Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
File:                     3139302e3136302e302e302f31342d3234203d3e203232303437.roa (raw, json)
Hash identifier:          m1xJ1cU+Bo6dTyB53MgA+iH6NPmJHZ21C32cZSq7hTg=
Subject key identifier:   54:74:10:C1:45:EC:3E:3C:1B:02:EE:25:D7:53:1A:08:82:0C:B3:1B
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       0F1636888033FD96A121F673A76CF7C9CF251B30
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa
Signing time:             Tue 04 Feb 2025 18:19:17 +0000
ROA not before:           Tue 04 Feb 2025 18:14:17 +0000
ROA not after:            Tue 03 Feb 2026 18:19:17 +0000
asID:                     22047
IP address blocks:        190.160.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:16:36:88:80:33:fd:96:a1:21:f6:73:a7:6c:f7:c9:cf:25:1b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Feb  4 18:14:17 2025 GMT
            Not After : Feb  3 18:19:17 2026 GMT
        Subject: CN=547410C145EC3E3C1B02EE25D7531A08820CB31B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:af:2a:a1:24:0d:81:59:b0:92:2e:de:cc:19:
                    ea:5d:8d:25:84:2b:2a:03:b7:41:76:2c:fb:28:49:
                    56:e7:ce:a0:72:e6:15:6a:82:8c:41:12:17:2a:e2:
                    9c:fb:08:67:ec:96:3f:48:e8:8f:08:e4:49:40:45:
                    1a:60:32:a2:48:e2:cb:57:b6:73:3d:2d:d3:13:e7:
                    9f:53:5c:03:0e:b3:f3:cb:7a:55:99:af:47:05:5a:
                    c2:6d:1b:6a:0a:8d:67:2b:40:48:38:a0:94:cb:9a:
                    21:e4:14:c2:9b:3e:60:25:10:25:d9:94:0b:b6:e7:
                    ad:f1:71:e3:e8:a1:2f:3e:9e:bd:7d:2f:78:1e:bf:
                    0e:32:a1:75:63:20:28:ab:73:6f:4f:ad:9b:f9:5d:
                    37:a8:d2:65:90:eb:90:ec:8c:eb:b4:2e:fd:95:13:
                    1d:eb:52:a2:87:15:c1:2f:9e:5e:ed:48:f2:e6:ef:
                    60:bb:46:62:c8:ad:77:1f:a6:3d:47:c1:da:b8:a9:
                    f4:1f:70:e1:7a:44:e9:57:5c:b3:31:5a:ae:67:60:
                    39:3d:f5:3d:94:f8:d9:20:c3:b4:e5:93:ca:c3:1c:
                    67:32:0d:0c:96:c6:4d:4f:a3:af:0f:f8:66:ac:87:
                    d4:71:3c:88:fa:00:78:78:1e:dd:bb:ec:9f:e0:5f:
                    11:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:10:C1:45:EC:3E:3C:1B:02:EE:25:D7:53:1A:08:82:0C:B3:1B
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136302e302e302f31342d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         93:d8:97:98:4b:6f:cc:6a:4f:38:fd:23:4c:30:a3:34:16:d7:
         04:8b:82:a6:8c:a9:ff:bc:c0:38:76:6a:83:f5:53:35:c6:12:
         0a:93:cf:32:4c:96:ed:fc:69:81:4f:6c:16:eb:b3:fd:e2:5c:
         54:f4:ad:0a:18:02:e9:14:71:e8:37:f9:62:b4:0e:51:45:6f:
         b3:ea:21:53:6e:5b:81:9b:59:40:d3:fb:75:7a:64:dc:76:35:
         c1:fd:7c:dd:01:7c:e4:69:65:53:34:ab:2a:c0:eb:95:78:9c:
         85:79:63:33:c0:14:10:df:cb:62:ff:4a:8a:9c:29:2b:c8:67:
         ec:67:df:8a:89:34:94:b9:53:1b:66:83:4a:b0:e4:75:5c:fc:
         cb:32:5b:fe:b4:84:c6:45:a1:ae:4d:d7:2d:1d:30:5a:9b:a6:
         8a:60:0b:40:45:0f:3e:12:57:9f:8e:ee:32:58:62:c4:a4:23:
         40:55:61:15:52:91:9d:86:99:fb:8d:75:8f:8e:b8:20:c7:2d:
         26:db:4f:db:04:54:9b:4e:74:33:18:6a:3f:61:69:b1:86:8a:
         72:3c:d7:aa:64:25:7c:30:16:93:14:e4:4e:df:9e:64:20:af:
         76:ee:b8:a2:c2:76:cc:31:e3:3b:ff:bb:ca:b1:bf:13:48:26:
         0e:c9:11:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:49 2025 by rpki-client