Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          mqW2sbO0ZxREqK99pIexZWjv7Zc+p+JxWRkOYg4KMD4=
Subject key identifier:   F9:FD:FD:44:7E:D1:40:BC:C3:AB:EE:BC:B8:C5:47:61:7C:51:03:6B
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       5BE936867A238B8178B51D45F2A854EF666784BA
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 04 Feb 2025 18:09:05 +0000
ROA not before:           Tue 04 Feb 2025 18:04:05 +0000
ROA not after:            Tue 03 Feb 2026 18:09:05 +0000
asID:                     262234
IP address blocks:        190.185.115.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e9:36:86:7a:23:8b:81:78:b5:1d:45:f2:a8:54:ef:66:67:84:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:05 2025 GMT
            Not After : Feb  3 18:09:05 2026 GMT
        Subject: CN=F9FDFD447ED140BCC3ABEEBCB8C547617C51036B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:98:f0:71:0e:a0:5a:36:e4:10:31:5a:06:e9:
                    6c:ea:0f:14:a9:be:8b:20:4c:48:b4:29:05:a1:cc:
                    7b:26:bf:38:16:4d:29:a1:3b:e6:ef:34:e7:61:fa:
                    aa:b7:d3:e6:84:c2:78:e8:fc:b0:c6:6e:a3:46:e3:
                    dc:1b:53:e8:8f:da:83:77:a7:61:81:54:fd:71:6e:
                    1e:11:02:a9:da:3d:22:9b:73:85:a4:dc:92:47:8b:
                    df:1a:94:87:b0:e1:e2:b5:6e:a0:b9:b1:ab:72:0c:
                    7b:8e:22:ba:86:89:0a:67:dc:2f:a1:ea:03:67:18:
                    69:63:9c:f5:e8:f7:4b:dd:68:99:aa:d0:b2:7d:07:
                    35:b0:17:bd:80:ea:ac:df:e4:bf:dd:b8:86:38:b6:
                    1e:43:9d:79:ea:bb:2c:72:b5:d7:ef:73:0a:2d:ad:
                    36:73:e3:c3:23:7d:c7:d7:06:e2:10:a2:da:23:75:
                    34:83:a9:6e:9f:90:96:d4:0e:dc:4d:d4:cc:3f:a4:
                    ae:4d:b4:49:30:30:5c:9f:b5:24:32:3c:07:a4:7c:
                    87:ce:5e:c6:63:31:0c:85:87:93:9d:46:55:4c:97:
                    96:a8:18:fb:7a:b9:35:1b:6f:e9:4c:c4:02:27:ca:
                    a3:c7:64:ad:06:21:34:a6:71:e0:28:ae:50:f2:07:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FD:FD:44:7E:D1:40:BC:C3:AB:EE:BC:B8:C5:47:61:7C:51:03:6B
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131352e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:5e:d5:7b:d2:d1:3c:e9:ef:3c:6b:6d:36:ef:7e:3f:3d:
         d0:7d:c1:88:d2:f1:e0:50:cc:1f:36:cd:9e:cf:94:64:7b:da:
         9f:5f:0b:b0:a4:be:3a:78:fb:a0:31:04:9c:52:3b:ef:97:3b:
         4a:8f:ce:c2:69:5e:6d:04:6d:8c:d2:c5:5d:59:e9:0d:f9:2d:
         6f:cf:65:26:8b:74:e7:cd:f6:2b:3b:e9:f7:77:67:3e:96:f8:
         9f:bf:f0:a9:85:82:8e:0e:cb:71:1c:4f:01:9d:db:94:9c:0b:
         20:ca:70:d1:97:07:7e:fd:20:99:64:09:41:bc:4a:19:5d:15:
         b1:d1:24:ce:97:2d:b9:52:dd:18:a7:fa:7c:4b:d1:a3:c8:8f:
         cd:25:70:22:05:00:2e:bb:4f:76:f4:eb:e7:5b:6e:23:37:1d:
         34:df:52:8e:c2:e0:52:1e:73:4f:84:4a:5c:37:a8:0e:a8:f1:
         71:01:fd:a8:e4:aa:c1:d8:d9:3d:2f:a4:d2:f4:c7:8b:8d:53:
         3f:37:81:fc:c8:6d:14:29:0e:83:ff:3a:d5:a4:87:21:c6:af:
         82:09:e0:45:ef:4c:9e:30:86:c8:f6:34:43:6e:17:ba:71:7a:
         74:af:05:94:bf:7a:98:3b:61:8a:77:5b:52:c2:e4:40:18:3c:
         ef:27:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:52 2025 by rpki-client