Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          uy3cWkFKg5Tnywmqt25yV8Xcdpb0jcMDyUBVnT5YSlM=
Subject key identifier:   51:03:34:79:D5:1B:F3:F8:C9:EB:AE:AD:DD:F2:6C:45:36:17:BB:B4
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       67AB5BB10FD75047A2314F580F3CDF0B83CE7302
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa
Signing time:             Thu 13 Feb 2025 00:09:42 +0000
ROA not before:           Thu 13 Feb 2025 00:04:42 +0000
ROA not after:            Thu 12 Feb 2026 00:09:42 +0000
asID:                     262182
IP address blocks:        190.52.116.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ab:5b:b1:0f:d7:50:47:a2:31:4f:58:0f:3c:df:0b:83:ce:73:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 13 00:04:42 2025 GMT
            Not After : Feb 12 00:09:42 2026 GMT
        Subject: CN=51033479D51BF3F8C9EBAEADDDF26C453617BBB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6b:46:45:1f:ab:cb:a2:ea:7f:4e:7b:44:a6:
                    93:d4:72:8f:38:57:fc:6f:ce:de:68:0e:c4:45:cc:
                    54:e8:a4:e2:bf:a7:d1:20:5e:84:56:84:30:ea:72:
                    9b:a4:15:8a:bd:a1:f1:aa:af:6a:c7:a7:90:62:fc:
                    e4:18:a6:a8:72:de:1d:b3:5c:4f:4e:01:ba:9e:71:
                    6f:15:86:fc:10:9f:ce:6c:5b:91:ad:1a:2d:85:9a:
                    f0:1f:5c:e2:02:fe:b3:54:69:dc:31:01:4f:9e:81:
                    30:e7:bb:be:2c:2e:51:3e:85:c1:b6:6e:15:d7:cc:
                    de:e7:f1:7a:8c:f4:1b:48:79:58:64:2c:4b:20:37:
                    d3:1b:08:91:72:5b:2b:43:ae:a7:4d:3f:e4:98:da:
                    68:c1:da:42:0b:c2:04:68:c8:6e:61:69:16:b5:d7:
                    cf:e4:c2:39:8a:ae:ee:bf:e7:4e:8e:71:79:e1:ec:
                    1f:59:5e:5e:1f:20:41:ad:44:93:43:93:73:4f:8f:
                    40:d8:1e:f1:94:ad:8d:75:1c:a0:1e:12:08:2e:35:
                    d9:75:f1:20:0a:ea:19:1b:94:f7:cc:5b:94:cf:08:
                    b9:3f:a7:be:8a:6c:7e:48:2e:3b:54:73:6b:b3:ef:
                    ca:71:26:fa:98:70:14:b2:33:fc:4e:0d:4d:52:ce:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:03:34:79:D5:1B:F3:F8:C9:EB:AE:AD:DD:F2:6C:45:36:17:BB:B4
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131362e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:32:80:90:67:c5:a2:8e:57:af:14:31:7e:53:46:77:d1:c8:
         e1:99:24:d9:2d:1f:80:8f:00:8b:c6:04:cb:c7:a0:be:06:a5:
         95:e2:a3:d7:43:c4:bf:a4:48:bb:74:20:39:96:b6:d5:56:12:
         d2:ef:1e:a2:82:8f:62:24:e0:2b:d6:a8:f0:65:90:10:4c:d8:
         8e:89:2a:b5:c8:8c:d3:78:f5:9b:71:91:c7:04:fa:d2:86:cd:
         f2:80:33:e6:e5:b8:8b:ec:2e:78:82:0c:17:de:e9:60:28:34:
         e2:96:84:6d:f4:6b:89:7a:df:2a:38:d6:6c:f1:ea:47:33:56:
         40:67:5a:fb:d7:4c:cb:59:e5:55:93:1f:2c:81:f7:8d:0e:f3:
         5f:9b:14:e1:37:cb:c2:24:e5:a9:b0:aa:ea:71:bd:7a:b7:45:
         ae:6b:b6:9e:a9:b1:f7:ca:92:8f:45:42:c6:dc:a2:f9:b8:4f:
         98:2f:f4:be:6a:6a:d6:c6:a3:b1:f7:2d:98:88:92:53:3d:62:
         b2:f5:e6:24:16:dc:73:06:ae:75:69:38:ca:35:98:f1:65:88:
         1e:95:02:b0:1c:e0:ad:3e:d9:40:1e:4e:8d:a3:65:08:65:af:
         7b:3f:39:e2:db:2c:40:59:77:f8:bb:69:9e:86:7f:8d:dd:8d:
         be:89:d4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:07:10 2025 by rpki-client