Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e203132313237.roa
File:                     3139302e35372e36312e302f32342d3234203d3e203132313237.roa (raw, json)
Hash identifier:          Y/EpKFNAn17Fuzg0Hq1Z7KbeadiIROlxqGwcOIQIiR8=
Subject key identifier:   85:72:F7:51:75:FF:91:7B:A7:EE:36:2C:47:7A:9D:96:44:95:CA:A0
Certificate issuer:       /CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
Certificate serial:       199987B5338509E807772E45095258F74EC3C5A7
Authority key identifier: DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e203132313237.roa
Signing time:             Tue 05 Mar 2024 18:06:49 +0000
ROA not before:           Tue 05 Mar 2024 18:01:49 +0000
ROA not after:            Tue 04 Mar 2025 18:06:49 +0000
asID:                     12127
IP address blocks:        190.57.61.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:99:87:b5:33:85:09:e8:07:77:2e:45:09:52:58:f7:4e:c3:c5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCDE245406EF53D802AC05030F2AF3C618B69FF2
        Validity
            Not Before: Mar  5 18:01:49 2024 GMT
            Not After : Mar  4 18:06:49 2025 GMT
        Subject: CN=8572F75175FF917BA7EE362C477A9D964495CAA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:37:e8:ab:7b:d2:9b:c3:e6:81:64:ca:6f:6e:
                    d3:46:f6:8c:d7:8c:e8:58:81:00:08:7f:88:29:3a:
                    14:4c:ec:08:c1:d3:43:11:4c:bb:96:c7:a8:64:9c:
                    eb:8c:c0:e0:bd:6f:19:e2:93:59:4b:68:d4:b2:84:
                    d1:02:e0:ae:6c:9d:43:47:77:db:bb:ea:79:a2:17:
                    18:56:ac:42:8a:71:2c:a7:49:84:21:1d:93:a6:d7:
                    29:fc:d6:ea:9d:13:32:1d:86:ee:8e:e6:df:a6:e3:
                    ad:b4:23:ae:92:8c:3c:e2:c0:b5:a4:8e:18:ee:c4:
                    06:28:f0:b0:4b:a6:ab:5e:ea:38:ae:24:c4:7d:45:
                    5e:3b:91:69:62:4c:be:9e:a7:6a:36:84:ed:1a:f0:
                    fa:8d:f8:0a:c3:86:99:11:7a:b3:0c:af:a4:8c:e4:
                    3e:f4:6a:84:3b:fb:86:ab:64:7b:08:43:db:45:ec:
                    05:cd:32:41:f1:b4:6a:2a:46:ae:64:7c:61:7d:43:
                    74:67:15:1a:61:44:7b:3b:4e:2f:36:56:04:fc:eb:
                    6a:80:33:26:0e:d5:f6:f6:f7:51:df:94:12:48:79:
                    12:ec:29:80:71:66:cd:ee:0b:a6:f8:6d:da:ef:c8:
                    d9:f0:1c:06:05:bc:5d:cf:cf:e9:a5:8c:34:eb:8a:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:72:F7:51:75:FF:91:7B:A7:EE:36:2C:47:7A:9D:96:44:95:CA:A0
            X509v3 Authority Key Identifier:
                keyid:DC:DE:24:54:06:EF:53:D8:02:AC:05:03:0F:2A:F3:C6:18:B6:9F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DCDE245406EF53D802AC05030F2AF3C618B69FF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BE5D47A3592B259B5A43A3E01BC9DD4B7D76D8AEC387E1955FE9094A3AC6DE47/0/3139302e35372e36312e302f32342d3234203d3e203132313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:07:26:18:37:6b:00:e0:ec:46:18:0d:39:13:92:bf:28:1e:
         4e:67:b1:8a:99:1d:85:94:51:f0:b6:9d:25:a5:ae:ab:8d:4b:
         6f:c3:db:40:43:a5:e9:14:8a:61:94:9c:67:51:96:91:52:28:
         0f:60:3f:0d:5f:3b:60:80:52:07:8e:02:71:19:e8:d3:5c:f2:
         d3:ae:40:ba:08:dd:34:08:f3:62:a6:08:6d:8b:d6:aa:4a:cd:
         57:35:10:16:2f:f4:e2:af:3a:31:2b:1b:ad:3f:62:c4:24:f5:
         1c:57:fa:15:2f:6f:49:80:ef:3a:6d:ad:bb:4c:92:d5:52:03:
         de:54:de:df:bc:2b:05:1f:78:ea:f4:f1:07:3e:4b:cb:6b:71:
         10:22:08:0d:b6:51:15:16:69:f6:66:be:3c:9e:74:08:09:c2:
         e9:88:78:4c:df:c2:dd:2e:c4:99:10:7d:d4:5f:78:ee:34:9f:
         e1:55:54:53:b2:ce:8a:92:de:43:ba:f8:f2:2d:41:a2:d0:7f:
         88:2a:f2:fb:66:42:97:1d:a7:33:89:46:ba:58:32:24:55:95:
         53:58:97:80:48:84:27:7d:8c:6f:7b:88:6e:be:c2:5a:10:f7:
         9e:20:93:e2:73:81:15:62:ec:bf:9f:c8:a4:d7:70:33:7a:b7:
         4b:36:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:03:33 2025 by rpki-client