Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3137203d3e203236363131.roa
File:                     3139302e3132362e302e302f31362d3137203d3e203236363131.roa (raw, json)
Hash identifier:          NxuEObL12HQ+vpc05aUU+g/amaKTIg/M23KsiXB4FsM=
Subject key identifier:   C6:E6:62:34:2E:AA:49:58:B2:41:C7:7A:F0:EA:5E:7A:C4:13:36:B0
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       68BC57B5170F60C08993885B65D6355195DB09CA
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3137203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:15 +0000
ROA not before:           Tue 04 Feb 2025 18:00:15 +0000
ROA not after:            Tue 03 Feb 2026 18:05:15 +0000
asID:                     26611
IP address blocks:        190.126.0.0/16 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bc:57:b5:17:0f:60:c0:89:93:88:5b:65:d6:35:51:95:db:09:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:15 2025 GMT
            Not After : Feb  3 18:05:15 2026 GMT
        Subject: CN=C6E662342EAA4958B241C77AF0EA5E7AC41336B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bb:92:c7:f5:16:1c:f2:03:f2:f8:0b:03:18:
                    0d:db:78:c6:09:7f:d8:d1:8b:c7:19:99:27:9e:13:
                    76:33:18:05:59:27:c1:87:1f:e4:ec:11:a0:52:27:
                    8f:70:10:f3:2e:f3:22:2a:39:9b:1f:8c:5d:38:e6:
                    fd:ec:a3:44:57:64:5e:ff:da:b8:7e:81:36:65:c3:
                    c5:f0:a4:b7:21:8d:a7:0b:d4:f8:42:1f:d9:17:29:
                    92:36:f4:f4:5e:55:aa:e8:d3:44:d4:a9:8c:b1:99:
                    6a:20:59:0c:8a:d7:ee:67:74:78:7c:81:2c:b2:92:
                    9a:1b:2c:e5:51:40:9c:70:1d:76:69:a6:67:b0:41:
                    f6:b6:e6:15:44:ef:4b:46:96:a7:f1:c0:de:40:fd:
                    12:79:ac:73:d2:00:5d:4a:eb:b9:c3:da:4f:de:71:
                    ab:ed:ae:48:66:58:88:b9:d6:4b:e4:91:8e:64:de:
                    24:b4:58:c8:cc:8d:4a:d0:96:b4:8b:8b:3e:9b:d5:
                    85:e5:3c:b5:b1:47:d1:aa:b9:60:2c:00:1a:a4:78:
                    29:b1:fd:13:6c:06:cc:f8:c3:99:74:9a:76:71:cf:
                    d9:a4:c3:40:59:08:73:6f:5b:43:51:80:aa:1a:56:
                    68:62:02:d2:96:9b:78:2a:4a:c1:fe:2d:61:87:0e:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:E6:62:34:2E:AA:49:58:B2:41:C7:7A:F0:EA:5E:7A:C4:13:36:B0
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:28:3b:ff:12:22:0c:52:fb:0a:89:8e:91:62:6e:5b:49:ed:
         e2:06:3a:c3:f6:b9:e6:90:ed:6c:da:07:02:53:51:46:a8:a7:
         2e:f5:31:2d:6a:77:b3:56:fe:27:d8:36:c1:ff:20:62:74:51:
         c3:de:1a:9a:a6:2c:d9:19:ad:62:01:54:db:30:d2:fc:3d:c5:
         fb:d0:a2:18:aa:c3:67:d4:96:08:ce:55:9a:02:30:46:64:21:
         b0:dc:16:51:b7:ec:f5:08:2f:5d:af:82:2b:42:03:56:7e:04:
         49:ca:01:82:69:90:f5:9f:67:58:a8:8d:bb:e0:3d:26:86:50:
         74:2b:d6:b7:2a:8a:e5:45:3e:45:1a:9c:d4:5a:2f:64:37:8c:
         68:5b:31:a9:9f:58:eb:70:32:6d:3c:71:f6:21:23:5d:b5:c6:
         4d:00:61:b4:5f:64:91:bd:41:ca:90:5f:7f:70:6c:7e:24:0c:
         4b:38:29:45:04:48:06:93:d7:2f:33:1f:57:eb:ec:fb:58:67:
         a0:8d:78:d6:f7:8d:82:5d:94:43:d0:8e:a5:54:79:03:cf:20:
         53:27:cf:1b:7b:a6:16:7c:ee:48:3e:9c:5a:f2:02:f1:61:06:
         83:5b:5f:a8:d8:c0:4f:0c:5a:8e:fe:2f:1b:8f:6d:28:2e:1a:
         7f:9c:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:46 2025 by rpki-client