Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa
File:                     3139312e3135382e302e302f31352d3234203d3e203236363131.roa (raw, json)
Hash identifier:          Hpb0vMQiMa6Y5/+s06brDnm1iqOqRKE1ZqluWESFkwQ=
Subject key identifier:   06:49:53:18:47:D8:48:AD:80:76:80:BE:C7:9B:D6:F1:E5:62:7D:84
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       0B74135E729A964353CFA86871C4E6E86A5D56B0
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:17 +0000
ROA not before:           Tue 04 Feb 2025 18:00:17 +0000
ROA not after:            Tue 03 Feb 2026 18:05:17 +0000
asID:                     26611
IP address blocks:        191.158.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:13:5e:72:9a:96:43:53:cf:a8:68:71:c4:e6:e8:6a:5d:56:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:17 2025 GMT
            Not After : Feb  3 18:05:17 2026 GMT
        Subject: CN=0649531847D848AD807680BEC79BD6F1E5627D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:ab:bd:8d:f6:93:b8:3b:e6:c0:49:6e:b3:
                    13:02:ff:b0:a8:92:a6:d0:99:3a:c6:6b:64:cb:8a:
                    52:1c:ef:cd:15:08:10:7b:4e:5d:cc:c0:3e:88:c4:
                    31:55:ae:40:0a:49:0b:92:7d:c7:e7:4f:cb:c7:d8:
                    a8:01:8f:c5:7f:f7:ec:7b:22:5a:39:64:2d:6a:a1:
                    6f:99:e2:f6:4e:4b:2b:33:a1:00:00:05:3b:cc:c3:
                    86:58:36:a1:82:0f:8c:23:e2:e5:38:ca:cd:c7:73:
                    60:b1:a6:80:1c:1c:df:04:b9:4c:52:b2:78:64:02:
                    39:be:48:4b:31:37:e8:eb:e6:1a:44:f2:79:cb:95:
                    7e:d1:5b:bc:c1:f6:c4:14:dc:01:d6:9c:e3:ac:d9:
                    d2:88:89:c6:96:7a:4c:ea:7c:17:54:33:1b:42:6b:
                    36:7e:be:ca:28:44:be:9e:24:94:b2:d2:f5:63:86:
                    2a:98:7a:1a:94:b2:99:b0:5a:e4:a1:04:7c:23:46:
                    8e:71:09:de:34:89:89:49:21:2b:93:d7:b6:30:7f:
                    de:94:79:2e:cd:55:2e:cb:04:58:4b:bd:4a:15:4b:
                    58:41:4e:c2:ab:62:3f:f6:9b:06:97:f7:70:3e:4c:
                    12:b2:cb:2a:c7:97:c1:41:0e:70:2e:85:b0:f9:2e:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:53:18:47:D8:48:AD:80:76:80:BE:C7:9B:D6:F1:E5:62:7D:84
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b0:b7:4a:6b:8b:ef:2c:f6:0e:a1:89:e9:26:01:a0:3f:f7:43:
         82:92:2a:dc:ba:e7:92:db:9f:50:f2:09:e5:17:2c:85:1d:ed:
         3e:ae:c7:26:98:46:1a:16:79:12:55:dd:61:72:2c:47:60:70:
         1f:1e:44:f2:09:d0:29:4b:92:86:50:8c:fc:cf:3e:2d:1f:22:
         3d:fd:65:5d:59:0b:c3:03:8b:4d:a3:d2:ea:71:98:c4:7c:74:
         fd:62:96:bb:97:14:df:e7:47:59:39:20:04:07:c1:a3:b7:6b:
         69:51:aa:96:93:a9:65:9b:80:bc:b8:fe:63:15:dd:fc:ab:cd:
         d4:81:c6:74:89:ef:92:f2:5e:de:32:b4:3b:1f:cf:c4:63:4a:
         d4:4f:97:2c:fa:73:99:c5:b5:99:c8:7c:e2:26:67:20:c1:ac:
         f2:ef:8c:cb:c5:60:bf:7c:29:ab:23:4f:d3:d5:37:6d:68:06:
         f3:11:80:87:52:a9:e6:f5:bc:14:c9:3f:21:ad:28:8d:8b:7b:
         ef:c3:9c:67:52:9e:31:29:ed:31:50:59:52:2c:b2:82:5a:40:
         ca:fe:06:ac:0d:9a:2c:71:11:9d:2d:d7:d7:93:87:19:ef:a4:
         e0:b8:3e:f9:89:c1:68:14:92:4a:ba:eb:c4:35:13:61:0b:d3:
         79:b8:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:10:30 2025 by rpki-client