Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e35372e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          /wvsNvJdrTdv0fxK+6/lvu8HXwGvJ9Wosoy7wgOXtLw=
Subject key identifier:   6A:3A:B4:60:94:CF:81:45:0B:58:AF:43:EB:DE:BB:72:E3:94:59:56
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       0806BEEFA921352E2EA810DBFE64A154E0843C22
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 04 Feb 2025 18:51:40 +0000
ROA not before:           Tue 04 Feb 2025 18:46:40 +0000
ROA not after:            Tue 03 Feb 2026 18:51:40 +0000
asID:                     12127
IP address blocks:        190.57.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:06:be:ef:a9:21:35:2e:2e:a8:10:db:fe:64:a1:54:e0:84:3c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:40 2025 GMT
            Not After : Feb  3 18:51:40 2026 GMT
        Subject: CN=6A3AB46094CF81450B58AF43EBDEBB72E3945956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6a:ee:ee:89:2f:8d:e4:3c:c5:8e:cb:ee:07:
                    61:d6:b7:b1:8b:a5:6b:41:6c:6b:78:4b:a6:36:9d:
                    6f:5b:ac:6c:42:5f:eb:c3:8d:ea:97:01:73:fc:bf:
                    86:26:3b:28:2e:83:7c:bd:b6:25:bb:cd:f6:b7:4e:
                    d5:b6:92:08:93:e3:d9:61:a3:55:08:26:3a:65:03:
                    11:28:bb:c6:0d:7b:bb:c8:e0:eb:42:a8:67:fa:9c:
                    62:44:e0:8a:d0:d7:9c:35:7f:24:94:69:51:87:81:
                    e8:6b:b0:24:40:54:d4:42:c3:32:be:18:7b:fd:97:
                    b3:ab:7a:50:fc:72:5c:04:73:98:43:6e:31:6e:ac:
                    2c:98:55:49:4b:9e:5a:38:52:67:1e:0f:bd:83:c8:
                    6c:a1:5d:65:99:73:ba:31:12:46:e4:8e:e3:2e:ff:
                    5f:77:3b:82:87:11:0e:9a:56:d4:37:88:9e:9a:14:
                    2f:64:8f:40:d9:2f:a1:23:f6:d2:3b:bb:c2:1c:1d:
                    0e:55:35:12:cb:42:37:52:f8:97:98:5a:c1:e0:71:
                    3b:3e:28:ea:32:e0:82:05:de:85:b8:4a:69:70:12:
                    db:5c:1f:5c:f2:37:c2:dd:ec:99:f3:65:d3:2d:a6:
                    20:3c:c5:2b:66:3c:6c:0a:f5:75:2b:99:12:9a:5a:
                    c3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3A:B4:60:94:CF:81:45:0B:58:AF:43:EB:DE:BB:72:E3:94:59:56
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e35372e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:14:1b:a3:74:74:4b:fb:ad:07:f3:2b:d8:03:dc:10:f1:58:
         5c:f0:b9:c3:ab:98:c7:4d:9f:50:45:83:bc:69:8e:bf:c3:18:
         06:fe:2f:f3:04:98:c8:15:cc:23:6e:1d:c7:0b:9b:1c:32:39:
         8e:56:0b:f1:98:8f:02:81:82:19:bf:73:8a:4f:5f:fa:83:99:
         c6:a9:d9:1a:74:1e:6c:43:c0:01:84:51:37:85:3e:c2:07:df:
         9c:99:69:92:1b:36:cd:69:74:c0:90:4b:c2:af:45:dd:b7:a3:
         6e:da:d1:d8:36:3f:79:58:62:0c:95:ee:98:93:9e:95:c9:d8:
         92:f1:68:ff:14:01:b0:0b:88:e9:5b:3a:4f:38:fc:6b:64:ac:
         d4:a9:24:30:42:a4:33:58:ef:50:f2:16:63:e1:33:1e:75:5e:
         a2:fe:12:95:d6:8b:6e:06:bc:83:6f:b2:f9:bd:7d:a3:19:9e:
         4a:2d:56:e2:5a:99:bf:64:f6:d9:2a:31:db:e6:3d:26:1e:ae:
         50:ed:b6:a8:22:f4:37:72:30:5f:19:ae:e6:91:4b:a8:76:5f:
         67:72:6c:c1:61:c7:2e:ca:48:3a:70:2c:ba:bc:ff:8e:26:4b:
         53:18:5f:03:60:d2:9c:a2:09:15:7c:0d:e8:e2:04:e5:cb:38:
         e9:30:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:42 2025 by rpki-client