Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133362e302f32322d3234203d3e203532333632.roa
File:                     3139302e31342e3133362e302f32322d3234203d3e203532333632.roa (raw, json)
Hash identifier:          IrZcCTuBMxfa+KvVYpStHkuxmi127WseAqysBBXsmpI=
Subject key identifier:   B5:83:CE:EE:D5:92:C3:09:9B:4C:E0:01:6E:DF:70:F5:1C:79:BA:DA
Certificate issuer:       /CN=54E41C0DADB12465AFF5CF7A38930582E4499083
Certificate serial:       41D773383F70F31B477F7D24DECEDABFD2E01163
Authority key identifier: 54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133362e302f32322d3234203d3e203532333632.roa
Signing time:             Tue 04 Feb 2025 18:06:38 +0000
ROA not before:           Tue 04 Feb 2025 18:01:38 +0000
ROA not after:            Tue 03 Feb 2026 18:06:38 +0000
asID:                     52362
IP address blocks:        190.14.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d7:73:38:3f:70:f3:1b:47:7f:7d:24:de:ce:da:bf:d2:e0:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54E41C0DADB12465AFF5CF7A38930582E4499083
        Validity
            Not Before: Feb  4 18:01:38 2025 GMT
            Not After : Feb  3 18:06:38 2026 GMT
        Subject: CN=B583CEEED592C3099B4CE0016EDF70F51C79BADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:18:80:72:94:e9:9d:6e:c7:55:66:f8:bc:67:
                    56:3e:1d:a7:57:f9:44:05:d9:ab:ee:11:3b:e1:36:
                    16:6c:00:61:5d:48:e0:82:d5:de:ba:8a:ff:28:8d:
                    f3:e8:16:8f:a2:c0:64:8e:4a:9c:08:f5:d8:9f:27:
                    87:3d:d4:02:85:30:62:b7:fa:34:44:93:0a:28:7a:
                    e2:a3:67:15:e4:e2:d0:c8:e4:5c:fe:cf:ee:1f:60:
                    ba:a6:6f:8f:97:1d:59:bf:fb:dc:ba:6d:fd:e9:06:
                    d1:82:54:a5:2c:4a:c8:a5:92:b3:ec:3b:f6:40:07:
                    cd:2d:39:38:52:a0:f5:53:45:3e:87:79:47:e8:91:
                    c8:3c:56:4c:fc:c6:21:93:cf:99:d5:d3:a2:ad:25:
                    83:9d:19:b1:c7:66:0e:f8:5e:65:6b:16:20:fa:37:
                    c8:44:33:94:cf:72:61:39:c2:6f:60:48:08:0d:b7:
                    8f:88:1e:b4:23:89:a1:7c:13:a7:6e:4c:85:b2:cb:
                    ff:16:60:64:de:58:95:9f:d7:e2:97:bc:a6:5d:4a:
                    2d:e1:76:31:c1:ca:14:36:a5:4c:89:a5:78:cc:d2:
                    05:97:eb:a0:c2:66:f3:96:ad:48:f6:f4:6d:df:20:
                    8b:26:48:52:db:e2:31:64:32:09:09:0b:cf:cb:48:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:83:CE:EE:D5:92:C3:09:9B:4C:E0:01:6E:DF:70:F5:1C:79:BA:DA
            X509v3 Authority Key Identifier:
                keyid:54:E4:1C:0D:AD:B1:24:65:AF:F5:CF:7A:38:93:05:82:E4:49:90:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/54E41C0DADB12465AFF5CF7A38930582E4499083.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54E41C0DADB12465AFF5CF7A38930582E4499083.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/456E2D69A942B33C7C481F08FD0E7AEA5DFAE44F485D07ED0A74064DDECA6333/0/3139302e31342e3133362e302f32322d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:93:63:77:a0:d2:75:4a:0c:72:3c:85:20:78:34:d4:e2:
         8a:5f:b0:27:fe:f7:f1:56:21:57:a8:d8:2b:e0:7c:6e:d2:01:
         63:c8:b8:6d:3d:4e:c0:04:e0:eb:3b:4f:89:0c:e1:71:7d:db:
         19:66:20:cd:7c:67:7b:a8:61:75:d5:2d:85:ef:ec:0d:96:b4:
         b7:2c:3d:1d:53:3e:87:a3:65:65:45:1a:94:aa:47:be:c3:60:
         47:0e:9c:3e:98:a3:f4:08:09:20:f1:79:54:65:7d:0c:dd:56:
         82:b0:fc:5a:14:70:73:28:d9:bb:51:2a:b2:43:42:d8:d1:3d:
         56:a1:3b:be:4c:a1:a1:10:f6:fa:fd:f2:28:9d:cb:b0:75:95:
         28:7f:33:1b:5b:d2:9a:7d:fe:ae:32:d7:ae:58:a3:38:7c:39:
         55:83:eb:e0:9e:fc:cd:c7:49:46:e3:a8:3e:7f:e7:9b:d9:7c:
         94:ac:b7:d2:7e:5d:da:84:9c:bb:92:01:37:b4:80:05:b4:a9:
         af:9d:75:60:a3:17:cc:0a:95:94:29:bf:e9:fa:f5:6a:20:1f:
         54:36:3a:f6:42:75:62:ee:68:5f:b8:30:fd:1f:84:4f:c3:e1:
         85:db:09:f0:7f:d9:6f:e5:26:e5:52:cc:f0:87:fe:46:d5:67:
         73:f1:5b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:56:58 2025 by rpki-client