Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
File:                     3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa (raw, json)
Hash identifier:          cqCB7xScrYqWDsTw/L1x0d82tSClMS6+1x6fPvyxy4U=
Subject key identifier:   63:BF:CF:A8:2A:45:A6:AF:0C:10:D5:F7:44:E1:10:92:DC:6B:F1:01
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       56AD4470CE8E7BFABCF4C21D2663E323D290C659
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa
Signing time:             Tue 04 Feb 2025 18:26:14 +0000
ROA not before:           Tue 04 Feb 2025 18:21:14 +0000
ROA not after:            Tue 03 Feb 2026 18:26:14 +0000
asID:                     263769
IP address blocks:        168.90.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ad:44:70:ce:8e:7b:fa:bc:f4:c2:1d:26:63:e3:23:d2:90:c6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Feb  4 18:21:14 2025 GMT
            Not After : Feb  3 18:26:14 2026 GMT
        Subject: CN=63BFCFA82A45A6AF0C10D5F744E11092DC6BF101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7a:9d:9a:e1:a1:ba:39:3a:04:f7:0b:fd:79:
                    26:4a:e6:99:63:d0:d6:70:63:b9:61:28:1f:84:cf:
                    c4:cd:27:74:99:37:58:67:89:5c:8b:7a:a1:65:33:
                    5f:31:5c:10:fb:5f:79:bd:56:d7:24:06:f2:91:3b:
                    61:e3:3d:eb:76:1e:f7:54:e3:32:20:f3:da:ba:3f:
                    5b:be:bf:ac:02:56:56:15:52:41:6f:d0:66:26:76:
                    d3:74:71:96:88:6b:51:c5:91:01:16:38:76:eb:c3:
                    2c:e7:b0:6f:d6:de:4e:af:7c:28:23:35:84:4b:96:
                    6a:ec:95:5e:bd:8f:08:20:23:01:f0:e2:dd:ac:c6:
                    6d:51:a0:6a:74:b2:a7:72:78:cb:c3:5c:9f:bb:ac:
                    42:99:fa:07:71:d1:34:c0:25:a4:75:8d:0c:6b:17:
                    b8:36:38:fc:e0:1b:2a:52:4b:dd:87:ec:3e:d1:b9:
                    ad:ad:81:27:56:90:cb:76:8e:a4:07:ff:0a:27:f1:
                    37:76:a5:da:29:54:8c:94:ec:53:04:51:7e:1c:e4:
                    c3:ce:6d:75:44:3d:ec:ff:d9:5a:a3:3a:35:23:b9:
                    36:61:33:e3:da:24:09:af:90:88:a3:89:db:d5:e7:
                    f1:67:34:e4:c3:09:f9:08:47:bb:f1:bd:32:6c:7a:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BF:CF:A8:2A:45:A6:AF:0C:10:D5:F7:44:E1:10:92:DC:6B:F1:01
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3136382e39302e3132382e302f32322d3234203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:5a:95:3f:06:c7:76:e7:e6:72:00:77:07:a6:47:0c:af:
         65:74:04:e2:78:78:e2:57:39:68:08:b5:f0:52:a1:ef:e5:5b:
         b3:c0:af:ff:d0:2f:a3:26:12:80:82:11:99:a2:7e:11:17:04:
         d3:27:ea:7f:dc:10:fa:cd:08:7e:a2:69:0a:89:47:bf:80:99:
         f4:8e:aa:51:58:dd:90:a0:a6:40:f9:f8:9d:55:43:d5:61:20:
         91:d7:37:81:21:2b:58:95:a9:62:59:2b:d3:17:8c:1f:6a:19:
         cc:eb:de:bf:0a:b3:ac:f2:0d:e1:bf:2e:32:5f:ef:b5:f4:85:
         16:f0:4b:e5:89:1d:3b:69:b7:7c:9b:31:4b:91:08:46:12:6a:
         0e:f5:46:4e:11:12:a0:51:60:02:9e:0a:05:e0:60:75:06:78:
         75:15:67:30:c5:e4:65:86:ea:1c:25:51:ff:74:aa:6e:ea:06:
         df:fe:2a:b2:08:80:31:7a:32:36:ed:72:af:5f:bf:35:37:44:
         45:08:58:4f:84:cc:d6:7c:2c:90:0f:94:c4:b8:74:fb:a9:a1:
         82:f8:f6:6d:42:c2:5c:7d:76:6e:52:b6:5e:02:90:57:10:b5:
         fa:8c:cf:d3:5c:c9:86:c8:07:2c:e1:e2:46:4f:8a:be:ee:65:
         10:e3:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:07 2025 by rpki-client