:a3:f1:cb:20:40:9a:2e:f6:1e:50:ee:47:71:d5:
         55:69:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:15 2025 by rpki-client