Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203134303830.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203134303830.roa (raw, json)
Hash identifier:          ryxPArZdr+fNe2JiGrpKpuXv4xr9n8SWFYcRJlgJTjo=
Subject key identifier:   B7:21:00:4E:E4:97:A6:86:1D:4E:16:26:DD:A9:3E:21:F1:B8:0B:C2
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       1B60576A13578A67439DEBB9B1BE1430B7187116
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:05:10 +0000
ROA not before:           Tue 04 Feb 2025 18:00:10 +0000
ROA not after:            Tue 03 Feb 2026 18:05:10 +0000
asID:                     14080
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:60:57:6a:13:57:8a:67:43:9d:eb:b9:b1:be:14:30:b7:18:71:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:10 2025 GMT
            Not After : Feb  3 18:05:10 2026 GMT
        Subject: CN=B721004EE497A6861D4E1626DDA93E21F1B80BC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:20:db:b6:10:4a:3e:b5:27:3b:bd:9b:fe:0e:
                    23:bd:b1:73:06:8c:c3:95:52:87:b5:1b:bd:f8:c7:
                    97:4a:83:20:60:e7:95:23:89:b2:0e:d1:03:3e:de:
                    ba:cb:70:a7:d5:0c:44:06:b4:c4:2d:3a:85:4c:f1:
                    dd:a0:30:52:5d:ad:7e:7e:4d:4d:5e:41:c1:67:f9:
                    4d:2e:97:84:f9:7e:c1:9f:df:b9:55:9b:62:8c:cc:
                    cc:78:c4:b4:0c:6a:50:34:0d:70:38:ba:cd:e6:e2:
                    7d:b6:63:b4:ee:14:9a:58:22:57:7e:8c:fe:f0:88:
                    45:de:92:37:0a:90:12:4f:a9:45:c6:80:b9:aa:62:
                    09:93:c6:d3:58:ac:d0:f6:a4:4e:a3:81:ea:d1:35:
                    21:d3:01:7c:91:41:dd:54:d0:b2:ff:7d:fe:80:06:
                    ff:47:e7:57:7c:0e:1b:4c:4e:a4:72:63:b7:cf:f6:
                    e9:17:5f:69:f5:d9:5a:45:8d:01:a0:06:68:01:79:
                    74:0b:97:8a:7b:ac:fc:09:e8:9f:80:b4:98:05:02:
                    4a:91:80:2d:ea:8f:a9:a0:9a:f5:7b:a9:7f:8c:0b:
                    b6:7c:3b:bf:46:2c:94:6f:b3:92:d9:2d:68:0e:57:
                    eb:6f:50:09:b6:20:3c:68:65:16:4a:8d:1f:d0:41:
                    0b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:21:00:4E:E4:97:A6:86:1D:4E:16:26:DD:A9:3E:21:F1:B8:0B:C2
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         67:22:db:f6:13:43:5e:25:c4:7b:5a:a9:7b:f2:7e:06:9b:ad:
         98:ca:ec:91:77:8a:76:d9:0e:d9:c2:ad:5f:6e:eb:21:02:29:
         eb:b1:5e:e2:bb:ee:a6:e6:c3:06:47:e1:bb:c6:62:0e:62:fb:
         b2:e6:7a:e1:7b:fb:da:f2:21:1e:09:45:c8:c8:39:e9:d7:3a:
         85:2b:c9:9d:f2:00:cd:41:34:66:3d:c7:f4:28:90:0d:31:21:
         7e:05:de:cc:b8:12:f7:c2:6b:e9:38:59:0d:61:8a:20:dc:28:
         71:33:17:6c:39:60:39:5a:6d:7f:0a:35:5b:50:7d:1e:1f:a0:
         71:1c:0a:a8:73:40:14:9d:f4:d4:39:04:5a:b1:6a:a8:bb:34:
         9a:7d:30:49:16:f4:d9:d2:8f:39:68:01:56:83:39:22:6a:db:
         44:69:2c:9c:98:ed:38:d8:05:e9:35:6d:67:21:84:da:80:2e:
         55:b9:1f:88:06:c8:62:94:b7:f1:d4:bb:81:c2:7d:d9:a7:20:
         3a:00:d2:ed:d8:85:f4:69:61:f7:04:77:0e:9f:fe:bf:a8:34:
         63:c5:c0:c9:2e:58:59:a6:3d:63:11:34:b6:93:ee:29:f7:c6:
         3f:38:4c:c3:02:c7:79:90:07:47:25:a7:90:83:34:e6:67:dc:
         2b:0f:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:00 2025 by rpki-client