Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e20323632353839.roa
File:                     3139302e31342e3234362e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          Yhlsz0/hxWnmWJBMvLTIgoSxzWVDYIgfYPUYKURMwXs=
Subject key identifier:   30:CF:15:34:34:52:4F:E4:00:73:53:33:9C:D1:B0:7C:D4:B6:96:57
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       31FA88B80718AD4B93A5F36A58F12A2D22825090
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:56:54 +0000
ROA not before:           Tue 04 Feb 2025 19:51:54 +0000
ROA not after:            Tue 03 Feb 2026 19:56:54 +0000
asID:                     262589
IP address blocks:        190.14.246.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fa:88:b8:07:18:ad:4b:93:a5:f3:6a:58:f1:2a:2d:22:82:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:54 2025 GMT
            Not After : Feb  3 19:56:54 2026 GMT
        Subject: CN=30CF153434524FE4007353339CD1B07CD4B69657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2d:45:c8:c8:cf:5c:1a:fa:18:3a:ac:bc:37:
                    a9:0d:da:a6:5e:8b:70:c8:e5:02:66:fa:58:47:74:
                    1c:5a:fb:f8:c7:99:15:05:17:3f:82:04:31:80:e7:
                    0c:0d:6c:c6:05:91:43:a2:e2:2e:99:0a:22:89:cb:
                    0f:cf:98:7c:98:65:b0:0d:5d:c8:cb:9e:4a:e3:d7:
                    a6:9c:95:d5:c5:ed:8b:df:18:20:6c:8a:7b:c8:9b:
                    8f:b4:e2:d9:1b:83:ef:8f:47:a4:5e:94:a6:76:ee:
                    a7:a9:fb:8f:7c:36:ad:90:bc:14:87:73:34:ee:91:
                    c0:01:7e:6d:af:a5:6c:ef:53:1c:ba:0a:da:e6:be:
                    b3:dc:d8:46:d7:65:92:5c:d2:d6:15:fe:b1:9e:4f:
                    09:4e:1d:a0:19:17:b6:b1:38:f6:3e:0e:27:3f:54:
                    77:63:3a:6c:66:88:8d:b6:85:50:1e:b2:56:67:89:
                    7c:9d:92:ec:e8:0e:13:5f:53:51:c6:a4:2d:f9:60:
                    fd:f7:31:16:74:0e:7a:91:a7:37:f8:34:d1:e6:69:
                    41:07:71:ed:6d:6a:a2:fb:23:e8:a9:87:df:f0:ce:
                    51:26:08:bb:4b:be:eb:f2:bf:41:b1:bd:c6:bf:ae:
                    20:3c:c0:96:58:95:2c:95:23:c7:ca:00:67:7a:83:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:15:34:34:52:4F:E4:00:73:53:33:9C:D1:B0:7C:D4:B6:96:57
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e31342e3234362e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:40:88:39:3c:1e:92:29:1c:6f:18:53:6b:f9:ce:1b:a2:4f:
         fc:44:8b:63:51:b6:00:22:65:63:92:3b:04:bc:da:8b:3b:93:
         97:ee:23:f0:09:50:3b:8d:0e:15:4b:49:35:d5:44:e1:38:3c:
         24:58:7c:4b:10:d9:80:02:1f:b9:6f:3e:01:84:3f:49:b0:14:
         6f:79:f3:a2:0b:26:00:40:1d:39:1f:f1:e2:a7:94:2f:85:47:
         1d:3a:38:43:9e:21:58:f1:03:1c:8f:5a:9f:d8:55:1d:a1:8d:
         9b:2c:82:ab:2a:59:d9:97:01:05:48:45:12:7f:a7:75:10:f6:
         cb:58:28:5c:17:ce:2e:3c:5b:81:d9:d0:d3:d6:4a:ba:85:09:
         71:e1:e5:ea:5b:94:53:7a:82:65:e1:5f:27:2a:b4:57:e6:45:
         3f:58:da:40:4c:07:19:46:f8:a5:f9:68:fa:2e:7c:55:34:41:
         0b:4e:36:e6:1a:9c:45:26:49:31:93:d4:e3:e9:9b:81:51:3e:
         70:b8:2c:9d:29:4d:8d:fd:ba:91:6c:bc:7c:0b:80:d3:41:0c:
         ae:2a:60:a1:4a:b3:9d:d8:4a:ba:f6:9a:c3:cf:f1:f8:0a:d9:
         b9:5b:fe:7d:23:0b:95:4f:35:6a:d1:7d:49:b9:4b:95:0b:a4:
         71:62:b7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:32 2025 by rpki-client