Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa
File:                     3139302e39332e3234342e302f32322d3232203d3e203133333335.roa (raw, json)
Hash identifier:          0UV312OwiJ0QGWzIWgjkkDAOARezcX+/6P7c3Lqiz+A=
Subject key identifier:   F0:BC:33:63:28:46:00:6C:44:93:5E:46:98:3D:19:D5:6C:AE:03:0E
Certificate issuer:       /CN=6CAEED7CB990C4D37457251C646C355A916984A0
Certificate serial:       03D432CF79EC7F65026A7202A8E747B81C5F1798
Authority key identifier: 6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa
Signing time:             Tue 04 Feb 2025 18:27:32 +0000
ROA not before:           Tue 04 Feb 2025 18:22:32 +0000
ROA not after:            Tue 03 Feb 2026 18:27:32 +0000
asID:                     13335
IP address blocks:        190.93.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d4:32:cf:79:ec:7f:65:02:6a:72:02:a8:e7:47:b8:1c:5f:17:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CAEED7CB990C4D37457251C646C355A916984A0
        Validity
            Not Before: Feb  4 18:22:32 2025 GMT
            Not After : Feb  3 18:27:32 2026 GMT
        Subject: CN=F0BC33632846006C44935E46983D19D56CAE030E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:37:f3:b3:9a:92:7b:9c:b4:c9:f2:00:81:
                    b9:d9:d0:d3:53:5d:00:5d:cb:b7:5d:68:9f:e5:35:
                    f7:d6:ff:c8:8d:a7:10:ba:07:80:56:d3:d5:56:e0:
                    7c:60:39:b6:73:93:cd:c7:39:e7:64:0f:d4:e8:36:
                    9b:05:68:60:28:35:6a:bf:7b:88:8c:9c:66:c4:41:
                    a9:38:2f:d6:7a:db:e2:5a:7f:fc:d6:df:7d:d7:11:
                    ba:55:94:84:60:63:e4:67:95:91:d5:95:ae:95:36:
                    9c:4a:c4:c7:93:1e:20:3c:aa:6c:78:8c:33:b6:5a:
                    f6:c1:05:ef:19:21:7b:e4:2d:c9:53:01:3f:48:2e:
                    b6:49:3d:11:e6:fc:77:e5:43:29:a5:df:5f:1d:03:
                    96:fc:ba:aa:b8:09:b5:3c:9e:d7:a8:ef:89:0a:29:
                    cd:80:9b:3f:ed:b2:ba:32:99:b3:d7:22:89:d9:c4:
                    1e:45:ce:02:9b:36:64:3f:47:73:eb:6a:d2:fb:5f:
                    ca:5e:a3:db:a5:27:bb:f6:38:01:9d:3c:9a:51:c5:
                    22:e3:89:0a:78:7c:b9:37:4c:ff:60:7e:8b:74:ef:
                    5e:45:43:94:23:67:3a:90:ba:f5:ad:c4:bb:fb:7b:
                    e1:9d:c9:99:39:dd:b7:a8:2b:91:07:e6:a7:2f:34:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BC:33:63:28:46:00:6C:44:93:5E:46:98:3D:19:D5:6C:AE:03:0E
            X509v3 Authority Key Identifier:
                keyid:6C:AE:ED:7C:B9:90:C4:D3:74:57:25:1C:64:6C:35:5A:91:69:84:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/6CAEED7CB990C4D37457251C646C355A916984A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CAEED7CB990C4D37457251C646C355A916984A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59E11A4FD76FA3188A087E792A9611C50F404D3C9ED43C8EDAD2F5F0B8EF2FBD/0/3139302e39332e3234342e302f32322d3232203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:71:3e:6f:9d:91:57:48:18:2e:08:fd:7d:a5:65:68:1b:
         82:40:e1:80:12:54:9a:d8:d3:04:77:36:a5:6a:40:a3:74:d8:
         f4:ef:77:34:c4:dc:68:96:0b:56:41:ad:41:73:3c:8b:9a:21:
         bd:4f:92:7d:80:92:a7:c8:64:b5:30:73:8f:15:1a:18:f2:8e:
         ff:91:04:33:7a:0a:3f:3c:49:b8:12:5b:0d:da:4b:2a:5e:1f:
         21:0a:ce:f1:66:de:d0:1f:8e:ed:9a:35:d6:99:cf:b3:b1:6b:
         a8:46:c6:cb:b0:99:e2:3a:14:ef:41:83:5a:f1:d4:a3:b0:b6:
         b7:82:be:2d:c5:b5:b2:d9:85:c6:f5:e4:ea:81:30:ad:41:bf:
         31:ab:91:83:4f:3e:5b:d4:33:59:bf:9a:1d:4e:0d:e8:9d:3a:
         7d:42:cd:55:ff:89:c0:ee:49:09:dd:e2:02:06:14:7d:a6:e7:
         2c:21:8a:c2:b5:de:73:e7:f4:9f:ae:45:e9:8c:66:9e:e6:81:
         fd:76:bb:77:2a:62:41:af:cc:32:f1:1d:cb:62:2f:fd:3f:ff:
         ed:b2:b8:6c:bf:4b:60:d0:c5:1e:62:d5:68:50:0e:aa:4d:e5:
         63:da:be:0f:40:35:39:1b:a8:eb:a0:d3:cf:88:13:34:87:2a:
         9c:38:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:58:01 2025 by rpki-client