Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa
File:                     3139302e35372e3130342e302f32322d3234203d3e203132313237.roa (raw, json)
Hash identifier:          MAXz0sO2DYfHVfU8rWyJFnUYfz02Lz1oiTwm5l1H/7g=
Subject key identifier:   9F:C6:0D:D1:00:A7:2E:89:26:F1:98:40:B2:4F:75:8A:84:9F:0E:0F
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       5C087ADC7075104787BEBF38B9F178FB931D87A7
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:27 +0000
ROA not before:           Tue 04 Feb 2025 18:46:27 +0000
ROA not after:            Tue 03 Feb 2026 18:51:27 +0000
asID:                     12127
IP address blocks:        190.57.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:08:7a:dc:70:75:10:47:87:be:bf:38:b9:f1:78:fb:93:1d:87:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:27 2025 GMT
            Not After : Feb  3 18:51:27 2026 GMT
        Subject: CN=9FC60DD100A72E8926F19840B24F758A849F0E0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:fd:95:dd:94:88:ce:7c:75:64:46:99:5c:
                    2e:80:c6:80:22:9e:b3:2b:93:a7:2f:95:2a:05:65:
                    9e:61:23:28:40:c7:19:df:a5:ec:26:38:fd:42:65:
                    c4:4f:0a:75:03:63:83:07:5a:c3:5b:e8:de:c1:68:
                    b6:02:2b:8d:cc:36:ba:f4:ec:f4:27:c4:10:10:65:
                    63:3d:28:b4:c8:60:b5:b8:e2:36:cd:72:3e:70:c6:
                    46:ba:01:4f:90:68:37:37:d8:61:ef:85:6e:85:c6:
                    22:5d:f6:ce:6c:26:d2:9a:d5:7f:89:f5:76:39:fe:
                    77:72:a0:c1:b0:93:ba:d1:49:03:6f:22:b8:15:8c:
                    04:03:0c:5f:f9:16:9c:77:9b:00:a7:8c:48:ca:c9:
                    a3:3b:a1:1c:d9:f4:31:e7:2a:7e:18:e6:53:0f:80:
                    86:07:77:c3:07:2d:cf:6c:4c:d5:c0:33:ba:6a:25:
                    4e:6f:07:2a:c2:61:21:a9:cb:09:1d:fd:0b:66:54:
                    f2:3f:bc:28:35:95:7b:3f:91:66:22:df:a3:f0:b0:
                    d5:80:de:f0:41:aa:34:3c:e3:70:f3:22:a4:bd:fd:
                    e1:6d:3d:df:fd:45:db:d1:a0:f2:63:ea:42:51:78:
                    be:4d:8b:f0:c8:93:57:53:fb:4a:ff:49:bb:de:35:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:0D:D1:00:A7:2E:89:26:F1:98:40:B2:4F:75:8A:84:9F:0E:0F
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e3130342e302f32322d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:04:f2:9c:96:7b:79:84:a5:d3:dd:6b:9a:44:67:a4:f6:92:
         65:fd:52:ae:b4:17:9e:df:90:a1:0e:2b:31:3f:0b:c5:31:a6:
         9c:ed:0e:e5:24:0b:ab:df:fa:5e:68:d4:86:2f:46:84:ae:77:
         19:60:39:ac:65:12:cf:7a:51:b2:9f:2f:7c:87:a9:61:46:d6:
         ac:a2:cd:16:e2:ea:cc:cb:17:b8:93:d3:f1:c6:fc:81:47:4c:
         0c:6e:e4:59:0c:36:66:5e:b6:bb:27:c4:98:ad:87:e8:3c:28:
         14:99:fa:ba:60:af:c0:73:71:f6:93:18:47:1d:5d:b8:32:2c:
         87:0b:e9:76:bf:19:08:6a:cc:09:00:e2:c9:af:dd:e8:a5:ff:
         ab:46:78:f1:97:71:21:7a:33:c3:a8:e1:9b:43:19:39:07:e3:
         ab:cc:61:7a:a9:4d:2e:04:d8:8a:97:de:b9:4f:fa:8e:66:de:
         cc:b8:55:8f:c7:d4:dd:06:23:d1:f5:7c:1d:d2:f5:be:31:ea:
         c8:56:38:2e:b9:8e:e1:86:e7:cd:0a:72:2f:65:53:54:25:82:
         68:98:60:4e:58:9d:51:33:98:22:de:9b:8b:d2:0f:e9:56:76:
         37:c0:23:c6:b5:6d:ec:8f:77:16:21:90:9b:d3:d0:9c:fc:6f:
         72:b3:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:33 2025 by rpki-client