Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa
File:                     3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa (raw, json)
Hash identifier:          ViLoKtmb5KCuhwqb2RWhJgqOaDebvNXUmATvO0DlKFw=
Subject key identifier:   AD:E2:A2:E4:B9:62:46:06:CE:39:73:29:80:BA:FF:B7:44:A8:1F:51
Certificate issuer:       /CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
Certificate serial:       63657EADF6B66AEED97A01036144C7060EFDED6A
Authority key identifier: 3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa
Signing time:             Wed 12 Feb 2025 20:09:40 +0000
ROA not before:           Wed 12 Feb 2025 20:04:40 +0000
ROA not after:            Wed 11 Feb 2026 20:09:40 +0000
asID:                     262182
IP address blocks:        190.52.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:65:7e:ad:f6:b6:6a:ee:d9:7a:01:03:61:44:c7:06:0e:fd:ed:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D608F1A58C367A78F93EDCEF6DA6EACD069209B
        Validity
            Not Before: Feb 12 20:04:40 2025 GMT
            Not After : Feb 11 20:09:40 2026 GMT
        Subject: CN=ADE2A2E4B9624606CE39732980BAFFB744A81F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:67:3d:05:20:60:3c:eb:3f:e5:25:0d:8d:
                    72:4e:8e:6d:07:e0:61:a9:8b:16:24:7e:58:b3:11:
                    bd:7d:4a:38:33:34:23:28:c9:e3:9e:2a:80:b5:07:
                    cf:92:62:c4:f1:36:af:0a:c1:02:3d:05:90:31:89:
                    ee:5e:f8:ac:42:95:94:8f:ae:e9:14:ae:6b:13:c9:
                    4c:dc:bd:e7:18:01:2f:65:30:76:7f:e9:19:7a:1d:
                    76:96:64:4a:0a:cf:1d:fc:12:ee:05:c1:c7:02:5f:
                    51:4b:b8:29:52:c5:17:94:ff:3d:46:85:27:5b:67:
                    49:cb:e7:36:46:e7:6b:2f:b0:ac:92:f4:87:32:06:
                    ab:38:43:cf:13:7d:be:ee:5a:94:fa:df:4c:d3:0e:
                    08:cc:49:92:e0:af:ad:10:5d:6d:fe:86:9d:16:55:
                    63:77:6b:aa:e6:49:c1:d7:6b:a0:c3:3b:49:ae:d6:
                    64:73:63:5b:c9:69:cb:9a:71:d4:f3:d3:62:eb:0a:
                    d4:2b:82:2f:69:41:16:1f:ca:20:c1:5f:38:e5:55:
                    f2:ca:d8:e4:a0:5c:cd:1b:eb:38:5f:92:91:d7:19:
                    72:f1:32:29:a7:d9:35:f1:df:2b:11:bf:49:69:23:
                    1b:11:2c:9e:63:86:d4:cd:64:66:d0:62:db:eb:76:
                    cc:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:A2:E4:B9:62:46:06:CE:39:73:29:80:BA:FF:B7:44:A8:1F:51
            X509v3 Authority Key Identifier:
                keyid:3D:60:8F:1A:58:C3:67:A7:8F:93:ED:CE:F6:DA:6E:AC:D0:69:20:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D608F1A58C367A78F93EDCEF6DA6EACD069209B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FCBD94D88BF929AA50D775062E0A115AF04A18FBF4D9FF1512B9CBA509E4042/0/3139302e35322e3131392e302f32342d3234203d3e20323632313832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:34:24:87:7b:f5:e5:f2:4e:f7:97:47:bd:fb:4c:14:c5:91:
         5b:4c:c9:bb:ed:3a:16:b5:1a:3b:38:b3:f4:1b:bf:31:be:f4:
         a9:93:7e:c3:69:74:36:69:c6:86:e2:02:e8:1e:69:33:5c:f2:
         6c:67:a3:64:2d:08:48:d5:20:22:e4:06:8c:0d:28:c4:e9:d9:
         8f:16:f2:fb:ea:c1:c6:da:71:d2:9c:7b:e4:2b:83:f0:a4:d8:
         74:13:18:e9:50:b9:dd:97:da:3d:63:b1:bb:e0:49:78:dd:ab:
         74:ad:26:34:08:8b:18:52:1f:61:1b:e4:11:ec:fe:96:b8:fd:
         15:14:3d:b2:ee:cd:6d:a7:d4:e1:ce:28:fb:f4:c4:d2:63:06:
         32:5b:83:20:49:19:ae:df:2c:b5:8a:37:8a:99:aa:f4:ff:3b:
         b4:ac:23:18:3a:c0:cf:4a:c5:17:6d:5c:25:24:41:9a:c2:e3:
         b2:f7:63:28:0e:c4:10:69:d2:09:53:a4:78:59:18:9d:9e:87:
         ec:54:75:8c:5a:fa:51:f0:ad:bd:88:37:b4:69:bd:8d:d6:b3:
         3d:d2:b7:2d:5c:b1:44:d4:34:09:75:07:fc:8e:b5:4c:82:58:
         16:11:cb:34:43:9d:7a:53:f5:d3:b3:5d:a9:49:b9:76:30:57:
         87:c4:bc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:22:44 2025 by rpki-client