Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
File:                     3139302e35322e33322e302f32312d3234203d3e203532333132.roa (raw, json)
Hash identifier:          9h2/E1OBQGI7LfV+MybdTj80jXSaHLzKBgthENICfKY=
Subject key identifier:   8A:86:00:57:30:50:50:FB:AF:EC:7C:F9:53:F8:6A:10:26:1B:2E:89
Certificate issuer:       /CN=46B816F254BE102454BE2E382FEA14873A13755C
Certificate serial:       68889FE8FD806899A06B6803C5280C45D1B8CEB1
Authority key identifier: 46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa
Signing time:             Tue 04 Feb 2025 18:15:01 +0000
ROA not before:           Tue 04 Feb 2025 18:10:01 +0000
ROA not after:            Tue 03 Feb 2026 18:15:01 +0000
asID:                     52312
IP address blocks:        190.52.32.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:9f:e8:fd:80:68:99:a0:6b:68:03:c5:28:0c:45:d1:b8:ce:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46B816F254BE102454BE2E382FEA14873A13755C
        Validity
            Not Before: Feb  4 18:10:01 2025 GMT
            Not After : Feb  3 18:15:01 2026 GMT
        Subject: CN=8A860057305050FBAFEC7CF953F86A10261B2E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:35:be:62:d2:17:22:4e:8a:92:fc:68:74:
                    51:77:4d:a1:9e:c5:aa:47:74:19:8e:bb:9d:47:27:
                    f0:10:e8:1f:41:d7:13:4d:b4:ef:78:74:34:92:f8:
                    fa:84:64:a0:3c:86:b2:f6:6c:7d:f8:cf:9d:35:47:
                    29:52:e0:d0:0e:a5:7a:ff:0b:61:87:72:1b:00:19:
                    5a:c3:01:45:9c:f3:5b:89:c1:29:53:2a:57:bf:16:
                    77:b4:3b:cd:26:8f:4b:ba:80:6a:a2:8f:ab:aa:b8:
                    f4:3c:3d:a0:7e:41:f2:e7:fc:33:83:5e:18:72:29:
                    e6:45:9f:ef:3d:5b:5d:23:19:ad:a5:77:a4:aa:19:
                    01:88:53:b8:28:45:d1:65:a7:2d:7d:4a:be:d5:a2:
                    e6:6d:f7:08:63:d7:af:6f:06:51:0d:99:20:5b:70:
                    d9:2a:2e:93:1e:e9:d5:d2:d5:30:79:ac:69:bb:6f:
                    2b:ea:3f:54:8f:28:f1:0e:c1:b0:d8:f8:27:90:3f:
                    51:35:b8:2e:07:2a:58:bf:0c:bf:9e:58:18:c7:d9:
                    2c:51:8c:11:93:d8:0e:87:d5:15:08:6e:80:8d:77:
                    b6:d2:3a:26:6b:a3:54:31:ad:90:c6:59:25:83:99:
                    13:ea:e1:8a:c1:00:02:df:24:87:6d:29:c3:16:e5:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:86:00:57:30:50:50:FB:AF:EC:7C:F9:53:F8:6A:10:26:1B:2E:89
            X509v3 Authority Key Identifier:
                keyid:46:B8:16:F2:54:BE:10:24:54:BE:2E:38:2F:EA:14:87:3A:13:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/46B816F254BE102454BE2E382FEA14873A13755C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46B816F254BE102454BE2E382FEA14873A13755C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5A1CD0B5EB9FFA748D5E1CC67E9205C6C877B4E803FB33F8811734DC555D4DB2/0/3139302e35322e33322e302f32312d3234203d3e203532333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:96:36:22:c1:96:61:cf:66:ef:58:71:88:9f:e4:38:64:19:
         b9:4f:cb:b0:44:a0:ee:51:9d:e0:3e:ef:07:7f:f9:f6:61:2a:
         68:54:4c:30:40:02:d8:4c:c5:86:c9:50:67:11:7e:39:f1:9b:
         a1:10:0d:fa:13:63:12:db:db:67:ea:ed:c7:20:16:75:8e:be:
         e2:a9:57:00:c2:ec:5c:60:25:82:9d:7d:22:86:7f:6a:4e:60:
         7c:18:f3:a1:b8:8f:fb:e1:a2:b2:86:84:e6:f6:d6:9d:3b:1c:
         e5:55:f7:9e:6a:8d:23:77:36:b5:19:82:50:ee:ee:26:26:f2:
         d8:5b:65:52:dd:3a:2c:57:10:61:c1:d0:58:d1:bd:1f:a1:1d:
         cf:59:b7:05:f6:4e:6e:10:92:f0:02:9d:26:25:80:85:44:fa:
         8f:f2:8d:79:11:0c:77:08:46:39:07:d0:05:d6:0d:70:7a:e6:
         25:90:81:5c:e4:8f:da:cc:ce:d4:f5:5d:79:16:13:96:c1:03:
         d9:42:09:61:67:ff:e8:52:f2:ff:fb:80:3a:b4:25:e0:a2:5b:
         ec:07:60:12:6c:af:64:e3:0e:77:89:0d:3c:3d:02:ea:33:26:
         60:04:c9:13:5b:26:d6:df:63:19:07:ec:0d:ec:f6:ba:65:4b:
         9f:39:e6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:33 2025 by rpki-client