Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32382e302f32342d3234203d3e203236363137.roa
File:                     3139302e3131312e32382e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          NWL8gyKIivNORyaSs2KfgFDPoSbs7a84/4QhHfngbrM=
Subject key identifier:   FA:23:A1:AD:D2:E9:67:50:42:B4:4E:3E:2C:E9:2F:38:4D:CF:54:F0
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       2B480F3C01B623175E4F659D608928B8FBC4AE33
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32382e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:35 +0000
ROA not before:           Tue 04 Feb 2025 18:10:35 +0000
ROA not after:            Tue 03 Feb 2026 18:15:35 +0000
asID:                     26617
IP address blocks:        190.111.28.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:48:0f:3c:01:b6:23:17:5e:4f:65:9d:60:89:28:b8:fb:c4:ae:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:35 2025 GMT
            Not After : Feb  3 18:15:35 2026 GMT
        Subject: CN=FA23A1ADD2E9675042B44E3E2CE92F384DCF54F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:98:7c:32:15:9e:4e:25:a4:1a:9f:8f:87:a9:
                    6c:9b:80:0d:c5:1d:3f:69:76:f0:cc:82:1f:c6:21:
                    c5:2c:46:a2:c0:01:c4:b2:87:1b:06:0e:1b:c4:67:
                    c9:ef:2f:66:3e:5c:5d:67:54:d4:4f:15:10:08:1b:
                    43:36:ad:96:f4:a9:1e:af:21:07:5b:4e:63:e9:cf:
                    27:ba:35:29:ca:31:ab:18:55:77:34:1a:8d:09:63:
                    8f:c3:20:7a:bc:f8:f2:0e:19:76:92:6b:1c:cf:46:
                    00:d0:c4:1e:ef:c6:94:c4:ec:47:cc:10:0e:08:50:
                    4d:61:a4:72:d3:6c:d7:39:83:dd:7c:3b:87:32:df:
                    37:16:64:d1:89:6f:e3:b8:76:d9:49:aa:40:ab:d8:
                    3c:e9:33:e5:94:8b:00:77:af:28:02:c0:cc:a3:2d:
                    1c:b3:c9:99:a6:3d:47:fc:b1:05:44:18:dd:c4:c2:
                    96:07:87:3e:62:5c:aa:d2:c4:8c:c0:c0:84:5b:7e:
                    ae:bd:f5:a0:26:85:74:5d:42:e3:59:fb:49:ba:64:
                    78:19:2d:4e:b8:49:9a:96:fa:25:bf:3f:1c:23:5d:
                    cb:e3:ce:f1:aa:1e:19:3f:d8:90:98:a7:bf:a4:b0:
                    98:81:25:3b:0f:3e:b8:4c:4d:17:b4:1f:10:96:c1:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:A1:AD:D2:E9:67:50:42:B4:4E:3E:2C:E9:2F:38:4D:CF:54:F0
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e32382e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:d5:af:2d:e6:b0:52:5f:24:bf:65:72:91:34:b0:d9:fc:23:
         89:df:34:84:a3:34:14:fe:fa:53:91:b3:c4:f1:31:ff:f3:ba:
         b4:62:e2:83:38:ff:03:06:95:59:f5:d8:a9:ef:67:41:ae:57:
         46:b5:7b:4e:66:b8:34:e3:45:f7:bd:99:ed:27:16:0a:0b:98:
         e3:71:c3:e4:a2:fd:0a:67:23:59:c4:c2:7f:69:17:37:c7:31:
         15:ad:03:42:86:cb:cf:c6:42:e3:13:07:c3:0f:d8:38:25:12:
         8c:13:28:32:6f:73:06:76:31:b4:d0:79:15:57:84:21:65:01:
         65:8f:9b:72:3d:22:12:ec:72:cf:79:34:ff:67:aa:fe:c7:3a:
         bb:b3:89:80:af:55:be:fd:17:52:ff:a0:a5:db:3f:75:7c:8b:
         2e:74:69:0d:59:3c:cc:b8:2f:37:6e:ba:51:bf:2a:44:82:76:
         29:95:7c:51:3c:d6:ed:f0:dc:4c:b8:e3:f1:e0:d4:a1:ce:db:
         bb:4e:c5:52:6c:77:c3:16:d4:da:13:77:ea:d8:a5:a5:06:d3:
         25:c5:cc:0a:0a:40:db:85:cc:c3:72:17:45:b4:bd:d7:d9:ea:
         f9:f1:d6:44:d5:e9:c9:b9:88:e3:7a:70:20:d9:dc:25:09:f5:
         7e:56:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:09:10 2025 by rpki-client