Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37352e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          /A3/V812JNS2FzKD+hMzy3FBDYNk4P+sNn59N9BMIQs=
Subject key identifier:   99:AE:8C:D3:4C:13:A3:76:F4:46:4C:07:84:E4:5D:F7:36:91:23:AE
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       510FE747D54E6DAEA68B32C02CB8AEE14C78CF89
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:36 +0000
ROA not before:           Tue 04 Feb 2025 18:08:36 +0000
ROA not after:            Tue 03 Feb 2026 18:13:36 +0000
asID:                     52493
IP address blocks:        168.90.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0f:e7:47:d5:4e:6d:ae:a6:8b:32:c0:2c:b8:ae:e1:4c:78:cf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:36 2025 GMT
            Not After : Feb  3 18:13:36 2026 GMT
        Subject: CN=99AE8CD34C13A376F4464C0784E45DF7369123AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:f8:cc:9f:58:b5:53:b5:84:40:83:a7:3c:
                    4e:8a:17:79:d3:be:60:07:47:b3:38:45:3b:68:e0:
                    8e:cd:4b:09:66:c3:c6:f3:c3:ab:a1:69:ce:cc:9c:
                    9a:8c:5c:ef:15:cd:e5:e1:31:cb:f6:94:5d:69:0f:
                    e2:95:64:1d:4b:d1:17:55:cf:92:60:13:56:56:e2:
                    8a:8a:8d:b2:12:75:e6:bd:6d:d3:7b:7d:d7:0e:b7:
                    05:4f:a1:79:44:ba:fb:ab:1f:2e:6a:ad:63:9d:65:
                    e8:d6:41:41:0a:94:6a:e9:11:f2:fb:ad:79:f4:a9:
                    ed:17:f9:a3:cd:25:e7:60:8f:fb:51:62:70:79:de:
                    5b:3c:2a:9f:e5:c1:b4:b1:be:5c:78:3b:db:88:04:
                    30:be:ac:5c:2c:07:66:2f:5e:dd:97:4f:ef:41:9f:
                    55:cf:d7:87:a1:89:5d:c7:b0:c0:8d:36:fd:05:10:
                    90:b1:92:9c:54:ac:0e:1b:bb:2c:0f:1b:41:0c:33:
                    5b:69:87:0a:54:15:92:74:93:11:25:bd:4e:5f:97:
                    78:af:99:44:b4:5e:46:1d:33:34:c4:5a:10:40:e0:
                    13:46:0e:a1:ee:71:be:9d:39:0a:29:2d:b0:b6:59:
                    f2:ca:7f:17:62:33:bf:4b:9d:38:88:5e:e0:e3:4f:
                    88:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:8C:D3:4C:13:A3:76:F4:46:4C:07:84:E4:5D:F7:36:91:23:AE
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:5a:7c:89:a8:84:0e:ce:e0:6d:87:ca:89:36:11:56:ce:
         ce:bb:be:44:71:d1:9b:0a:ee:fd:35:38:46:bb:4a:a9:8d:f8:
         f6:8a:28:75:7c:a0:1f:b4:63:7d:68:87:7c:32:f8:83:a9:a0:
         88:86:09:33:df:7c:f0:ac:bb:a9:92:20:12:68:8a:e9:7c:fb:
         ce:9f:cb:49:99:35:55:7f:10:3e:68:34:91:c9:45:d8:4f:ba:
         79:5f:99:48:07:02:3a:5c:65:74:b6:9d:f7:03:28:e7:5f:62:
         ba:aa:47:4d:11:96:6c:bf:82:56:13:b9:2d:7a:8d:df:26:a6:
         df:b4:5b:a8:a9:4d:cd:8a:28:2a:dc:0f:c9:dd:e7:d2:1e:02:
         91:12:47:d3:20:dd:3a:6f:0c:61:54:8b:03:88:2b:42:35:c2:
         46:85:91:6d:12:eb:c3:25:a1:4d:92:3e:f3:fa:2e:f9:e5:2d:
         29:7b:60:cb:e6:54:2e:fa:f8:c1:1b:3d:4b:7c:11:72:ea:54:
         b6:1e:02:fa:be:94:2e:42:8b:fb:61:ec:bc:ef:4b:f0:05:4d:
         e4:f4:1b:20:f3:f4:f3:24:92:89:ae:01:af:e9:7d:f4:42:eb:
         87:ea:72:a0:da:1f:91:58:4e:e0:dd:3a:54:f5:80:b3:68:92:
         6f:4a:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:11 2025 by rpki-client