Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa
File:                     3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa (raw, json)
Hash identifier:          YhwhLlPige5hlOKUpbP41/aJApwr7M9ZKEmrpb233Lk=
Subject key identifier:   20:CA:5A:4D:74:05:8A:B6:10:61:99:FC:DE:A5:BD:00:1F:C8:36:F5
Certificate issuer:       /CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA
Certificate serial:       5C05AB3A66FCE149BE6AAB8941FD924B3EEE3E71
Authority key identifier: 5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa
Signing time:             Tue 04 Feb 2025 18:43:47 +0000
ROA not before:           Tue 04 Feb 2025 18:38:47 +0000
ROA not after:            Tue 03 Feb 2026 18:43:47 +0000
asID:                     270114
IP address blocks:        187.102.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:05:ab:3a:66:fc:e1:49:be:6a:ab:89:41:fd:92:4b:3e:ee:3e:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA
        Validity
            Not Before: Feb  4 18:38:47 2025 GMT
            Not After : Feb  3 18:43:47 2026 GMT
        Subject: CN=20CA5A4D74058AB6106199FCDEA5BD001FC836F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:09:0c:aa:8b:7b:d0:ce:33:99:db:2b:df:
                    0a:c2:2f:8f:0d:6d:28:03:a8:80:07:db:cb:36:fe:
                    5c:39:3d:ca:35:dd:ee:4a:46:a2:68:80:d3:8b:20:
                    cc:8a:b6:8d:27:83:1c:e1:3d:b4:c2:0b:2c:06:e3:
                    87:8e:f5:c2:4f:bc:77:1f:ee:40:4d:5a:9c:74:c8:
                    78:be:20:86:c4:03:06:7e:a1:48:6a:84:90:69:26:
                    d7:6b:9a:1a:5d:07:96:92:75:fa:09:6c:55:a4:b8:
                    37:b4:cb:a8:9a:4c:76:24:70:58:dc:93:28:bd:8c:
                    68:2a:ec:8e:12:ea:cd:0f:11:2a:ab:21:8d:da:32:
                    33:42:62:1e:85:4d:f5:bc:0b:37:81:45:cf:1c:75:
                    60:0a:f5:3b:5c:f0:83:53:9d:ef:00:64:cf:c5:f4:
                    1b:34:f0:57:bd:b9:cf:10:13:4a:e8:c6:92:ff:1d:
                    f8:49:13:30:26:25:e5:77:b9:fd:60:b2:ed:eb:a8:
                    ef:88:e7:85:25:ab:d5:ab:77:53:52:0a:c0:2e:1f:
                    c5:cf:f6:77:8f:9a:a3:bc:22:4a:07:bc:5c:b9:75:
                    49:df:15:5f:6d:93:77:bd:a0:fc:e5:20:fb:b6:21:
                    70:07:73:4c:3c:b4:e8:02:87:e3:6e:0c:74:17:a6:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:CA:5A:4D:74:05:8A:B6:10:61:99:FC:DE:A5:BD:00:1F:C8:36:F5
            X509v3 Authority Key Identifier:
                keyid:5C:A9:B7:20:4E:C5:BF:0F:17:89:3E:6C:6F:C3:AE:A1:EB:38:32:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA9B7204EC5BF0F17893E6C6FC3AEA1EB3832BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5EE004491AF40016D2EE00465568B1E431B932343232A5D1F9F02D4323357E7/0/3138372e3130322e3233362e302f32322d3234203d3e20323730313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:be:cb:4b:20:a5:35:f2:50:5e:a0:43:9b:56:31:4e:7e:1b:
         4c:c5:d2:4e:de:6a:2f:8f:f5:9c:9a:a6:89:4d:62:e3:9c:37:
         54:2f:ee:77:14:54:4a:6c:dd:14:9f:13:83:92:fb:be:5a:32:
         92:d5:e7:e8:0a:28:b9:62:1f:f2:2d:54:5a:a9:a0:84:34:2c:
         45:b9:a1:81:b3:b1:6e:2e:d3:2e:93:a9:41:3d:9f:b3:09:36:
         ee:36:80:8a:98:e7:80:42:86:fe:da:d4:75:32:1a:41:4a:c5:
         3d:5c:41:1c:c2:ec:92:38:d4:b1:b2:e6:f4:5b:84:dc:8a:63:
         40:e4:52:db:30:00:cc:0e:20:a9:e4:5f:1f:58:1c:df:7f:04:
         e4:d4:19:00:e7:ac:2f:5b:11:f0:c9:57:12:87:cb:0e:69:e0:
         e8:d5:ca:89:44:0f:4d:48:39:83:23:6b:37:fd:34:e2:03:8d:
         67:7e:f5:94:12:b0:b3:22:f7:37:54:f1:64:0d:31:9e:a3:7f:
         4e:f6:78:67:be:ba:9c:20:21:5a:8c:4a:d9:28:7e:a5:4e:e8:
         91:1a:3a:80:e6:19:2c:eb:50:f5:16:a6:bc:54:f1:75:7b:29:
         39:69:d2:ae:68:66:f5:ac:e3:bd:33:5d:90:7e:17:0b:15:c2:
         a9:0f:8f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:21:19 2025 by rpki-client