Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3231203d3e203236363131.roa
File:                     3139312e3135362e39362e302f32302d3231203d3e203236363131.roa (raw, json)
Hash identifier:          T3LEJVFDJajGgqPJ3AypZ5MA5yS4odk63eMmjM7cosY=
Subject key identifier:   70:18:7D:79:6B:14:1E:8B:E7:D7:5B:D6:E1:32:DE:EB:F1:42:62:27
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       279BCE3C97CAE866AC79A87D63D17B1502CB345F
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3231203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:01 +0000
ROA not before:           Tue 04 Feb 2025 18:00:01 +0000
ROA not after:            Tue 03 Feb 2026 18:05:01 +0000
asID:                     26611
IP address blocks:        191.156.96.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9b:ce:3c:97:ca:e8:66:ac:79:a8:7d:63:d1:7b:15:02:cb:34:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:01 2025 GMT
            Not After : Feb  3 18:05:01 2026 GMT
        Subject: CN=70187D796B141E8BE7D75BD6E132DEEBF1426227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:04:b1:e1:60:2f:29:f3:f1:c8:c7:48:31:44:
                    5a:1e:3d:f2:5c:9d:d6:cf:c6:2f:e1:10:df:bd:de:
                    a8:62:6e:03:ee:fd:91:54:fe:1d:a3:1d:6c:3a:45:
                    ff:fe:ee:aa:d9:ad:b1:c1:10:33:df:70:20:a9:75:
                    db:e3:69:7e:c8:97:ae:ed:df:38:e0:04:c7:0b:08:
                    d2:df:a1:65:58:fe:d1:bf:54:e2:29:a9:89:45:96:
                    2f:b2:1d:58:94:69:1a:7e:93:2e:fd:90:ca:64:c1:
                    33:50:b8:fd:7a:0a:23:07:7d:5f:97:7c:27:e6:36:
                    c3:6f:e9:d0:66:aa:5d:6d:0d:04:1f:12:81:90:24:
                    b1:85:2d:89:bc:10:e3:a8:8c:07:ad:99:eb:fe:57:
                    58:84:28:73:a4:b1:07:b3:82:56:99:73:0a:7c:79:
                    00:59:98:c3:41:dd:51:90:49:ab:c4:27:f3:69:e4:
                    3d:0c:96:43:4c:21:98:33:fa:f3:90:f3:e0:52:9e:
                    d9:28:0b:b3:89:84:66:de:64:6b:1a:0f:8e:23:6f:
                    a5:e8:ec:78:9f:1e:24:35:ee:b1:92:d9:d0:07:02:
                    12:b4:80:c3:da:d1:3b:49:ee:bd:64:a7:42:c0:85:
                    43:a5:7f:2d:30:37:84:05:cc:06:21:b9:38:06:c4:
                    d2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:18:7D:79:6B:14:1E:8B:E7:D7:5B:D6:E1:32:DE:EB:F1:42:62:27
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135362e39362e302f32302d3231203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.156.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:55:5c:d9:f7:e5:74:50:99:e6:a8:40:73:d6:f8:8a:17:52:
         d6:1e:cf:e5:fe:35:4c:e5:a2:a0:67:15:a2:e2:9d:e6:b7:cf:
         c0:d7:b7:af:8f:b2:3d:1b:af:e6:76:03:fc:8c:c1:88:ad:1b:
         1a:fc:be:ab:5c:90:5f:e7:79:b5:3d:22:0e:4f:90:e3:d5:f0:
         76:b6:51:31:bd:a2:f4:9f:16:c4:b2:85:22:5c:bc:87:ab:c4:
         73:d4:7c:6c:68:ef:1e:17:9f:f3:be:48:da:90:fa:30:33:f3:
         08:6a:9f:2e:32:f6:3b:d0:d1:b9:0d:cd:3b:81:bd:60:93:25:
         d8:54:40:15:0c:e5:c2:9d:e8:59:73:6b:fb:8f:66:bd:19:4b:
         20:e7:48:98:0c:bc:22:31:8f:a9:99:97:b6:ae:76:75:95:b9:
         c6:a2:de:f9:5e:c4:77:6f:4f:f1:52:65:60:ec:a7:c5:a3:4c:
         69:15:b9:86:2c:00:1d:fe:57:ce:07:58:c7:5f:f4:d2:9e:39:
         0a:ca:34:51:06:4a:c2:9e:36:3d:8b:a7:78:9d:96:b6:23:33:
         3b:5b:aa:b1:f6:2d:88:40:55:75:a6:dd:a2:95:e5:9e:02:42:
         47:37:e2:d2:6b:86:f9:95:20:3a:29:2c:71:4a:bf:f8:67:d5:
         06:ca:ed:03
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUJ5vOPJfK6Gaseah9Y9F7FQLLNF8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMDFaFw0yNjAyMDMxODA1MDFaMDMxMTAvBgNV
BAMTKDcwMTg3RDc5NkIxNDFFOEJFN0Q3NUJENkUxMzJERUVCRjE0MjYyMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BLHhYC8p8/HIx0gxRFoePfJc
ndbPxi/hEN+93qhibgPu/ZFU/h2jHWw6Rf/+7qrZrbHBEDPfcCCpddvjaX7Il67t
3zjgBMcLCNLfoWVY/tG/VOIpqYlFli+yHViUaRp+ky79kMpkwTNQuP16CiMHfV+X
fCfmNsNv6dBmql1tDQQfEoGQJLGFLYm8EOOojAetmev+V1iEKHOksQezglaZcwp8
eQBZmMNB3VGQSavEJ/Np5D0MlkNMIZgz+vOQ8+BSntkoC7OJhGbeZGsaD44jb6Xo
7HifHiQ17rGS2dAHAhK0gMPa0TtJ7r1kp0LAhUOlfy0wN4QFzAYhuTgGxNKZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUcBh9eWsUHovn11vW4TLe6/FCYicwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM2MmUzOTM2MmUz
MDJmMzIzMDJkMzIzMTIwM2QzZTIwMzIzNjM2MzEzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL+cYDAN
BgkqhkiG9w0BAQsFAAOCAQEAJlVc2ffldFCZ5qhAc9b4ihdS1h7P5f41TOWioGcV
ouKd5rfPwNe3r4+yPRuv5nYD/IzBiK0bGvy+q1yQX+d5tT0iDk+Q49XwdrZRMb2i
9J8WxLKFIly8h6vEc9R8bGjvHhef875I2pD6MDPzCGqfLjL2O9DRuQ3NO4G9YJMl
2FRAFQzlwp3oWXNr+49mvRlLIOdImAy8IjGPqZmXtq52dZW5xqLe+V7Ed29P8VJl
YOynxaNMaRW5hiwAHf5XzgdYx1/00p45Cso0UQZKwp42PYuneJ2WtiMzO1uqsfYt
iEBVdabdopXlngJCRzfi0muG+ZUgOikscUq/+GfVBsrtAw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:52 2025 by rpki-client