Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa
File:                     3139302e342e32352e302f32342d3234203d3e203233333833.roa (raw, json)
Hash identifier:          6VyZrmew55/+wOPXf0pE9flvbjVAO7ay16I9oVo7Guc=
Subject key identifier:   07:D9:6E:1C:54:F0:C0:75:E7:D8:1D:0B:3B:52:40:6F:36:36:01:C0
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       01DF9E3F72598E37106D9D87A8A2ADBC5C72A2B3
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa
Signing time:             Tue 04 Feb 2025 18:15:27 +0000
ROA not before:           Tue 04 Feb 2025 18:10:27 +0000
ROA not after:            Tue 03 Feb 2026 18:15:27 +0000
asID:                     23383
IP address blocks:        190.4.25.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:9e:3f:72:59:8e:37:10:6d:9d:87:a8:a2:ad:bc:5c:72:a2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Feb  4 18:10:27 2025 GMT
            Not After : Feb  3 18:15:27 2026 GMT
        Subject: CN=07D96E1C54F0C075E7D81D0B3B52406F363601C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:24:b6:40:be:3c:4b:38:2b:6d:e5:e1:99:
                    ca:6d:57:7f:27:3c:de:2a:89:05:b6:74:b9:eb:ce:
                    eb:e7:95:ee:99:3c:61:ad:59:9a:8f:d0:44:ad:26:
                    b3:3c:51:10:ff:85:cb:3c:f8:19:d1:85:ee:18:1c:
                    9d:17:61:bf:ed:9e:ae:fd:3a:88:da:f4:ca:15:df:
                    63:32:25:a4:fe:f8:c7:2b:2f:cc:67:29:fb:db:ca:
                    a8:c6:50:6f:33:9a:00:d6:1f:21:a3:e6:32:1e:19:
                    ae:0b:fa:f2:c4:37:76:5c:c8:aa:bf:2f:78:78:1f:
                    fb:5f:ca:bb:b5:da:1e:dd:75:1b:ab:1f:78:5e:c7:
                    55:be:99:02:3e:fb:3c:d2:30:a1:e6:2e:e4:80:b6:
                    7b:4c:d2:f1:f8:2a:65:71:e9:4f:9e:b0:9f:b5:75:
                    e3:18:07:16:ce:d9:31:72:6b:6e:e9:9b:55:1b:df:
                    31:62:2f:48:21:2e:7a:d6:5b:0c:e0:78:bb:bb:54:
                    5a:ae:4f:5a:3d:75:f0:29:53:63:15:99:97:06:c8:
                    32:69:8c:33:4c:57:31:cf:52:d5:cb:7f:c4:e1:dc:
                    60:45:3b:04:21:fd:8c:85:4b:d6:a4:3b:70:75:f4:
                    06:b6:e2:38:64:95:b8:37:de:1e:26:03:f3:d9:68:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D9:6E:1C:54:F0:C0:75:E7:D8:1D:0B:3B:52:40:6F:36:36:01:C0
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e32352e302f32342d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:53:5b:f9:43:9d:8f:86:81:c6:e3:da:17:26:fd:53:d9:02:
         a3:0f:b8:ab:63:1f:5d:09:6f:69:21:6c:93:77:47:55:03:50:
         16:e4:57:33:bf:30:cf:df:09:61:72:51:b7:79:a2:ac:83:31:
         38:98:9a:6f:ce:b7:46:a5:38:5a:6a:fa:83:a7:74:a1:82:95:
         b6:c6:cd:3f:a4:49:b2:91:f0:14:9c:0c:79:d1:84:df:9a:58:
         02:0f:d9:13:34:95:36:c9:bd:91:fa:2d:f5:a8:66:5b:91:56:
         48:a9:2d:e3:6b:70:c5:5b:88:67:24:4f:ef:bd:0d:68:6f:ab:
         3f:68:23:00:80:93:c8:93:e2:24:59:76:fc:95:4f:a7:f8:9a:
         64:8e:5d:d0:c2:ee:20:d1:fe:a3:50:1e:70:4e:e4:81:91:4a:
         b4:61:da:ad:9e:72:5c:0f:49:60:fa:8d:3f:88:92:83:ff:96:
         f1:03:42:2c:7b:c7:aa:70:f9:3a:fe:02:3b:eb:68:6f:5a:c3:
         bc:30:40:cb:2c:79:1b:bd:8e:90:39:2f:5e:8d:a1:fb:2c:b2:
         94:db:19:1f:ab:b5:84:7b:e1:11:cf:f0:0c:87:82:ce:e2:60:
         dc:40:00:a5:c7:e6:08:38:81:71:29:3d:6a:01:e0:1a:02:39:
         0b:e8:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:24 2025 by rpki-client