Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e33302e302f32332d3234203d3e203237373432.roa
File:                     3139302e3131312e33302e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier:          QW32CvksjO4c1CFxgnqSyMTDWpsTzP+qAz9kjNrwh1I=
Subject key identifier:   12:83:F5:9C:9D:56:06:7F:08:8F:5A:F9:31:C6:D4:20:99:58:C5:D8
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       1949C1619FD560F51EF52669F5240BFA6C7161C0
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e33302e302f32332d3234203d3e203237373432.roa
Signing time:             Tue 04 Feb 2025 18:15:18 +0000
ROA not before:           Tue 04 Feb 2025 18:10:18 +0000
ROA not after:            Tue 03 Feb 2026 18:15:18 +0000
asID:                     27742
IP address blocks:        190.111.30.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:49:c1:61:9f:d5:60:f5:1e:f5:26:69:f5:24:0b:fa:6c:71:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:18 2025 GMT
            Not After : Feb  3 18:15:18 2026 GMT
        Subject: CN=1283F59C9D56067F088F5AF931C6D4209958C5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:6b:5b:2f:dd:00:0e:b3:1b:d6:fd:04:d6:
                    3d:a7:64:55:a4:43:45:b2:2a:49:be:3c:1c:fd:37:
                    c3:35:a8:39:6a:fe:4f:63:7a:d1:be:29:3c:51:66:
                    06:bc:f9:5c:18:08:73:f7:e8:bf:ac:45:5b:86:ac:
                    ab:2d:65:68:b3:f6:15:78:e7:8c:f7:2e:c1:c5:3f:
                    6c:4f:6c:9a:d1:8b:8b:6d:c0:86:de:db:97:5b:f9:
                    27:fd:2d:8f:65:d9:02:fe:8c:8a:b9:4b:54:9c:6a:
                    6e:4b:0b:14:50:39:8f:76:fb:09:63:7e:b0:61:68:
                    d0:e6:5f:86:b1:b9:79:01:fd:c3:ea:08:f6:b6:a5:
                    7a:80:72:15:b4:b6:48:93:77:6f:f0:2c:e3:18:9e:
                    8b:ef:06:20:e2:55:e0:18:af:1e:b9:3a:0f:90:40:
                    67:ca:c1:aa:e9:46:e8:82:dd:3a:91:7f:74:45:55:
                    a3:ce:ed:ce:28:0d:4b:d9:91:19:85:14:76:a6:bb:
                    cc:bc:8e:a2:ca:a9:28:7b:8c:27:27:3b:d6:f2:8b:
                    4c:f5:f8:d9:63:be:0f:19:c1:16:1b:92:cd:8e:e2:
                    91:6d:08:f4:f3:b2:2f:9e:47:04:cd:2c:35:b9:36:
                    bf:ab:60:a3:a6:64:61:1c:5c:2a:18:6d:d4:b3:a2:
                    9a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:83:F5:9C:9D:56:06:7F:08:8F:5A:F9:31:C6:D4:20:99:58:C5:D8
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e3131312e33302e302f32332d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:64:31:f3:62:f8:25:1d:28:75:31:b0:b4:71:5c:fc:81:
         a9:6f:7f:a4:08:b2:0e:0f:cd:58:92:e2:b6:6d:b0:60:85:a5:
         6f:0f:74:3d:bc:5f:94:0b:16:6e:5a:43:f0:ab:c8:51:57:35:
         76:79:7f:a8:fa:d6:c4:65:1c:70:5b:12:73:d0:f7:08:b1:b9:
         d0:c9:1c:82:10:5e:59:49:15:61:39:30:0f:2e:b9:47:df:04:
         fa:8c:05:dd:0f:29:22:bf:d9:0d:f9:33:42:51:7f:40:df:46:
         2e:d6:37:be:c7:86:d9:f4:80:d5:ff:fb:23:ff:e9:0e:80:07:
         bd:07:a7:eb:59:e9:33:5d:9c:bd:21:03:ae:80:c4:09:b1:de:
         aa:47:a9:c7:e5:01:fe:04:14:b5:a3:50:68:7f:38:49:f2:97:
         4f:bc:2e:24:b6:ad:c2:f3:91:91:c8:5d:a0:39:0c:62:ea:21:
         a3:cf:0b:76:60:4e:4a:50:be:d0:d1:8e:9c:b3:36:9e:f6:c7:
         24:78:dc:21:95:3d:a7:7b:cf:cb:0f:15:77:33:eb:73:0e:66:
         73:6b:21:7c:33:16:e3:ab:92:e0:03:ff:a2:c8:cb:e4:f5:19:
         92:59:a0:23:9e:80:15:03:bb:0b:b5:1b:66:3e:23:83:91:77:
         44:ae:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:17 2025 by rpki-client