Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3232342e302f32302d3232203d3e203237393739.roa
File:                     3139302e39332e3232342e302f32302d3232203d3e203237393739.roa (raw, json)
Hash identifier:          zlC+doRC/ZgIGuoJ/0PQK1aBXXRoiuJia3Wh4qEnY4o=
Subject key identifier:   95:64:83:B9:0C:37:5C:37:59:1A:E7:B5:61:D0:E8:EA:ED:52:AA:35
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       46DD157F48E9FD6C64DBBEF9598D3F81067FB4FF
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3232342e302f32302d3232203d3e203237393739.roa
Signing time:             Tue 04 Feb 2025 18:44:09 +0000
ROA not before:           Tue 04 Feb 2025 18:39:09 +0000
ROA not after:            Tue 03 Feb 2026 18:44:09 +0000
asID:                     27979
IP address blocks:        190.93.224.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:15:7f:48:e9:fd:6c:64:db:be:f9:59:8d:3f:81:06:7f:b4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Feb  4 18:39:09 2025 GMT
            Not After : Feb  3 18:44:09 2026 GMT
        Subject: CN=956483B90C375C37591AE7B561D0E8EAED52AA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b9:f3:3c:cb:f7:18:12:18:09:59:49:5c:a5:
                    02:3b:58:53:84:13:2d:66:e9:4e:e5:0e:07:40:87:
                    17:1e:20:af:96:03:4a:e2:de:d7:12:f8:c6:e9:9a:
                    33:39:ee:f0:6f:66:23:15:b8:42:1c:e1:97:ef:18:
                    a9:c7:6c:29:8e:87:2a:36:5d:88:79:05:5a:9b:38:
                    ed:ef:6e:4b:51:18:72:66:b2:0c:00:e1:0c:c4:af:
                    e5:58:dc:4d:2e:ef:a4:8d:ca:f1:02:1b:5f:47:d7:
                    56:23:ce:d0:81:ab:72:fa:e5:ce:ba:19:49:58:ef:
                    e8:bb:27:a9:44:8d:05:44:19:39:e6:1f:74:9c:e8:
                    c4:d6:55:8e:c1:c7:48:e5:9e:a0:36:b7:85:d7:3f:
                    3c:f8:a3:10:2c:53:32:58:3e:bb:5a:7e:12:6e:70:
                    ae:81:b7:71:08:c6:2d:49:2e:0d:f4:fc:5f:71:80:
                    b6:f0:85:7d:ed:57:e8:10:b7:58:53:e2:52:e1:2a:
                    17:c8:d4:44:c7:14:b0:fd:7c:19:08:4e:a6:f5:06:
                    0f:66:5a:d4:8e:2a:e7:fa:70:94:a8:80:2a:3b:a1:
                    16:ac:24:00:2a:5e:06:a9:7b:7b:a7:c2:36:9e:8a:
                    38:a3:be:18:01:a8:f7:74:00:00:9e:80:31:f5:3c:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:64:83:B9:0C:37:5C:37:59:1A:E7:B5:61:D0:E8:EA:ED:52:AA:35
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3232342e302f32302d3232203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:a1:44:42:16:c9:eb:3c:f1:b3:0b:19:c4:d1:32:2b:43:82:
         fe:a1:cf:ab:07:d6:46:c2:53:15:d4:ba:af:8a:80:ff:b2:2d:
         b2:a8:96:e6:3f:13:b4:9c:51:69:26:1a:6f:6b:d8:47:1a:0e:
         9a:6e:71:1d:cd:70:37:ea:e5:85:c0:c0:1c:27:81:2f:bb:70:
         b1:b0:28:79:c6:08:45:e6:13:d5:1f:12:cf:c2:ae:ec:7c:df:
         fe:82:9e:28:19:fa:ca:6b:0a:fd:06:43:49:91:d3:cb:3e:8b:
         e0:4c:7b:58:6f:93:77:53:9f:e1:a9:2b:5b:a8:a0:6e:e4:56:
         ed:de:36:73:18:e0:a8:c2:a6:72:c4:f7:00:3a:64:a6:64:33:
         6f:01:e6:bd:3e:17:65:bb:7b:02:83:7c:bc:03:95:a6:30:3b:
         07:64:9e:2a:03:e1:e7:67:ec:a6:f5:bb:3d:73:21:d4:4f:93:
         67:e6:ee:9f:a1:cd:ef:61:10:d7:24:22:6e:ba:1b:03:5d:04:
         db:d5:61:1a:a0:9f:a8:5e:d2:65:8f:c6:ee:1c:59:9b:be:0b:
         d1:04:3a:b9:c4:90:27:ec:18:4c:4a:76:b3:74:81:05:67:23:
         aa:6f:54:97:3a:35:df:c7:35:d3:d1:2a:df:5c:ed:f2:29:c9:
         6f:5d:e9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:15 2025 by rpki-client