Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e20323633373833.roa
File:                     3139302e35372e38302e302f32302d3234203d3e20323633373833.roa (raw, json)
Hash identifier:          Kng/B3NzYES2DSPZRnA9/h/6YL6H9b/2incKZQNz/Xk=
Subject key identifier:   F4:80:33:8A:85:64:11:33:15:8D:AE:AF:68:77:C4:10:BD:31:65:1E
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       2E089541FE739841CB108D672A25B869A4011026
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e20323633373833.roa
Signing time:             Tue 04 Feb 2025 18:51:23 +0000
ROA not before:           Tue 04 Feb 2025 18:46:23 +0000
ROA not after:            Tue 03 Feb 2026 18:51:23 +0000
asID:                     263783
IP address blocks:        190.57.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:08:95:41:fe:73:98:41:cb:10:8d:67:2a:25:b8:69:a4:01:10:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Feb  4 18:46:23 2025 GMT
            Not After : Feb  3 18:51:23 2026 GMT
        Subject: CN=F480338A85641133158DAEAF6877C410BD31651E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:85:63:a6:51:73:49:44:ab:a6:72:9f:f3:36:
                    b5:d0:e3:10:60:4e:5a:86:4d:93:5b:18:85:90:56:
                    df:83:e9:a4:f4:60:cb:9d:bf:a1:3b:c6:10:3f:e6:
                    0d:f4:86:5f:c5:9b:74:8e:b6:eb:18:be:e1:07:78:
                    75:e5:28:4a:7b:72:57:5c:b7:62:75:84:4f:b4:fd:
                    19:0a:d4:ef:dd:c3:fe:2e:7f:6e:5e:2f:f8:90:fa:
                    0f:a3:42:6b:d3:84:1f:27:29:6d:0a:2d:b1:6d:0a:
                    62:de:0c:c1:60:75:49:55:24:7f:e7:cf:2a:5b:3b:
                    b8:44:2d:91:3d:01:b5:cc:33:88:34:33:c4:96:a6:
                    8b:df:7f:4f:31:d5:4e:c3:ad:1f:13:84:7b:ca:a5:
                    ac:e7:60:a0:f2:0a:de:20:16:cc:a8:f9:4d:c2:e5:
                    a1:90:31:45:15:15:a0:cc:09:74:7a:70:61:ea:7e:
                    32:39:11:0b:07:e7:63:af:0f:3b:c1:6e:95:a6:1b:
                    b5:ac:41:5e:e8:31:97:b9:b0:a9:1b:73:4b:3c:ca:
                    23:e5:88:f6:2b:f0:ef:53:45:b5:8c:d4:68:01:ef:
                    7d:b3:4c:bc:e4:cf:99:4c:d7:ce:db:43:5a:96:ab:
                    94:99:86:27:cf:82:a0:38:77:7b:c0:b5:43:dc:b9:
                    e0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:80:33:8A:85:64:11:33:15:8D:AE:AF:68:77:C4:10:BD:31:65:1E
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e38302e302f32302d3234203d3e20323633373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:d8:35:f5:1d:0e:d0:1e:65:7d:cf:3a:e7:98:e2:e3:d3:b8:
         96:5d:e1:2f:43:a3:30:1c:80:70:80:d6:f1:59:7b:83:d8:f5:
         78:f4:2d:66:84:83:56:9b:95:11:1f:6d:a1:c2:15:0c:43:c6:
         48:50:21:75:52:50:1b:53:a2:91:4f:e2:38:18:58:22:76:65:
         a5:20:74:27:01:bf:6c:d6:1d:45:48:60:18:ea:c0:87:13:c9:
         eb:3d:84:c0:93:fc:43:0f:3a:71:2c:58:90:cf:f8:cd:48:36:
         3a:87:ca:aa:f4:5b:1a:af:94:d2:c7:fd:13:08:4a:53:55:77:
         6e:2e:12:df:db:9a:1c:1e:58:e0:0f:24:69:27:a2:ef:ee:4d:
         24:fa:3e:ac:63:97:3b:07:99:a6:16:14:7d:fb:5c:d7:a8:73:
         05:4d:90:55:dd:d0:8a:8c:a8:0e:71:55:d4:88:bf:90:06:a4:
         fe:3a:b7:d8:c5:5e:c3:4e:48:68:a6:d8:77:74:ec:38:8a:28:
         b3:1f:57:5f:2e:16:aa:9a:ab:dc:05:e6:03:c9:8b:91:23:5a:
         2b:59:67:f2:9e:28:4e:65:36:af:f2:2a:cd:89:15:30:9b:32:
         ab:22:10:5e:e3:ca:26:25:32:49:8e:8e:a6:6f:ea:db:63:e6:
         a6:dc:5a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:18 2025 by rpki-client