Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32302e302f32322d3234203d3e203236363137.roa
File:                     3139302e3131312e32302e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          sctaGMKjLFOltEfrU1geBi21cZAqMqc7wgIvSj147rY=
Subject key identifier:   AC:50:58:09:35:5A:1D:10:E3:DF:A2:19:66:A0:79:33:87:DC:A4:B2
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       055C3D641CCF2E94407DC558C456BCB028891493
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32302e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:19 +0000
ROA not before:           Tue 04 Feb 2025 18:10:19 +0000
ROA not after:            Tue 03 Feb 2026 18:15:19 +0000
asID:                     26617
IP address blocks:        190.111.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:5c:3d:64:1c:cf:2e:94:40:7d:c5:58:c4:56:bc:b0:28:89:14:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:19 2025 GMT
            Not After : Feb  3 18:15:19 2026 GMT
        Subject: CN=AC505809355A1D10E3DFA21966A0793387DCA4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:b1:c5:07:7b:ad:7f:63:16:17:92:46:20:
                    54:4c:e3:ef:e8:90:2d:66:28:15:76:b0:0a:3e:aa:
                    88:92:40:a2:da:df:ba:ac:16:1d:95:80:2b:46:ba:
                    bc:81:28:75:36:29:8b:fe:b8:3a:44:34:00:00:21:
                    9d:7d:47:8c:93:1e:9d:d8:2f:6e:57:99:d3:3a:77:
                    b5:3e:9b:81:cd:b2:da:f5:c8:75:1a:7d:49:44:5b:
                    f6:17:b5:4d:67:5d:e1:c6:2d:df:a7:e1:53:d8:ec:
                    0a:15:65:26:70:3b:63:a3:2a:17:db:ca:a7:ec:dd:
                    86:0a:81:7c:95:e1:23:ff:91:bf:f0:d3:63:e7:36:
                    e1:ac:f7:86:54:87:a0:1e:ab:bc:c3:da:6e:28:99:
                    d5:0b:35:6a:7c:27:72:8d:c2:e1:15:cb:ca:d7:17:
                    20:11:9a:07:95:d0:06:67:4c:a8:e7:b6:09:5f:5e:
                    e8:af:81:92:71:ee:4f:54:a6:02:f6:d4:6f:d4:97:
                    05:da:17:23:0a:67:1c:b5:58:f9:3b:1f:1b:47:36:
                    61:c3:a9:47:a4:ab:66:f2:12:56:c6:2e:1a:08:70:
                    57:2e:82:0f:ae:20:c5:30:ec:35:34:49:e1:8b:87:
                    73:b9:fa:cf:95:84:df:95:e9:fb:35:33:9a:e3:a0:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:58:09:35:5A:1D:10:E3:DF:A2:19:66:A0:79:33:87:DC:A4:B2
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32302e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:1b:6a:88:04:5a:f7:c8:af:47:81:81:13:df:d4:67:e5:
         1f:49:8a:e3:2c:ff:3c:57:c5:55:e8:a3:cf:eb:94:0f:ee:ca:
         aa:8e:a2:5b:df:e8:91:dc:0a:b9:33:31:58:69:4d:90:eb:34:
         7d:04:08:c2:59:0f:82:8f:d5:2f:51:7b:f4:4b:ed:8d:99:28:
         9e:b3:04:3f:6b:0c:70:8f:92:39:bf:23:12:6c:9a:c5:98:9b:
         b2:4f:57:b5:be:ea:83:c9:7b:8b:d3:12:5d:9e:63:8a:bb:8d:
         4f:da:ea:4b:a6:48:c9:0c:64:93:aa:9e:0d:9c:6c:8a:76:74:
         4a:c1:f3:1c:6f:24:d4:05:f4:56:03:cc:b1:72:0d:e0:cc:45:
         4c:20:0c:e8:41:cb:67:e8:b1:a1:96:68:9f:8d:6e:02:66:0c:
         c4:6b:50:fc:54:30:15:93:d8:27:14:b6:12:66:56:9f:d9:c8:
         9e:11:f7:b3:66:c0:b8:ae:a0:aa:cc:9c:58:c3:be:92:20:d7:
         d9:5d:76:a5:aa:f3:75:e3:81:b3:46:d1:d9:53:8b:6c:09:bf:
         3a:35:7d:15:83:3c:fc:ad:7d:5e:bc:54:95:10:9b:bd:c7:66:
         26:ab:b4:17:db:37:ae:b1:06:07:cb:a8:a2:45:10:81:c0:d0:
         fe:4b:5a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:09 2025 by rpki-client