Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/3139302e3131332e302e302f31392d3234203d3e203232383630.roa
File:                     3139302e3131332e302e302f31392d3234203d3e203232383630.roa (raw, json)
Hash identifier:          eCD6t82FR5XdxLML5wgQESBAtsJwifm5vQsuS3AjioY=
Subject key identifier:   4D:D2:60:FB:57:BC:F4:63:88:C3:A1:90:69:86:29:1F:FE:47:04:8C
Certificate issuer:       /CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
Certificate serial:       3EE5F4B4A2A8E6E2A10364C445CCFB2B8930FBB5
Authority key identifier: 9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/3139302e3131332e302e302f31392d3234203d3e203232383630.roa
Signing time:             Tue 04 Feb 2025 20:00:01 +0000
ROA not before:           Tue 04 Feb 2025 19:55:01 +0000
ROA not after:            Tue 03 Feb 2026 20:00:01 +0000
asID:                     22860
IP address blocks:        190.113.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e5:f4:b4:a2:a8:e6:e2:a1:03:64:c4:45:cc:fb:2b:89:30:fb:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F6EA2D324259DF27DF8730E7E750CA4CA449421
        Validity
            Not Before: Feb  4 19:55:01 2025 GMT
            Not After : Feb  3 20:00:01 2026 GMT
        Subject: CN=4DD260FB57BCF46388C3A1906986291FFE47048C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:f0:d3:46:a6:c2:38:1b:17:6b:74:bf:12:
                    e9:73:d9:4e:53:a0:c2:36:0c:10:d3:51:a3:d6:3e:
                    b5:48:4a:59:a6:b1:bd:0b:a3:77:e1:68:71:71:21:
                    31:4a:fe:2d:6b:a3:dc:bd:08:23:1c:e7:4a:b7:66:
                    8f:12:3c:0c:39:42:c7:32:be:7a:54:a3:a3:3f:8d:
                    97:46:8f:ec:49:2d:49:fb:f8:0b:3e:58:e8:53:95:
                    e4:0e:1d:42:04:01:9a:93:6b:cb:50:c5:9e:37:42:
                    07:27:49:69:ea:cd:e4:2c:b7:ad:51:e2:1a:c2:a3:
                    77:fd:61:9a:dd:37:e0:25:91:8b:6d:00:48:a7:ef:
                    76:01:f6:52:37:9c:63:1f:66:c5:65:af:e8:8a:5d:
                    56:1c:61:39:9c:f7:51:51:36:bc:64:8a:1b:77:e3:
                    ee:4c:7f:cd:4f:83:7c:21:cf:45:c4:7b:63:8c:0b:
                    98:3d:af:36:9d:30:95:6e:9e:93:39:75:cf:4e:5b:
                    97:e3:38:36:4a:8a:06:35:43:51:29:54:f8:c5:27:
                    4b:0f:26:89:9e:07:8d:b9:ed:46:a0:e4:73:38:5c:
                    3d:ac:e2:21:65:51:2e:5a:45:b0:66:01:ad:f1:f4:
                    dd:f7:e6:f4:7b:a4:03:3d:46:53:a8:89:f8:80:bb:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D2:60:FB:57:BC:F4:63:88:C3:A1:90:69:86:29:1F:FE:47:04:8C
            X509v3 Authority Key Identifier:
                keyid:9F:6E:A2:D3:24:25:9D:F2:7D:F8:73:0E:7E:75:0C:A4:CA:44:94:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F6EA2D324259DF27DF8730E7E750CA4CA449421.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AC4EF1C8254E7185A0EE0DB9D46EBFDDC104AFD0D8B330D79A592C7D3618BA7/0/3139302e3131332e302e302f31392d3234203d3e203232383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:12:99:d0:89:84:22:8c:a3:33:c0:7b:1c:a9:22:0b:8b:89:
         b2:fb:c0:ce:93:5a:d4:8f:cc:3f:c9:4b:e2:1f:73:06:f0:8f:
         bd:b3:b7:4c:f7:fd:a1:d5:1b:e2:30:8f:19:0d:28:8a:c4:88:
         77:95:8b:7b:64:d2:19:ba:ad:52:57:27:08:d1:35:ae:41:a9:
         6d:fb:a9:5f:b0:ac:46:2f:b7:7c:e5:2c:a6:1b:a5:af:c5:06:
         09:0b:6d:0b:33:83:a0:f1:8a:3a:60:1c:8e:f4:9f:23:99:44:
         b4:3e:5a:39:0f:d8:cb:85:61:61:39:79:58:4d:45:49:e4:df:
         9d:e4:34:b2:50:76:76:50:14:c6:d6:be:fd:69:86:36:e3:3b:
         5c:a9:bb:63:6e:b3:f9:dd:8d:48:cc:7a:1f:c6:2b:3d:9f:3d:
         4e:3c:96:67:79:b3:2e:e4:22:0d:76:d6:be:bf:19:1b:bc:8b:
         8c:5d:5b:65:ca:53:47:6e:1d:c1:ed:d4:1a:1f:2e:14:05:cc:
         87:f0:5a:0e:3c:e4:a9:3a:70:46:bc:e3:11:c0:26:df:5c:09:
         09:43:44:bc:64:12:4e:6b:16:6e:5f:58:1b:a1:38:ab:4a:08:
         93:68:86:2f:3b:fb:0f:4a:9e:f9:96:bb:76:f7:8e:57:a4:9f:
         6f:72:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:38:23 2025 by rpki-client