Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa
File:                     3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa (raw, json)
Hash identifier:          39HCC1hpy/L/5icyGMLEjhsmg2w24SHmvNK8sZvKP9A=
Subject key identifier:   BA:2F:AE:21:14:6E:90:C7:C1:4A:70:F9:B3:82:6D:0C:F5:1B:D2:68
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       7CE29B5774DFBBA84FE81976AD4D713BC36A6F87
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa
Signing time:             Tue 04 Feb 2025 18:30:36 +0000
ROA not before:           Tue 04 Feb 2025 18:25:36 +0000
ROA not after:            Tue 03 Feb 2026 18:30:36 +0000
asID:                     267876
IP address blocks:        190.185.192.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e2:9b:57:74:df:bb:a8:4f:e8:19:76:ad:4d:71:3b:c3:6a:6f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:36 2025 GMT
            Not After : Feb  3 18:30:36 2026 GMT
        Subject: CN=BA2FAE21146E90C7C14A70F9B3826D0CF51BD268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:12:bf:93:25:95:05:f1:3b:96:4a:13:f2:d7:
                    6f:4d:1f:a4:78:cf:40:85:9a:20:da:37:e8:a1:f5:
                    ee:96:09:97:c1:16:84:9c:b6:e9:d5:14:18:b1:dc:
                    5d:94:76:38:26:95:b4:6a:29:99:22:b2:68:f6:fe:
                    04:b5:c3:28:da:b1:3c:60:37:07:07:b5:38:58:9b:
                    67:2a:8b:ed:e2:85:bd:9c:fd:af:1f:50:2c:6a:4a:
                    be:62:3b:08:c7:56:50:ec:c3:8f:60:9f:31:01:b4:
                    79:ad:20:40:db:c1:db:4f:36:27:f0:ff:41:05:ea:
                    12:9c:43:bb:66:a4:b1:d7:17:e0:3d:80:80:9b:f2:
                    eb:af:1b:c4:e7:57:a3:d2:df:5a:c6:09:4b:ec:3a:
                    97:9f:26:05:8f:ce:d4:70:f7:42:7e:c9:f2:98:4f:
                    0c:53:7e:f7:a8:48:d8:ba:5c:91:72:34:89:ec:5a:
                    ad:a3:fc:5f:ed:34:5e:e6:7b:46:2a:43:08:ad:3d:
                    86:97:a8:6e:41:6d:3c:21:01:97:0b:0b:b0:5f:c8:
                    15:7f:7b:e3:73:de:07:f2:7e:36:d7:8d:39:7d:aa:
                    62:2a:e3:5e:cf:2d:13:6e:63:68:6d:f4:6e:9f:2d:
                    6a:a3:53:c0:c2:3d:4d:f7:2c:c6:99:51:a8:0c:4c:
                    45:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2F:AE:21:14:6E:90:C7:C1:4A:70:F9:B3:82:6D:0C:F5:1B:D2:68
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3138352e3139322e302f32332d3234203d3e20323637383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:6c:5c:3d:64:66:b5:25:4a:65:32:2a:eb:92:f2:d5:fb:5f:
         f5:8d:83:86:99:7d:e6:54:e5:ba:d1:29:f6:b1:e2:d5:27:9a:
         93:61:a5:a4:86:e5:17:30:94:e1:5d:22:1c:3d:14:b9:f0:ec:
         00:31:ca:f4:d7:1a:f9:da:2c:14:fd:78:9b:b4:33:20:9f:78:
         a7:3b:ee:37:67:f0:27:8b:35:9d:f9:e4:c4:80:2b:21:63:a9:
         26:5f:25:db:94:2c:34:da:83:b1:46:ba:59:b2:66:29:d4:51:
         d5:8b:d0:fd:0a:ad:28:97:f0:03:62:a6:d5:c2:59:dd:08:c6:
         d4:9b:b9:50:d9:a1:89:99:fe:f8:4d:2f:cc:52:ec:8a:cf:4b:
         be:93:a3:15:d9:e7:50:b7:5c:2a:21:68:7a:83:4d:5b:c7:ae:
         6c:22:a4:15:51:7c:89:60:18:4a:10:e8:90:6e:0c:2f:4c:27:
         8c:08:04:da:bd:a2:93:9e:f9:1d:32:d3:69:79:a5:2f:ac:07:
         02:3f:72:4b:46:2e:8e:43:a6:1a:22:6f:45:8a:36:82:84:f7:
         5b:a5:38:d4:9c:fd:2a:bf:8d:fc:9a:50:1f:dc:49:c4:8b:cd:
         32:b8:39:40:d6:a2:69:5c:20:5a:0c:f1:1e:71:b9:0a:3f:4e:
         d3:98:3b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:07 2025 by rpki-client