Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa
File:                     3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa (raw, json)
Hash identifier:          QGzmskn3T79qrdKDItlOKfeoNc/AePAqhxS5IAdr4SI=
Subject key identifier:   FA:54:53:32:73:35:46:82:F4:BE:4F:FD:50:8B:E8:42:A1:E8:DF:BD
Certificate issuer:       /CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
Certificate serial:       0C3A1CA8D0DA3FAC4CBA539E335EE79CB44F8685
Authority key identifier: 4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa
Signing time:             Tue 04 Feb 2025 18:35:34 +0000
ROA not before:           Tue 04 Feb 2025 18:30:34 +0000
ROA not after:            Tue 03 Feb 2026 18:35:34 +0000
asID:                     262195
IP address blocks:        190.94.184.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3a:1c:a8:d0:da:3f:ac:4c:ba:53:9e:33:5e:e7:9c:b4:4f:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B50B3A80EFB4BF48C215354B18BCF0297786DDB
        Validity
            Not Before: Feb  4 18:30:34 2025 GMT
            Not After : Feb  3 18:35:34 2026 GMT
        Subject: CN=FA54533273354682F4BE4FFD508BE842A1E8DFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:a5:99:d6:b3:96:d3:66:16:04:7e:a6:83:
                    d2:bf:de:4e:1a:61:bb:0a:cb:dd:8f:46:be:3d:cb:
                    cf:51:7d:de:ec:69:dd:de:18:0f:f1:bf:eb:2a:6a:
                    f5:c2:c1:63:bd:1a:38:50:c0:9d:e4:71:f4:09:b6:
                    3d:a7:45:37:26:61:1d:f1:af:9b:6e:9f:73:20:ba:
                    6f:46:27:e0:dc:0e:cb:e9:ec:06:9d:1e:e6:d0:ca:
                    42:8d:59:7d:25:3f:f8:8f:10:86:8c:1a:12:d7:b9:
                    b4:7b:2d:3b:d8:fc:22:d2:e6:36:5b:5b:40:35:25:
                    d2:28:1b:23:08:f5:df:36:a1:cb:68:1d:a4:c7:ee:
                    c9:7d:bb:03:b7:77:0f:70:35:13:88:0e:6f:4c:0b:
                    ca:3e:b7:ff:a9:d4:58:b3:73:03:59:97:da:8e:69:
                    1a:c9:b2:c0:44:fc:b0:5e:d3:fc:59:2a:44:44:42:
                    77:2a:28:85:ab:11:26:98:21:41:9c:73:1e:12:df:
                    91:db:d5:03:50:cb:9d:de:a9:f3:53:f3:be:ca:85:
                    7c:29:d1:62:37:c0:78:a8:2d:88:18:f7:ad:c8:17:
                    1a:ce:9a:4d:ed:44:35:f3:a4:26:4a:44:0c:4d:78:
                    37:28:e2:0d:52:6f:5e:45:84:07:38:9b:ac:f6:32:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:54:53:32:73:35:46:82:F4:BE:4F:FD:50:8B:E8:42:A1:E8:DF:BD
            X509v3 Authority Key Identifier:
                keyid:4B:50:B3:A8:0E:FB:4B:F4:8C:21:53:54:B1:8B:CF:02:97:78:6D:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B50B3A80EFB4BF48C215354B18BCF0297786DDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6053E0E58443331634FEE7B4766EBCB0E68EA4C1D8711BBE097311C96B801216/0/3139302e39342e3138342e302f32342d3234203d3e20323632313935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:3e:4a:55:10:33:e4:da:ac:2b:ad:7e:83:af:98:68:ff:d3:
         29:72:43:e5:96:c9:21:a6:fd:57:9c:ad:23:d3:bd:2f:9e:81:
         68:cf:48:15:aa:6a:55:e9:3d:e6:24:9a:33:56:85:13:61:a5:
         70:8c:c3:6a:67:f4:5b:67:ea:e3:5e:68:e3:3c:1e:08:31:41:
         2a:c6:29:cc:6a:d0:1e:2d:c9:c8:eb:55:a7:9a:df:9b:06:61:
         49:2f:ab:1f:0c:c5:f1:91:ca:64:68:0b:07:0a:82:36:ac:f1:
         3a:97:6b:4f:cb:e4:80:5a:7f:2a:5d:37:4b:68:89:5a:9a:e8:
         98:df:a6:52:ee:5f:81:a0:e8:ee:bf:38:9b:5b:0e:e4:88:0d:
         e5:f6:c3:8c:68:80:87:81:bb:cc:ff:1d:90:6b:57:2b:38:86:
         59:db:3d:69:61:46:a7:d5:6d:a9:dc:6b:de:f5:a7:54:f2:f3:
         fd:23:f2:96:42:16:c1:e6:f8:84:c7:c8:c0:e0:d2:d0:12:11:
         b8:53:37:91:1f:8b:11:77:2c:71:c7:ce:82:ed:8c:b4:ac:f7:
         97:16:2f:46:08:6a:eb:b0:d4:bf:9a:ab:16:df:a1:a6:e2:88:
         88:47:12:ee:ac:c7:ed:8d:fd:5c:b3:ae:b9:d2:0b:67:b7:3c:
         a8:b1:40:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:59:09 2025 by rpki-client