Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3231203d3e203236363131.roa
File:                     3139312e3135382e302e302f31352d3231203d3e203236363131.roa (raw, json)
Hash identifier:          uD6g9sPlBdJZyibi+Rxon/fp3grQSRHeCbqp8uzgtMU=
Subject key identifier:   62:46:89:7B:E6:4C:4D:92:C3:9A:77:67:09:6F:20:82:6C:E9:65:3B
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       19B61BB18DF062E90EB84E5CF579EAEC0268E425
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3231203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:20 +0000
ROA not before:           Tue 04 Feb 2025 18:00:20 +0000
ROA not after:            Tue 03 Feb 2026 18:05:20 +0000
asID:                     26611
IP address blocks:        191.158.0.0/15 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b6:1b:b1:8d:f0:62:e9:0e:b8:4e:5c:f5:79:ea:ec:02:68:e4:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:20 2025 GMT
            Not After : Feb  3 18:05:20 2026 GMT
        Subject: CN=6246897BE64C4D92C39A7767096F20826CE9653B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f8:24:84:e1:7b:fe:9d:ea:48:35:9c:be:ec:
                    b7:58:75:bf:2a:df:75:36:4f:27:72:5b:d0:45:da:
                    3e:54:f2:3f:50:70:cd:ba:90:be:3d:39:82:9e:bd:
                    d1:aa:31:bc:89:fd:4a:cc:71:ae:ef:cf:e6:92:21:
                    71:b2:50:93:92:05:02:2f:e3:d8:da:c6:d5:96:ce:
                    d3:29:79:12:2b:03:86:1a:cf:13:24:31:d3:ac:3e:
                    4b:fa:97:18:96:bb:8e:e0:b0:6f:1f:d6:8a:56:3f:
                    bf:48:d6:78:e3:10:0a:c7:ea:c7:95:8f:90:13:69:
                    1c:8c:f4:0e:8e:f2:a8:7b:8f:45:3c:1a:5f:76:5b:
                    5f:f5:d9:50:40:97:72:ef:5b:6f:ae:0c:37:bf:0a:
                    cc:8f:85:53:12:dc:e2:a7:49:f1:c1:76:a6:41:27:
                    b1:ae:63:98:02:35:f4:5c:19:f1:e7:21:a8:b5:d3:
                    d1:51:b9:cd:f5:ce:7c:f8:c4:82:99:44:6d:dc:40:
                    a2:13:54:b7:a6:90:d1:db:d1:1c:d0:65:67:42:3e:
                    75:44:e1:ba:6e:c7:9e:f5:4c:a4:a3:45:8d:b0:b0:
                    45:68:ca:aa:87:98:ea:f0:bc:90:30:ff:74:d0:2a:
                    d9:c7:02:a5:e3:aa:bb:b1:d5:bb:c5:94:8a:86:06:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:46:89:7B:E6:4C:4D:92:C3:9A:77:67:09:6F:20:82:6C:E9:65:3B
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3231203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:d7:b4:00:1e:02:e5:4b:76:89:ce:64:45:af:bd:46:1e:
         8a:5a:5f:25:52:ea:bd:49:58:af:b6:59:37:18:c2:d5:f7:0c:
         b2:1f:e5:a2:cb:b2:4c:02:1c:54:64:69:79:9a:4e:1a:fe:66:
         0f:30:d7:65:cb:89:ad:29:57:b5:55:ce:bb:19:6f:5a:4d:c0:
         22:cb:f9:05:c3:c4:fb:3a:3b:4f:a3:81:5f:d4:84:2c:d7:9c:
         15:4b:72:e4:11:b4:e9:bd:3b:ef:bb:2a:93:b5:96:d8:e8:cf:
         ef:0d:00:a4:79:3a:3d:90:0d:f0:69:ea:4c:13:2e:8f:9e:62:
         ad:d3:4b:94:7e:4b:22:19:bf:b9:d6:a9:78:25:02:58:c6:a0:
         08:4d:2e:76:15:4e:87:18:e2:4b:16:54:23:cc:28:7c:c6:95:
         3c:7f:37:8e:97:e2:60:8a:83:f7:b2:84:1b:cf:18:ca:2d:5e:
         6b:3b:14:19:a5:ac:a2:95:1a:de:a2:47:75:89:da:61:15:ba:
         05:ad:8e:19:1f:71:eb:ec:6f:8b:2e:f4:35:04:95:78:77:4e:
         57:8e:6f:ce:8d:1e:9c:51:03:f4:97:7c:23:ee:9d:7c:9c:97:
         6d:6c:88:9d:73:99:29:54:fe:08:aa:a7:16:d9:cf:78:3d:ab:
         42:ec:22:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:33 2025 by rpki-client