Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa
File:                     3139302e31302e3132382e302f31372d3234203d3e203134353232.roa (raw, json)
Hash identifier:          GTQ6M9gqyG0Ml9YSRz/NI5d2mi1NgV8pO7Txbhw0qng=
Subject key identifier:   5B:E9:B4:C3:D1:EE:1A:92:79:97:1E:36:EB:E9:CF:08:17:22:EA:B0
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       59EA59EA01B4188D0D4C397AC1FC7A6BD3178948
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa
Signing time:             Tue 04 Feb 2025 20:08:42 +0000
ROA not before:           Tue 04 Feb 2025 20:03:42 +0000
ROA not after:            Tue 03 Feb 2026 20:08:42 +0000
asID:                     14522
IP address blocks:        190.10.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ea:59:ea:01:b4:18:8d:0d:4c:39:7a:c1:fc:7a:6b:d3:17:89:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Feb  4 20:03:42 2025 GMT
            Not After : Feb  3 20:08:42 2026 GMT
        Subject: CN=5BE9B4C3D1EE1A9279971E36EBE9CF081722EAB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:87:c5:17:e1:ac:67:e7:f0:e1:41:26:76:
                    98:af:2f:ec:60:9e:7e:32:16:91:b7:67:db:79:9f:
                    f2:1e:cc:fc:4b:2b:52:3f:89:a7:28:b3:56:64:32:
                    4f:29:5b:59:a0:9e:12:e5:d2:0c:6f:83:06:a0:8b:
                    08:e5:08:5d:3e:48:78:2b:f0:78:98:a2:26:5e:b8:
                    0f:b8:05:b2:d9:e8:89:49:a2:99:19:8e:db:49:86:
                    bc:08:41:a9:94:2a:9b:f1:0f:db:48:99:b5:a5:47:
                    df:3d:fa:6f:6a:7c:95:a8:64:06:d3:89:72:13:0c:
                    9e:f0:b9:e5:a8:c9:0f:d2:9d:9d:68:c2:b6:71:fa:
                    52:6d:cd:c3:a1:1a:d0:50:57:5a:ff:96:de:79:d7:
                    9c:44:c8:8a:b0:02:b9:3c:57:ce:bb:bd:12:88:e3:
                    48:cd:da:79:e9:7f:96:a7:f0:6a:8d:5f:2c:ba:26:
                    b4:9e:ab:7d:f5:94:da:a0:e2:0f:9d:d4:86:36:b3:
                    89:29:8c:23:84:c9:9f:dd:c1:78:7b:6b:a9:e6:7f:
                    b5:3d:54:fc:e5:ea:b6:3d:55:dd:d5:54:fd:c3:de:
                    97:25:96:3c:02:38:82:6a:33:9d:63:6f:fd:9f:4e:
                    fe:fa:7c:88:f0:f8:8c:1a:81:6a:c8:ad:08:0d:a4:
                    0b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E9:B4:C3:D1:EE:1A:92:79:97:1E:36:EB:E9:CF:08:17:22:EA:B0
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e31302e3132382e302f31372d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6d:3a:6b:35:2b:e8:a8:3b:14:26:15:8b:25:cd:3a:3e:d3:d4:
         c9:ad:41:2b:f9:10:83:7c:3c:3e:9e:f8:b7:4d:80:b9:28:e3:
         bc:ad:7a:47:62:e0:9f:44:e2:93:64:65:1c:39:ec:ca:e8:c7:
         09:df:c1:43:2d:26:1c:84:64:c5:5a:b7:82:85:c8:51:7d:9f:
         24:fb:c7:16:dd:c3:da:1c:df:e3:b5:5b:eb:5d:0f:b7:0b:e2:
         38:55:2b:d8:d3:76:94:c0:de:54:73:91:28:ee:23:e6:e3:4c:
         b2:ee:2b:4c:10:e3:59:0e:97:d2:f9:15:fb:c4:17:6b:08:e4:
         6b:93:bb:88:55:6d:39:17:50:d4:1e:e0:09:3b:cd:f8:9d:1a:
         05:5e:ba:77:1a:80:16:c2:13:cd:9f:9c:3e:d5:5f:63:d2:c8:
         3f:45:e5:d5:c9:7c:37:fc:12:d4:d2:d3:42:29:f9:56:c6:25:
         ad:14:98:cf:ea:ca:17:2c:df:12:cf:f5:53:86:a6:80:af:9e:
         2b:6c:d6:f1:20:5c:14:f1:eb:c5:76:7f:4a:a7:2f:fc:77:a7:
         78:c9:97:c7:2d:1c:7a:fd:29:cc:d3:e7:a5:6c:28:6a:84:fd:
         58:21:c2:98:fe:fc:18:6e:ac:7e:19:9f:3d:43:4c:d7:4f:1b:
         f8:26:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:27 2025 by rpki-client