Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32322e302f32342d3234203d3e20323633373833.roa
File:                     3139302e35372e32322e302f32342d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          JiuXivZidJtOuXYl8inXSJoWPe/O6ajfPjwGxz81GB4=
Subject key identifier:   DC:05:E7:47:9D:5D:58:A2:71:63:66:F1:20:DC:25:93:CA:4B:9B:87
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0CD8D32092086115D5CE49888A43B4A2385DD81E
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32322e302f32342d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:38 +0000
ROA not before:           Tue 04 Feb 2025 18:46:38 +0000
ROA not after:            Tue 03 Feb 2026 18:51:38 +0000
asID:                     263783
IP address blocks:        190.57.22.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d8:d3:20:92:08:61:15:d5:ce:49:88:8a:43:b4:a2:38:5d:d8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:38 2025 GMT
            Not After : Feb  3 18:51:38 2026 GMT
        Subject: CN=DC05E7479D5D58A2716366F120DC2593CA4B9B87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:3e:ef:da:e8:f3:62:c0:ef:44:c6:6d:5f:
                    f2:f2:92:31:99:78:32:32:fe:62:d7:e3:05:06:c8:
                    88:7b:1d:62:e7:20:3b:2f:a4:00:58:6d:99:ec:a4:
                    7e:63:32:5d:5b:b8:17:fd:4d:f4:5f:06:02:a9:e0:
                    70:29:ab:22:42:fc:0b:cf:71:43:70:03:ec:79:f3:
                    a5:da:aa:05:d1:f0:2e:2f:01:ab:c7:e7:56:72:d3:
                    27:e4:88:2f:a6:32:d6:ea:75:fe:90:b3:30:62:92:
                    98:ff:60:44:67:a8:63:74:d0:4f:da:cd:1b:b5:b5:
                    46:07:6b:69:48:b1:2d:77:db:b9:cf:34:b7:6a:9c:
                    44:1f:c3:eb:45:aa:49:ad:7c:56:72:2a:67:6f:dc:
                    56:7f:e1:82:98:d1:af:a9:f1:2c:95:74:84:48:7d:
                    2f:d9:48:7d:a2:a1:dd:11:30:1c:f7:3c:9a:16:a4:
                    bd:b9:f1:f7:6d:0a:12:93:b0:57:a4:71:b9:b4:67:
                    98:26:78:e8:2e:66:af:9f:a5:fe:35:12:41:9c:69:
                    75:7b:f1:cd:1a:2d:64:9d:0b:4e:61:8f:7c:e0:9c:
                    1f:ce:19:c9:61:58:72:0a:0e:88:fc:21:3e:ec:e2:
                    b1:57:f8:58:cc:77:a1:28:f8:46:9f:6a:e4:7a:cb:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:E7:47:9D:5D:58:A2:71:63:66:F1:20:DC:25:93:CA:4B:9B:87
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e32322e302f32342d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:3d:65:0b:02:f0:d1:bd:83:a9:b6:19:97:59:aa:44:4a:f7:
         ac:6c:81:66:92:36:52:22:41:bd:d1:6d:50:88:40:19:8c:7f:
         83:fb:6d:ef:53:c9:2e:ad:dd:77:39:c8:fd:f6:11:bb:36:9e:
         ec:a6:34:b3:85:f7:f1:8a:f3:e2:6e:a9:42:2a:9c:29:dc:95:
         61:70:e4:35:e9:d2:9d:af:31:dd:df:45:64:a5:cb:af:3c:81:
         56:31:c3:b2:f6:96:5c:0c:72:e6:b0:be:60:82:8b:57:c3:bf:
         23:0c:a9:f6:9d:89:d4:03:55:be:6f:ec:ce:e3:6c:47:7f:17:
         ed:a9:d1:64:f6:bf:e0:fe:39:fd:66:89:13:00:d1:dd:29:46:
         70:9f:ff:ab:de:e6:28:27:8d:f4:6d:26:5d:82:a8:04:5f:da:
         f0:8d:fe:2d:45:6d:ed:92:61:eb:1c:98:13:44:30:7a:52:96:
         cb:19:36:e9:77:5a:39:8d:ed:9d:4a:2b:43:7a:6a:37:3e:d2:
         f2:dc:b3:a8:12:26:f1:d6:af:e6:e5:64:fa:7e:28:7e:b2:d7:
         0f:5f:33:5e:6c:28:14:ac:4d:06:d0:2c:e9:cf:48:52:1f:fd:
         9d:41:ac:c0:95:af:50:eb:8f:43:51:9f:1e:c0:2e:4e:e8:41:
         50:ec:b1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:19 2025 by rpki-client