Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa
File:                     3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          UHsguyqInLQMC3kO/Pw1k/k3eQUnlx/9rfGpRng2tlA=
Subject key identifier:   73:84:4C:19:87:60:9C:2F:00:5B:1D:04:3E:AE:A4:64:64:7C:F3:85
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       31A3AF1AE3922B964B0B9669C1DE6368498D8299
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:02 +0000
ROA not before:           Tue 04 Feb 2025 18:00:02 +0000
ROA not after:            Tue 03 Feb 2026 18:05:02 +0000
asID:                     26611
IP address blocks:        191.156.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a3:af:1a:e3:92:2b:96:4b:0b:96:69:c1:de:63:68:49:8d:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:02 2025 GMT
            Not After : Feb  3 18:05:02 2026 GMT
        Subject: CN=73844C1987609C2F005B1D043EAEA464647CF385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7c:c5:ff:37:ae:0e:ac:49:15:d7:11:a9:06:
                    0f:db:bc:24:b3:fa:7a:b1:75:a2:15:26:ec:a7:cd:
                    75:d3:75:34:96:31:2f:30:9e:a6:0b:a4:ad:ac:bd:
                    99:3e:56:4d:9c:d0:50:f1:dd:cf:f7:8b:34:5a:a2:
                    ba:f4:c2:8c:08:16:7f:6f:cd:fe:7b:3f:7a:da:07:
                    3e:61:a9:88:11:14:b6:ad:21:28:eb:b6:60:2f:bb:
                    9d:29:6b:40:7d:2b:1a:84:06:ac:38:86:3a:4a:90:
                    75:db:1f:ea:6e:6c:c2:1f:f6:a8:36:aa:fa:45:28:
                    01:e5:d1:6a:f9:21:95:d9:4b:b6:f6:09:39:0e:86:
                    e3:92:60:28:23:71:f5:b6:4c:71:91:a9:46:28:23:
                    57:be:e5:ee:0b:46:54:e4:69:cc:04:a6:80:58:62:
                    5e:44:cb:aa:8c:4e:bf:73:16:56:c5:5a:4b:9b:b3:
                    f1:22:ad:99:cd:b1:eb:52:a7:71:08:5a:74:86:0c:
                    a1:90:4a:b6:4a:38:d2:17:f7:c1:da:bb:b5:e3:2b:
                    9d:a7:69:68:05:6c:3a:f9:84:d7:10:28:95:bd:15:
                    6d:6e:1c:d8:49:3e:0b:39:b8:70:60:cb:c3:f3:d7:
                    a8:1c:51:e8:f5:e9:da:6c:a3:22:d7:c8:b4:6c:c0:
                    32:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:4C:19:87:60:9C:2F:00:5B:1D:04:3E:AE:A4:64:64:7C:F3:85
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e3139322e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1a:ae:f1:5e:38:14:9a:fd:78:4d:f5:6d:1f:1e:56:ca:24:b9:
         de:cd:3d:0d:55:b0:f1:3a:85:b8:aa:61:a8:d8:e8:7c:e2:4c:
         af:64:42:6f:31:dd:af:93:a7:b4:65:78:4e:fe:fb:41:54:5a:
         cb:7b:6d:3f:54:e8:21:d2:a9:6c:13:31:ba:c2:30:c1:a9:8a:
         ee:34:59:ef:11:a6:b9:d7:d9:5d:2a:36:3f:3c:95:94:09:76:
         ba:e5:92:a2:d0:ca:5a:9f:91:26:05:54:8a:3e:59:30:2a:a0:
         59:fa:1a:47:e2:87:d8:35:7e:47:a7:66:e5:4b:f0:25:6f:6d:
         4b:1e:5a:21:e9:ee:31:c2:d9:40:6d:e3:da:3e:6e:c5:39:01:
         70:57:2f:fc:75:7b:82:4f:f9:6a:4f:a9:ae:ff:4f:90:d6:1e:
         1d:ec:2d:d6:af:1c:75:7d:9d:46:15:3e:0c:94:da:3d:e7:a2:
         c9:9b:1b:d4:d4:e2:16:64:9e:8a:d2:3f:45:bd:3f:f6:63:50:
         8c:0f:63:11:6e:a9:14:c1:b9:90:00:8f:27:06:0b:89:92:ab:
         c2:7d:f9:5c:62:99:e1:69:ba:cc:a0:96:a0:6b:bb:fd:bd:dc:
         c4:8b:52:8d:be:86:bf:03:e1:bf:33:d5:20:0c:6b:eb:c1:c2:
         f5:9f:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:59 2025 by rpki-client