Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
File:                     3139302e3234332e302e302f31362d3136203d3e203236363131.roa (raw, json)
Hash identifier:          UPLbQNfnStOyt4hQ5ZH9EB0PImyoKwDpcMXOjLAC/aU=
Subject key identifier:   F3:EC:37:E0:8D:70:43:54:07:B3:3E:63:7C:0C:FF:C3:A4:67:98:8A
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7ABA91A3B00BFE512DF699D223FF774549B2681E
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:16 +0000
ROA not before:           Tue 04 Feb 2025 18:00:16 +0000
ROA not after:            Tue 03 Feb 2026 18:05:16 +0000
asID:                     26611
IP address blocks:        190.243.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:91:a3:b0:0b:fe:51:2d:f6:99:d2:23:ff:77:45:49:b2:68:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:16 2025 GMT
            Not After : Feb  3 18:05:16 2026 GMT
        Subject: CN=F3EC37E08D70435407B33E637C0CFFC3A467988A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:fd:9b:c4:cd:06:51:fe:1f:b6:df:1f:b1:
                    bc:01:bf:a8:aa:e4:7b:9f:0a:0b:1c:34:31:12:f9:
                    15:7e:0e:0d:02:79:41:6b:69:f3:ad:fd:cc:aa:61:
                    f8:3f:22:26:1f:2a:04:0e:f1:89:ea:32:ec:23:83:
                    8f:5e:26:3e:00:60:fe:69:ee:5c:df:61:e3:8f:0a:
                    0c:31:0d:26:4c:01:9b:d4:82:09:04:4a:21:77:1d:
                    47:3e:a9:58:80:84:4e:cf:86:bf:e6:a3:ef:35:ca:
                    e7:32:84:f0:c8:b5:cd:a8:6c:de:99:af:71:9c:94:
                    50:30:d4:6a:e3:e0:11:a4:54:e7:fd:7d:27:97:45:
                    89:1d:79:9f:7f:8b:20:04:c7:52:a2:d7:eb:7a:a4:
                    49:3c:b4:36:9f:7b:06:50:c0:d7:ca:dd:ba:1e:bf:
                    64:80:db:ab:29:dc:3d:68:2f:e6:9a:f6:e9:e2:d9:
                    33:41:14:ab:1d:99:b3:36:fe:bd:01:4e:2b:b3:5e:
                    57:4e:6b:db:f6:67:e6:da:ff:d2:04:75:22:8d:24:
                    f4:d1:f6:62:86:1e:a5:b6:b8:0b:a1:19:20:6d:96:
                    94:71:e3:34:41:fe:35:ef:58:d1:67:13:a2:c4:74:
                    81:63:8b:c5:38:59:90:3d:6c:e3:87:32:72:92:26:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EC:37:E0:8D:70:43:54:07:B3:3E:63:7C:0C:FF:C3:A4:67:98:8A
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3136203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:00:a2:35:3b:ce:fb:04:5a:32:a3:59:d6:fc:09:49:88:
         1e:21:78:df:95:b4:c8:c1:12:52:e5:bc:71:8f:16:90:3c:86:
         8f:5d:63:77:83:39:12:fd:6a:ac:e8:d3:3b:ce:3b:8c:56:06:
         70:5c:a7:56:65:36:63:c5:98:ae:9d:57:e6:ba:35:9d:0e:82:
         7b:b5:fd:aa:2a:8c:a7:80:69:1c:1f:57:9a:74:84:9d:41:f9:
         7b:21:47:ca:12:4b:65:fa:43:db:13:d6:ac:6e:92:23:3a:e6:
         1c:4d:b0:76:32:6f:e8:56:7a:f9:b1:5b:94:ff:63:00:80:1f:
         3b:79:07:27:8b:87:4f:a2:de:7a:bd:c1:e9:8c:2e:7c:2d:e5:
         c3:48:a7:81:48:c9:18:d5:20:da:65:3b:7f:49:83:e8:8c:3e:
         9e:cb:f2:6e:e2:e2:32:64:10:41:12:8e:ab:28:f8:d9:a9:09:
         e1:62:b7:e7:90:b5:81:cb:45:db:0e:29:e2:39:7c:d9:8e:c1:
         e8:c3:8b:e0:41:e7:0c:f5:7b:e4:ff:ae:ec:af:f7:73:c6:84:
         04:2f:71:02:0d:2c:00:12:3a:75:99:57:c6:25:0c:27:07:25:
         2f:ae:e2:d7:b7:6b:dd:98:9c:6e:4f:68:6c:53:4a:4b:4b:47:
         8f:61:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:11:51 2025 by rpki-client