Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa
File:                     3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa (raw, json)
Hash identifier:          5NWRGbrdgrRr+M8E4PDntA8rQjjT8t7nI4gu5In0YLQ=
Subject key identifier:   82:9B:7B:0E:76:C0:56:38:DB:AF:A1:10:D6:66:A2:B2:88:7B:67:D1
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       197B91E5CEE4CF12A57356DE69D25EC45655D4D2
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:24:55 +0000
ROA not before:           Tue 04 Feb 2025 18:19:55 +0000
ROA not after:            Tue 03 Feb 2026 18:24:55 +0000
asID:                     11014
IP address blocks:        190.111.238.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7b:91:e5:ce:e4:cf:12:a5:73:56:de:69:d2:5e:c4:56:55:d4:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:19:55 2025 GMT
            Not After : Feb  3 18:24:55 2026 GMT
        Subject: CN=829B7B0E76C05638DBAFA110D666A2B2887B67D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:02:41:c0:ca:61:40:d4:43:27:88:bd:f1:
                    ed:04:15:b8:21:35:22:c4:a5:55:32:be:8b:c9:fe:
                    cb:58:5b:7b:fc:63:a0:1b:d5:1e:b1:13:3f:fa:68:
                    2c:fc:2b:cd:10:03:62:a4:30:f9:53:43:53:d9:5d:
                    4a:98:59:c3:ed:39:fd:e1:08:02:cc:78:e5:ae:84:
                    b0:06:2a:fb:be:c4:76:69:d7:66:d4:0e:f9:92:c7:
                    b6:6c:25:a8:6a:9c:c0:14:b5:fe:d2:2c:fc:2d:91:
                    52:09:b3:a8:d9:b0:c6:40:6d:a9:3b:db:3c:35:23:
                    73:25:16:b5:d1:e6:0e:78:76:86:9d:12:ef:89:9a:
                    aa:3c:7d:bb:f4:98:1f:14:61:4d:73:5a:33:9f:68:
                    3e:ed:a3:85:67:a0:39:33:e6:62:2d:6a:6f:d6:a2:
                    68:8c:6c:2c:2b:c3:58:82:94:c3:8f:9e:2c:76:2a:
                    3d:75:a3:33:b3:e5:4e:eb:5b:6e:9e:b0:44:42:f8:
                    74:c3:b2:7d:e0:01:b6:26:b5:1a:f2:d6:31:29:c7:
                    c7:dd:48:bf:38:19:6b:2b:52:f1:1c:35:c9:89:66:
                    0e:88:cb:ee:53:c0:95:4f:13:d4:e1:6c:1f:ad:ba:
                    95:4d:94:dc:f8:42:d3:22:31:08:f6:88:3c:ba:1b:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:7B:0E:76:C0:56:38:DB:AF:A1:10:D6:66:A2:B2:88:7B:67:D1
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3131312e3233382e302f32332d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:cc:a3:e8:66:8f:f1:65:5b:b5:99:0e:0f:61:46:8c:13:c8:
         80:eb:36:51:b4:25:2b:fe:8b:09:5a:d0:7e:9b:5f:06:d0:7d:
         7e:ca:07:c4:10:6c:4c:65:e5:f5:c2:00:a7:fa:3a:b4:9d:4f:
         6a:51:1b:bc:ba:76:44:0a:d0:7f:fd:a9:34:71:f6:63:76:86:
         e3:ad:35:6e:c3:97:fc:8e:a1:56:0f:ba:ca:bf:d4:7c:96:fb:
         b1:d8:c7:79:d4:8b:b0:7a:30:04:a3:13:56:e4:89:51:20:66:
         5d:d1:65:6c:86:e8:68:f4:60:83:0f:15:09:a3:5d:47:2c:63:
         3e:60:f0:09:ed:57:c6:ba:95:79:50:d5:3f:52:0a:97:c2:50:
         3b:2c:8c:e6:36:98:f1:ad:79:1b:77:3a:4d:7c:14:ca:a3:0a:
         8a:9e:e5:b6:af:5c:73:09:0f:70:c2:57:35:a9:62:aa:44:37:
         ff:c2:82:e4:7f:73:09:84:bd:ee:d4:20:0e:d6:4f:d1:5e:5d:
         68:2f:29:e9:b8:09:a0:74:16:e7:72:b8:59:8c:c3:14:3a:10:
         25:25:88:f3:5b:bd:0f:5d:60:4b:b0:9b:53:37:93:de:2a:d9:
         e1:e7:0e:ce:07:91:01:07:d8:e6:e9:b2:52:51:27:a3:9e:3e:
         c5:85:f4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:10 2025 by rpki-client