Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa
File:                     3139302e39332e3233322e302f32322d3233203d3e203237393739.roa (raw, json)
Hash identifier:          vFrlCj1IPSO2UKne8TEAKOdsQC3Z6SOsZqn6O0oTNZU=
Subject key identifier:   E4:F5:08:9B:AD:10:4E:C3:81:66:A1:65:55:3C:EB:B3:DB:95:92:AB
Certificate issuer:       /CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
Certificate serial:       629E27B9A039DDCB6F1BAE32172142DF3D0DA476
Authority key identifier: 5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa
Signing time:             Tue 04 Feb 2025 18:44:09 +0000
ROA not before:           Tue 04 Feb 2025 18:39:09 +0000
ROA not after:            Tue 03 Feb 2026 18:44:09 +0000
asID:                     27979
IP address blocks:        190.93.232.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:27:b9:a0:39:dd:cb:6f:1b:ae:32:17:21:42:df:3d:0d:a4:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE
        Validity
            Not Before: Feb  4 18:39:09 2025 GMT
            Not After : Feb  3 18:44:09 2026 GMT
        Subject: CN=E4F5089BAD104EC38166A165553CEBB3DB9592AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:7e:86:45:cc:d7:ca:ea:af:7a:a8:ba:b5:
                    2e:4e:65:4a:0c:72:7c:f5:10:f3:6a:c7:79:8d:d8:
                    be:98:a9:ec:c4:68:a3:a6:ba:02:70:4a:84:59:ca:
                    40:1c:a0:ad:cb:8b:57:dc:21:63:49:df:a5:00:a8:
                    48:08:6b:3a:d2:ed:1b:ed:2e:56:3f:61:ac:09:10:
                    15:8f:06:a6:0d:5f:aa:ff:12:6d:4a:c1:fe:c9:cc:
                    c7:e3:d3:12:5d:97:9d:f2:ac:e0:20:23:1b:fa:65:
                    27:7a:c7:71:1a:bc:9f:88:75:67:70:c0:58:ed:76:
                    07:a3:4b:68:45:a4:45:80:14:cf:d1:88:1a:a2:3a:
                    cc:7b:aa:a8:77:09:58:c2:26:5d:79:b7:97:8c:56:
                    83:1a:fb:23:c1:b1:90:63:36:4d:67:b4:be:84:34:
                    c3:86:be:47:d9:cc:93:e0:c0:60:3d:6c:20:f1:06:
                    0f:e6:30:7c:0b:08:69:f7:34:78:17:a1:ea:00:88:
                    8a:c3:43:c3:db:84:10:5d:b1:bf:fa:91:fb:97:e5:
                    01:e7:47:4e:9e:3a:71:40:75:cb:ed:2a:de:90:32:
                    6b:c8:fc:ac:cc:e5:bf:f3:89:17:c2:fd:ec:49:2f:
                    98:96:a0:cf:2c:9a:ea:f9:e9:a3:48:82:a1:29:3c:
                    1c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F5:08:9B:AD:10:4E:C3:81:66:A1:65:55:3C:EB:B3:DB:95:92:AB
            X509v3 Authority Key Identifier:
                keyid:5C:A7:B2:04:D1:1D:A9:5E:CC:3E:84:65:FD:E8:77:F7:67:0F:1A:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CA7B204D11DA95ECC3E8465FDE877F7670F1AFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4C9738D041D6F7A1606BEBFB4120FBBAFD61B3A1B8CF8951AB5BD0407F0E457/0/3139302e39332e3233322e302f32322d3233203d3e203237393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:98:a2:8b:d5:0a:7d:c2:a6:0b:ab:a4:e3:22:be:e3:af:51:
         b0:00:c8:4d:25:0f:51:9a:5c:fa:37:42:c1:93:5c:b0:06:9c:
         36:08:29:e9:e2:9f:c5:9d:d0:bb:09:10:5e:7f:63:9b:40:1a:
         25:2b:21:0c:9d:9d:e7:d3:71:7c:11:8b:ce:21:84:fd:25:bd:
         1f:39:b9:2b:52:27:4f:a4:bd:70:01:dd:05:7d:63:4f:d3:d3:
         68:61:75:16:0e:d9:f1:5a:97:5b:4d:19:1b:f8:a6:c3:bf:29:
         eb:53:44:ce:bb:03:ba:db:28:98:e7:c1:ab:33:72:e2:37:e5:
         5c:05:82:1c:8a:30:4c:c0:a0:a4:67:70:ad:05:b2:85:21:0a:
         a0:41:b5:af:03:fc:a2:59:c5:38:22:6f:47:3e:b8:c7:ae:42:
         41:ce:c0:26:3c:77:dc:c0:61:10:29:c2:d4:c7:fd:93:27:43:
         9f:87:ed:c2:0d:08:a7:a5:7c:34:e2:a6:b2:db:c2:36:5c:2b:
         c1:4f:78:58:d9:b1:94:60:0d:02:49:27:62:58:d2:3b:65:38:
         05:3d:0f:f1:55:29:e8:4b:73:f4:5b:37:50:d2:b0:89:20:36:
         22:ae:c7:96:a0:1e:33:ea:68:07:4d:5f:26:8a:c3:ac:a1:62:
         1f:8a:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:38 2025 by rpki-client