Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e38302f32382d3238203d3e20323639383336.roa
File:                     3139302e3130372e32302e38302f32382d3238203d3e20323639383336.roa (raw, json)
Hash identifier:          5Xw2532sZ2cntxdQZcKmJZKnZkSMPNXEn6nZo/ZmeXU=
Subject key identifier:   1D:EB:2E:78:68:2A:68:FF:4A:2E:E4:DA:CC:F2:20:0C:C5:B3:0F:0A
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       665E24C0F5486F568263D78EBF106C2018DAAAC6
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e38302f32382d3238203d3e20323639383336.roa
Signing time:             Tue 04 Feb 2025 19:57:05 +0000
ROA not before:           Tue 04 Feb 2025 19:52:05 +0000
ROA not after:            Tue 03 Feb 2026 19:57:05 +0000
asID:                     269836
IP address blocks:        190.107.20.80/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:24:c0:f5:48:6f:56:82:63:d7:8e:bf:10:6c:20:18:da:aa:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:52:05 2025 GMT
            Not After : Feb  3 19:57:05 2026 GMT
        Subject: CN=1DEB2E78682A68FF4A2EE4DACCF2200CC5B30F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:7e:6e:78:b8:08:49:c4:b8:7a:86:9a:7c:
                    28:d6:12:c6:d9:5e:96:41:10:f0:9b:f4:72:28:c1:
                    f7:33:0c:3b:24:62:9c:15:6b:c1:83:be:f5:a8:6a:
                    0f:cb:41:ed:e5:48:6e:b4:0f:be:1d:f9:8a:e8:21:
                    7f:b1:9f:c0:12:28:fc:27:39:71:8d:e2:03:d8:82:
                    a8:77:42:3d:58:82:1f:14:ba:26:0f:b3:f9:ee:8a:
                    fd:23:7f:5f:8a:e8:82:9b:00:c9:20:9e:66:cd:40:
                    bc:b1:0e:1f:79:89:68:3c:f5:18:84:68:10:3f:42:
                    81:73:84:2a:67:f9:8c:f0:78:d3:49:d2:b0:3f:1c:
                    52:c5:45:7e:dd:f0:49:73:49:e5:18:38:98:c8:76:
                    b8:d4:0e:b8:59:13:96:7a:77:ae:58:0a:1b:bc:85:
                    89:79:af:8e:f2:13:5a:ca:3b:a0:06:4e:4e:a2:f2:
                    65:63:bb:69:ea:3e:80:b9:65:d9:a9:87:38:3b:30:
                    7e:58:1a:d5:d1:db:fa:9f:b4:b6:43:c6:74:d3:a2:
                    7a:0b:51:98:23:70:70:e5:15:1e:7d:e9:6f:8a:e7:
                    0d:30:b6:e7:3c:d3:d7:de:2c:81:88:52:b7:99:88:
                    00:f1:40:7d:26:87:85:7f:1d:f7:35:5d:bc:5d:b2:
                    8c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EB:2E:78:68:2A:68:FF:4A:2E:E4:DA:CC:F2:20:0C:C5:B3:0F:0A
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3130372e32302e38302f32382d3238203d3e20323639383336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.20.80/28

    Signature Algorithm: sha256WithRSAEncryption
         2a:28:4c:30:d3:0e:0c:bc:49:5b:48:58:31:dc:97:67:8c:d5:
         dc:b4:33:36:80:a2:a3:5b:fb:f0:c6:07:22:68:f6:70:e9:fc:
         a9:94:a9:8f:b6:e7:96:2b:95:b8:3b:20:4d:9e:7e:53:dc:f4:
         dd:2e:77:1c:f9:27:7d:52:a6:49:d2:2b:5c:e8:30:6c:3e:bb:
         a8:13:70:eb:51:e3:51:dd:ea:61:a5:16:44:bc:25:b3:9f:2d:
         32:84:0f:6e:34:a2:9c:da:2d:0d:61:43:8d:f3:9f:25:f8:8a:
         f0:96:ff:a6:62:5f:99:6d:0d:97:46:f7:dc:af:33:f8:d9:91:
         2a:00:41:25:c0:7c:27:91:a0:78:1e:91:5a:bf:b4:11:5f:9f:
         cd:8a:52:40:bb:15:86:05:a3:a5:a7:85:60:10:ec:78:a2:80:
         db:55:a9:2b:fe:ed:3b:fc:c2:66:d8:73:1b:41:71:b9:c6:c7:
         d0:7b:97:a9:2b:ac:55:c6:e9:70:d4:ef:f5:dd:28:1f:e7:fc:
         db:10:1d:c9:9e:56:e5:c5:72:1c:d5:f6:31:07:07:e5:1c:6b:
         af:da:54:ce:a2:c1:ea:4d:b6:90:19:3a:a0:4e:ea:3f:f3:21:
         db:9b:5d:c2:7f:ac:fd:68:6e:1d:91:2b:e3:1a:e2:e9:9f:3b:
         c8:2d:f6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:21 2025 by rpki-client