Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa
File:                     3139302e35332e3139322e302f31382d3234203d3e203230323939.roa (raw, json)
Hash identifier:          q62yk59OKuGlm0RyFIZmx/jmKiOIMYu6sEAQ6e8lziM=
Subject key identifier:   07:B7:09:1D:1A:4A:2E:77:A5:98:8D:7E:C1:94:FE:EB:A2:64:82:0F
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       3835EA29D7F9D40230AFC86265FF814F7737444D
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:48:56 +0000
ROA not before:           Tue 04 Feb 2025 18:43:56 +0000
ROA not after:            Tue 03 Feb 2026 18:48:56 +0000
asID:                     20299
IP address blocks:        190.53.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:ea:29:d7:f9:d4:02:30:af:c8:62:65:ff:81:4f:77:37:44:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Feb  4 18:43:56 2025 GMT
            Not After : Feb  3 18:48:56 2026 GMT
        Subject: CN=07B7091D1A4A2E77A5988D7EC194FEEBA264820F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a1:eb:b1:34:3b:04:51:c0:c7:bc:21:db:1f:
                    6a:a9:9f:ee:fd:3c:f9:cc:5d:7f:99:4f:69:3a:c0:
                    e0:15:c5:cf:a2:23:87:0c:b2:c6:35:bd:8f:6e:15:
                    4c:3f:9f:bf:07:5c:7c:95:bf:61:79:f7:31:3b:28:
                    7e:d2:dc:02:8a:dd:94:d9:3d:db:6f:33:c5:93:6e:
                    8d:f0:55:23:b9:8c:d0:6d:20:56:4d:db:51:98:7a:
                    e3:ad:d0:d3:9d:24:f7:c4:54:f4:b1:16:21:73:14:
                    01:68:b9:cb:12:32:0a:80:94:56:31:de:1a:3b:9b:
                    24:ff:07:e2:62:e5:f0:e3:62:f0:56:55:cc:05:3a:
                    a7:74:0e:cc:e7:d5:69:d9:dd:05:48:f3:71:a5:e0:
                    7b:cf:09:87:8b:ca:da:d7:ab:65:6f:6d:31:15:b7:
                    f0:06:ec:64:60:a0:38:6c:fb:24:4e:85:02:3a:c1:
                    de:dd:30:4c:cc:d9:b7:8c:a2:72:b3:57:88:e3:40:
                    a3:43:43:f7:d6:e3:5e:dc:d5:2b:3f:43:9b:c2:ba:
                    4d:1c:fe:b5:b3:2b:fe:8f:b7:c9:47:92:97:47:4a:
                    64:00:96:fc:b9:80:c9:65:84:df:29:67:b2:c2:b5:
                    eb:0c:7e:4b:c7:e9:6d:f4:32:34:62:ae:b5:03:30:
                    6c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:09:1D:1A:4A:2E:77:A5:98:8D:7E:C1:94:FE:EB:A2:64:82:0F
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:5a:c8:1b:5e:58:ed:28:6e:a8:05:3f:28:43:95:2c:22:
         83:02:f4:ef:5a:cc:09:85:77:3a:c0:2e:09:e9:95:7c:df:1e:
         20:4f:8a:8b:4e:db:e0:a9:68:90:e7:67:e3:00:0a:6c:0d:37:
         9b:35:d9:4d:91:19:cc:0f:74:e0:c0:0e:c1:ca:55:9a:00:e7:
         bc:9f:7c:53:d1:65:d6:01:d4:43:cb:82:f4:3a:d5:bd:b8:e0:
         0e:59:21:64:26:38:96:50:92:d6:b7:f9:03:25:ae:e6:32:09:
         3c:a3:73:6b:b8:b2:f7:39:71:ef:96:2d:2b:e5:15:bc:77:31:
         4d:13:9c:ed:32:55:ea:af:62:2c:f8:b4:06:4d:58:85:51:a8:
         1f:18:1d:23:d0:df:09:de:6e:1c:dd:0b:d8:09:3f:44:4e:2f:
         de:99:a2:63:bc:03:dc:ac:a3:93:1d:d9:18:d5:c1:5c:18:bc:
         12:e0:78:9c:ad:6e:82:ea:7e:d2:d5:cd:6b:ac:d8:08:2d:98:
         e5:9c:72:1b:e7:90:ef:fc:16:38:85:e5:a4:0d:ad:01:04:92:
         dc:74:ad:dc:d3:05:9f:f8:f8:a5:2d:d0:5a:ed:ba:8d:a3:8e:
         16:b7:f8:5a:11:fe:fc:cd:a3:45:8c:4c:54:15:c5:54:af:d0:
         5e:22:ed:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:12:56 2025 by rpki-client