Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa
File:                     3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          TBjC+Jv2GVVyFKxi5/ghs/sxdbW7TqnrArtbgEf/B3s=
Subject key identifier:   CD:59:2E:CF:78:BC:28:47:58:FC:EF:29:36:A7:B4:CA:E9:D7:A1:52
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       4EE1708D6A116B309E52C4B7BD1BC1F17F937D70
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:10 +0000
ROA not before:           Tue 04 Feb 2025 18:00:10 +0000
ROA not after:            Tue 03 Feb 2026 18:05:10 +0000
asID:                     26611
IP address blocks:        190.127.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:e1:70:8d:6a:11:6b:30:9e:52:c4:b7:bd:1b:c1:f1:7f:93:7d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:10 2025 GMT
            Not After : Feb  3 18:05:10 2026 GMT
        Subject: CN=CD592ECF78BC284758FCEF2936A7B4CAE9D7A152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7f:ca:90:e5:83:6f:0c:75:85:d8:6c:94:13:
                    7b:d7:ad:4a:28:06:8c:f4:ef:29:5e:0b:b4:98:ec:
                    23:6c:d0:91:bd:53:8d:1e:c8:30:ed:c4:9c:cf:99:
                    88:c3:76:39:4a:7f:a2:23:da:c5:8b:5a:68:d3:78:
                    21:64:24:15:61:19:84:fa:91:eb:74:72:ba:8e:c0:
                    8a:93:3d:4a:e4:4f:d8:d9:2d:29:1e:7e:17:5b:fd:
                    3c:df:54:b4:cd:0b:e8:bc:da:ef:f7:a7:a7:69:89:
                    2d:ce:06:8a:f2:6c:87:ff:ef:fd:96:55:97:f4:ab:
                    f2:ca:1e:8c:61:63:d7:3d:5e:01:37:ed:71:9c:c8:
                    5d:55:19:f7:27:3a:93:0b:44:14:ef:e3:dd:f5:ac:
                    76:f1:0c:06:52:8b:5d:d8:a5:37:ca:5d:fa:d5:85:
                    d9:8b:04:3c:cd:87:8e:b2:5e:9a:ea:8d:4b:29:1e:
                    5e:15:7b:c3:b2:ad:ef:dd:8d:8e:b9:43:ab:15:d0:
                    47:24:73:cc:a7:fc:49:5e:09:29:8d:59:d4:da:e4:
                    be:76:08:b9:75:e1:65:2f:34:fa:e6:09:0f:27:df:
                    bd:4c:19:bd:c6:9a:f7:67:04:f7:12:32:2b:12:32:
                    71:ff:fd:83:c1:04:1a:3b:fb:1a:9f:83:ea:03:aa:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:59:2E:CF:78:BC:28:47:58:FC:EF:29:36:A7:B4:CA:E9:D7:A1:52
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3234312e302f32342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:cd:d6:0a:47:51:67:39:7d:cb:e5:f9:dd:6d:3a:ad:e5:
         07:d5:3b:7c:e7:5e:6d:cb:87:d1:f0:2a:11:9c:4c:08:14:f7:
         b7:84:25:00:5b:a0:76:c4:37:18:d9:74:1f:07:b7:98:82:f1:
         8b:fc:dd:75:72:a8:32:1e:11:01:0a:80:43:c9:e6:6e:91:5b:
         b5:8e:61:47:a6:47:95:c0:c0:e3:c6:8f:f3:e4:04:98:42:4a:
         b8:f7:86:6a:4b:0c:40:20:27:bd:01:eb:29:62:25:2c:6e:27:
         fa:2f:5d:d4:2f:6b:c9:99:79:e2:9c:3d:20:d6:90:fb:40:be:
         76:29:88:42:84:49:83:b4:00:93:99:eb:76:48:48:a3:8c:17:
         cb:32:23:c3:64:85:34:42:46:54:5a:51:3b:21:06:59:80:e1:
         5a:69:ab:21:b3:2e:85:ef:f0:4d:d2:c2:47:f2:43:30:b8:45:
         83:96:03:a0:e3:9d:a2:1e:a4:43:e0:d7:06:50:60:55:af:36:
         a0:70:db:5c:10:49:b5:9b:6e:2a:a0:44:0c:16:a5:f3:7d:e4:
         ee:2f:07:d1:3c:03:c6:6f:21:4b:96:e0:8c:75:9d:a0:da:1c:
         2a:c1:53:9d:02:eb:5b:c7:f4:00:d6:f9:8b:36:95:d3:9c:1e:
         70:17:bf:72
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUTuFwjWoRazCeUsS3vRvB8X+TfXAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMTBaFw0yNjAyMDMxODA1MTBaMDMxMTAvBgNV
BAMTKENENTkyRUNGNzhCQzI4NDc1OEZDRUYyOTM2QTdCNENBRTlEN0ExNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXf8qQ5YNvDHWF2GyUE3vXrUoo
Boz07yleC7SY7CNs0JG9U40eyDDtxJzPmYjDdjlKf6Ij2sWLWmjTeCFkJBVhGYT6
ket0crqOwIqTPUrkT9jZLSkefhdb/TzfVLTNC+i82u/3p6dpiS3OBorybIf/7/2W
VZf0q/LKHoxhY9c9XgE37XGcyF1VGfcnOpMLRBTv4931rHbxDAZSi13YpTfKXfrV
hdmLBDzNh46yXprqjUspHl4Ve8Oyre/djY65Q6sV0Eckc8yn/EleCSmNWdTa5L52
CLl14WUvNPrmCQ8n371MGb3GmvdnBPcSMisSMnH//YPBBBo7+xqfg+oDqlBlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUzVkuz3i8KEdY/O8pNqe0yunXoVIwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM3MmUzMjM0MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvn/x
MA0GCSqGSIb3DQEBCwUAA4IBAQA5zs3WCkdRZzl9y+X53W06reUH1Tt8515ty4fR
8CoRnEwIFPe3hCUAW6B2xDcY2XQfB7eYgvGL/N11cqgyHhEBCoBDyeZukVu1jmFH
pkeVwMDjxo/z5ASYQkq494ZqSwxAICe9AespYiUsbif6L13UL2vJmXninD0g1pD7
QL52KYhChEmDtACTmet2SEijjBfLMiPDZIU0QkZUWlE7IQZZgOFaaashsy6F7/BN
0sJH8kMwuEWDlgOg452iHqRD4NcGUGBVrzagcNtcEEm1m24qoEQMFqXzfeTuLwfR
PAPGbyFLluCMdZ2g2hwqwVOdAutbx/QA1vmLNpXTnB5wF79y
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:48 2025 by rpki-client