Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa
File:                     3139302e31342e352e302f32342d3234203d3e203236363137.roa (raw, json)
Hash identifier:          Rcs4bKx+EQcNNtfR14yHGeTGREuECnO985niXF4UOAE=
Subject key identifier:   A0:36:7A:67:FF:97:BD:3B:C4:78:24:FD:2B:4E:19:C9:A0:E6:F5:00
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       3E83E3F3E036920BCAC914ED0ABAFBF327FD386E
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:15:35 +0000
ROA not before:           Tue 04 Feb 2025 18:10:35 +0000
ROA not after:            Tue 03 Feb 2026 18:15:35 +0000
asID:                     26617
IP address blocks:        190.14.5.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:83:e3:f3:e0:36:92:0b:ca:c9:14:ed:0a:ba:fb:f3:27:fd:38:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:35 2025 GMT
            Not After : Feb  3 18:15:35 2026 GMT
        Subject: CN=A0367A67FF97BD3BC47824FD2B4E19C9A0E6F500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1b:6b:a9:a5:68:ff:28:11:a9:60:4f:e0:0f:
                    c7:18:a5:1c:64:91:0f:f8:ee:0d:1d:12:2d:51:24:
                    e1:59:cc:3e:38:b1:11:78:a9:c8:88:cf:ba:02:ea:
                    f8:35:9d:ca:87:91:4b:5a:11:60:45:c0:63:cf:6a:
                    0e:41:03:f8:3f:6e:44:b8:c9:95:e6:47:32:1a:04:
                    a9:fd:b1:83:87:9f:4a:19:87:84:f2:65:bb:50:f0:
                    10:19:52:e1:2f:8d:27:a5:93:99:2a:9a:59:13:b3:
                    20:d4:c3:91:37:a9:68:5a:a8:91:22:b7:7c:1f:9e:
                    ad:3a:e8:9c:62:29:a0:1f:df:c2:07:86:58:26:de:
                    e8:6a:e2:88:c6:31:35:80:dc:cb:37:01:41:3c:52:
                    87:69:9d:b7:bc:1f:89:14:a4:ae:e3:82:1b:67:83:
                    40:67:91:8c:51:ad:d9:31:7a:79:ec:d9:22:b3:d4:
                    0d:6b:7e:ab:80:e0:b4:3f:67:44:06:4d:96:21:16:
                    40:a0:1e:19:8a:77:bc:ed:85:5a:73:e2:4a:c5:26:
                    8e:d5:6c:7c:47:fe:06:6a:4e:25:66:08:16:9a:c9:
                    b0:03:07:9f:d4:64:94:d9:42:60:f2:24:f0:ad:a0:
                    25:b1:52:21:53:3f:13:48:f6:9c:44:dc:71:ff:4a:
                    06:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:36:7A:67:FF:97:BD:3B:C4:78:24:FD:2B:4E:19:C9:A0:E6:F5:00
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e31342e352e302f32342d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cf:9b:8b:1f:67:fc:c4:8a:56:93:59:e9:dc:5d:8f:63:9c:
         eb:a3:e9:4e:b7:e2:6b:a8:87:c1:df:18:1f:66:6b:e6:26:0b:
         18:45:b6:37:6b:69:00:03:ca:63:f1:9f:e3:00:60:c0:66:c4:
         36:db:8c:ae:83:4d:d5:e7:96:0a:fc:fe:5a:77:89:7d:db:c6:
         e7:ae:41:99:98:0f:d0:ac:8a:da:47:90:a7:d1:c0:a0:c3:28:
         e7:80:b4:5d:02:b3:a7:9a:ae:20:48:33:4b:f1:3a:dd:bd:26:
         46:07:53:06:23:55:e8:1f:c1:76:a3:49:f1:8a:4e:2c:b0:94:
         60:e7:51:91:43:ba:70:c2:3c:26:94:29:f2:d7:36:58:9c:99:
         14:7c:29:e8:af:d0:fa:8f:19:32:65:ae:aa:55:8e:d3:5c:ba:
         94:98:ad:fa:a9:e5:72:e8:36:e0:06:bb:01:5d:26:a6:65:99:
         9e:92:61:07:9d:3b:df:55:69:14:d5:57:fc:9e:9f:73:29:23:
         63:34:16:cb:2a:84:11:dd:cf:a3:8e:f1:b2:a9:df:2c:6a:49:
         77:a5:56:76:a8:f3:8d:24:30:45:2b:a6:eb:16:b2:0f:f7:4d:
         41:c2:0d:74:98:9b:fb:c3:0c:a2:15:8c:eb:08:f3:ae:86:68:
         26:29:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:25 2025 by rpki-client