Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f31392d3234203d3e20323632313931.roa
File:                     3139302e3133312e3232342e302f31392d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          Q2oDjNBFM/kwYuDWp8cYXrFHEFXOulAqRpv/R9MuqVs=
Subject key identifier:   C6:81:09:91:1C:E6:B4:CB:F4:9C:3A:02:7A:0C:AE:19:83:C0:E2:74
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       78379B8FD3CB492C3D159BAAFCC069968349E5F6
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f31392d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:39 +0000
ROA not before:           Tue 04 Feb 2025 19:59:39 +0000
ROA not after:            Tue 03 Feb 2026 20:04:39 +0000
asID:                     262191
IP address blocks:        190.131.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:37:9b:8f:d3:cb:49:2c:3d:15:9b:aa:fc:c0:69:96:83:49:e5:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:39 2025 GMT
            Not After : Feb  3 20:04:39 2026 GMT
        Subject: CN=C68109911CE6B4CBF49C3A027A0CAE1983C0E274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:64:69:b0:3e:33:a9:42:6f:6d:43:e4:b2:
                    cf:62:7d:a5:dc:b4:e0:07:4e:58:ec:8c:82:a5:e1:
                    ad:35:6b:8d:85:e6:ba:39:bb:1c:66:f6:89:f0:84:
                    1e:37:82:cf:30:64:20:22:54:d6:39:67:7f:25:d7:
                    df:d5:ec:4c:1e:98:a2:8e:46:60:c1:91:da:74:2c:
                    1d:75:b5:4f:e8:f3:31:10:a4:94:62:46:fc:c9:de:
                    f5:f0:fd:a4:0a:c0:b4:ba:24:73:ac:27:b9:94:22:
                    6c:ff:09:01:a5:cc:f4:8c:2d:63:7b:34:b1:a1:4e:
                    99:f7:0b:ef:d4:11:39:3b:36:4f:45:90:f9:99:3d:
                    1b:52:5e:ec:b5:6f:82:49:58:a5:f4:01:01:0c:6e:
                    dd:c5:bf:a8:42:db:38:29:59:91:81:40:5b:f1:ea:
                    95:85:56:de:38:55:72:b7:33:50:12:c5:be:0a:1b:
                    d5:f7:ca:0d:c6:44:c4:29:e2:a2:d3:a7:0c:86:8d:
                    e1:00:2e:a2:73:d8:96:51:f7:a0:62:57:93:bb:10:
                    af:ee:d3:63:ca:6f:73:5e:f2:e1:fa:17:6f:63:4d:
                    3e:9c:a3:2f:56:34:c9:07:b3:73:e8:2c:65:7f:2a:
                    9d:05:0e:2d:b3:d1:fa:f2:3b:66:6f:13:ec:b7:cf:
                    2a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:09:91:1C:E6:B4:CB:F4:9C:3A:02:7A:0C:AE:19:83:C0:E2:74
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3232342e302f31392d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:6a:57:83:79:fe:f3:e4:01:15:0b:82:0e:c4:33:49:92:3e:
         1b:dd:16:9d:fe:cb:74:a9:c4:99:0a:ab:f6:25:c4:7a:e4:d6:
         a8:9d:3d:35:af:2e:13:55:dd:7a:4f:5e:ac:a6:72:c1:83:cd:
         d1:45:85:b0:9f:82:f6:25:82:a9:e2:ac:1a:dc:0e:a0:4b:20:
         6d:c4:94:b6:00:8f:a5:dd:65:64:70:40:ef:31:52:2f:af:ee:
         47:92:21:55:28:d6:9b:c9:40:5f:eb:a8:b5:19:51:30:bc:86:
         84:56:9a:28:21:3d:c0:1d:f8:55:1f:21:f2:e2:91:9c:db:cb:
         12:c6:bd:87:f0:a8:16:55:db:97:c0:76:71:f9:46:36:fb:d3:
         b0:9a:5d:15:5e:29:9f:64:f2:36:7f:1f:14:97:b6:43:b8:84:
         fc:8c:3c:71:c3:e2:2e:bf:01:c0:e9:d7:d9:74:c3:54:ee:50:
         47:bd:87:f3:b9:7d:e6:c6:47:d2:ac:0e:60:fd:c8:e0:c2:73:
         44:26:ba:9e:a9:f1:dc:35:4c:08:6f:91:45:a3:0c:d2:c3:e7:
         2c:fe:6c:f7:a0:5b:a9:92:9f:d4:b9:38:91:6c:4e:80:1f:6a:
         8f:3e:7c:4e:98:82:cc:b7:2e:c5:1a:bd:2a:74:bc:4c:97:89:
         22:de:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:50:22 2025 by rpki-client