Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
File:                     3139302e3135302e39362e302f31392d3234203d3e203237373733.roa (raw, json)
Hash identifier:          Jn/xrArpH3f/GVXSZeRabx3uFqT7McreJ3iTr3P5OOY=
Subject key identifier:   80:1B:5D:51:47:5E:26:53:2E:16:EC:22:95:F3:5A:14:9B:05:16:BD
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       078015F07579B8F9D5EA772D8A88205A881A9E7B
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 20:02:06 +0000
ROA not before:           Tue 04 Feb 2025 19:57:06 +0000
ROA not after:            Tue 03 Feb 2026 20:02:06 +0000
asID:                     27773
IP address blocks:        190.150.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:80:15:f0:75:79:b8:f9:d5:ea:77:2d:8a:88:20:5a:88:1a:9e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Feb  4 19:57:06 2025 GMT
            Not After : Feb  3 20:02:06 2026 GMT
        Subject: CN=801B5D51475E26532E16EC2295F35A149B0516BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5a:ea:e5:f5:fa:99:7b:85:0e:f7:1e:7f:68:
                    fa:b6:ac:3a:77:48:b6:15:75:bf:df:2c:11:30:a0:
                    84:5b:e6:b4:6f:03:1a:0b:f2:64:83:f5:da:50:96:
                    98:a4:cd:04:77:3d:84:7e:4e:55:d3:a0:73:b9:d6:
                    0e:61:1a:13:ac:82:3a:c5:09:01:92:7b:0c:6b:25:
                    ff:83:b2:4b:d9:0f:40:60:8b:2a:40:ab:df:d3:3c:
                    8a:38:39:17:7d:b5:8f:fa:7a:c3:38:e2:90:ed:9a:
                    e6:ba:da:98:f0:ca:e2:68:b1:38:80:46:65:a1:fb:
                    e5:bf:39:b0:4b:0a:7b:66:c8:b3:da:30:bd:52:61:
                    7a:e6:0f:be:34:13:ec:3b:37:e5:b1:51:c7:c3:c7:
                    95:78:e0:18:3a:aa:26:1b:3d:45:6f:ef:83:47:e0:
                    9f:b9:b4:d2:8e:40:30:c2:7b:ff:cc:ef:f0:1f:ca:
                    ef:ca:a0:ce:b8:b1:13:d4:dd:7f:a9:08:b2:4a:a7:
                    39:8a:72:38:48:94:e3:17:8c:76:29:d1:a3:ec:3d:
                    f8:ff:9f:7e:af:fc:91:79:b1:54:a3:09:71:d8:07:
                    ca:8b:04:5f:e1:f2:d0:86:a6:55:36:f1:e0:e2:1a:
                    77:73:01:5d:b8:1f:c9:bd:d3:e5:f0:2d:1f:68:22:
                    0c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:5D:51:47:5E:26:53:2E:16:EC:22:95:F3:5A:14:9B:05:16:BD
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e3135302e39362e302f31392d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.150.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:b2:da:9c:f4:b5:6f:60:71:c9:3a:f8:e9:d4:86:e1:45:14:
         a2:ab:de:9a:bc:36:59:30:f2:6c:b3:92:93:fb:bc:ab:ff:6b:
         8b:c3:25:68:0e:60:99:98:b7:e4:10:09:74:49:14:ad:06:21:
         fb:d2:c9:ca:de:bd:b9:08:ca:d1:70:b0:3d:89:12:0a:1c:69:
         6d:fa:c5:7c:2b:49:1a:e4:ef:b6:2d:06:47:f0:62:b9:36:1d:
         d8:f3:73:87:2a:4b:78:a1:eb:8c:3a:ae:51:ae:6d:1b:53:1a:
         10:a3:b7:07:39:c5:3b:d6:dc:4e:10:67:13:59:78:f7:1e:ca:
         64:37:ba:26:95:b4:e3:95:77:0c:e8:09:10:82:c4:b7:88:63:
         b7:fb:32:c9:a6:96:a8:ff:b6:47:96:37:1b:07:92:49:99:42:
         fc:69:a6:40:9a:09:8b:1a:fe:b4:56:44:a3:1e:60:7f:7e:03:
         4d:ca:bf:6f:08:d0:33:3b:91:b1:e4:ec:7e:b3:f0:2b:7a:00:
         43:56:37:19:c8:df:ec:6d:fe:21:e5:3c:46:9b:ae:d3:9d:62:
         f7:49:0e:5e:69:6b:fa:fd:3a:1f:7b:3f:87:cd:f6:02:5f:3e:
         5c:49:e8:3d:8c:1e:52:0e:7b:f6:43:34:03:01:4e:6d:a1:db:
         e0:01:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:51:37 2025 by rpki-client