Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e3233322e302e302f31332d3234203d3e2036313437.roa
File:                     3139302e3233322e302e302f31332d3234203d3e2036313437.roa (raw, json)
Hash identifier:          YUOz+rLKRH9EAARV1O+2P4xcPXau1ewjH5sgBC6dnnM=
Subject key identifier:   62:BB:E8:EC:CD:56:5D:84:4F:28:64:AE:FA:BA:FD:D8:B8:61:12:FA
Certificate issuer:       /CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
Certificate serial:       242CBA6E6BCC920EFC60B863BE2D06401C095C74
Authority key identifier: 74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e3233322e302e302f31332d3234203d3e2036313437.roa
Signing time:             Tue 04 Feb 2025 20:05:14 +0000
ROA not before:           Tue 04 Feb 2025 20:00:14 +0000
ROA not after:            Tue 03 Feb 2026 20:05:14 +0000
asID:                     6147
IP address blocks:        190.232.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2c:ba:6e:6b:cc:92:0e:fc:60:b8:63:be:2d:06:40:1c:09:5c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=747499EE49F6E45F50C4860BE79D79CBD7CB57B1
        Validity
            Not Before: Feb  4 20:00:14 2025 GMT
            Not After : Feb  3 20:05:14 2026 GMT
        Subject: CN=62BBE8ECCD565D844F2864AEFABAFDD8B86112FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:d0:38:b9:8c:b2:0c:45:77:c3:24:28:d9:
                    b2:a7:c2:eb:fc:9b:7d:41:f0:45:79:af:08:14:04:
                    01:b5:42:81:cc:cf:7f:c6:21:2f:52:99:4b:c9:fa:
                    39:e3:ab:4f:ae:73:94:02:43:63:b3:47:21:7e:9d:
                    0c:a3:d2:3d:de:d1:c1:fc:c8:7b:44:5a:cb:de:9a:
                    cc:bf:a7:86:e7:f4:e0:4f:3e:7e:da:41:82:18:33:
                    ad:ac:5c:00:d3:a2:59:ce:81:48:a2:56:e9:90:1c:
                    d5:93:db:a3:22:10:c1:ae:c8:ac:c1:65:c2:6c:1e:
                    c7:ad:31:47:6f:fb:98:7c:a9:ec:e1:cd:c4:9c:5e:
                    5b:9f:ef:c6:40:c6:b6:70:f3:9d:1d:ac:d9:e5:08:
                    68:8d:73:8c:ff:90:b3:65:e2:cf:65:c4:ed:ad:c5:
                    17:6d:a4:f0:7c:66:f7:0e:8e:e4:84:bc:b1:79:e9:
                    d2:39:ec:19:63:41:a4:29:57:a1:3d:aa:22:63:bf:
                    7d:1d:78:01:09:64:73:30:29:8e:86:63:b9:3f:18:
                    b5:7d:95:b1:57:55:5a:c1:6e:8d:5c:6b:ac:f6:cf:
                    98:1c:38:19:eb:18:ca:2b:20:d0:31:15:50:65:56:
                    5b:04:5f:fb:9a:6f:92:3c:29:2b:63:43:eb:17:2b:
                    08:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:E8:EC:CD:56:5D:84:4F:28:64:AE:FA:BA:FD:D8:B8:61:12:FA
            X509v3 Authority Key Identifier:
                keyid:74:74:99:EE:49:F6:E4:5F:50:C4:86:0B:E7:9D:79:CB:D7:CB:57:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/747499EE49F6E45F50C4860BE79D79CBD7CB57B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5502A2126FEF338D39C8B743920C1BA224107CFD1263550FC92F4D58ED1A3C2B/0/3139302e3233322e302e302f31332d3234203d3e2036313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.232.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         5f:78:a1:00:1d:4c:ef:5e:2e:bc:47:82:26:24:d9:e3:f2:fe:
         22:15:a5:c5:63:56:ce:0e:cb:2c:93:30:a7:84:53:cc:1d:42:
         1a:68:a1:ea:90:9d:53:92:6f:94:a0:f2:07:c0:87:7f:16:de:
         c8:a9:e1:ff:04:92:d3:a8:16:a1:8c:ab:a3:95:7a:7e:9e:f0:
         4e:e1:fe:0d:82:21:d6:18:92:58:1f:56:fd:2b:fe:32:b3:e9:
         ad:1b:7f:48:43:43:3e:79:e2:20:89:e7:73:0e:09:54:f3:d7:
         04:f4:f1:a8:29:59:3d:a1:c1:7d:2a:20:4b:50:2d:eb:50:a4:
         86:f7:21:44:ac:f9:6b:2f:57:a3:a5:3f:95:22:06:28:33:86:
         8d:84:b7:84:b7:48:f5:5c:e3:5e:68:a5:fa:3d:de:d4:c5:cc:
         fa:c0:91:6c:af:d2:a5:88:40:63:55:49:31:ce:36:59:31:70:
         c1:28:a3:84:d3:10:41:0d:4e:d5:f4:28:7f:eb:55:44:54:2f:
         d9:b6:52:13:86:e0:e4:a9:01:61:87:81:64:c3:18:57:ee:e9:
         3d:33:9b:d7:19:aa:a8:1f:42:9b:a2:fd:d0:ed:84:e9:4f:b0:
         10:44:74:60:1a:6c:12:07:a1:85:5e:2b:44:0c:b6:81:4e:88:
         a7:0a:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:59 2025 by rpki-client