Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa
File:                     3139302e392e3139322e302f31382d3138203d3e203133343839.roa (raw, json)
Hash identifier:          oogoh/N9mCiQ+nAwzyVJh/ZHo3kpSEGunY1TNaUEQ7k=
Subject key identifier:   5E:F1:F8:BA:ED:82:AB:F3:1F:ED:17:7B:CF:62:51:20:DA:66:F2:2F
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       28DC6C5515349BE72C29B97119D53E573E081E0E
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:33:31 +0000
ROA not before:           Tue 04 Feb 2025 18:28:31 +0000
ROA not after:            Tue 03 Feb 2026 18:33:31 +0000
asID:                     13489
IP address blocks:        190.9.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:dc:6c:55:15:34:9b:e7:2c:29:b9:71:19:d5:3e:57:3e:08:1e:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:31 2025 GMT
            Not After : Feb  3 18:33:31 2026 GMT
        Subject: CN=5EF1F8BAED82ABF31FED177BCF625120DA66F22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:ca:ba:4d:61:67:a3:7e:68:62:12:af:42:
                    e4:80:15:e8:50:53:e4:01:a8:72:84:84:d3:47:d8:
                    e7:ed:e5:7d:38:13:7b:15:27:23:b5:98:15:20:55:
                    bf:ea:a6:ee:da:cb:79:be:f1:75:72:1e:66:9b:a4:
                    f7:91:e6:e0:84:df:2e:46:fa:f8:1b:e6:cf:14:29:
                    f2:ee:8c:a7:47:68:c6:89:5f:44:4f:23:05:18:a1:
                    33:ae:78:7b:0b:1b:15:b5:69:b6:9f:c9:4d:7e:26:
                    97:c5:cd:dc:c6:8c:a6:08:d6:40:fb:85:e7:67:23:
                    a0:06:35:bc:c8:eb:1f:9e:50:bc:9b:07:cc:e1:51:
                    1e:54:df:f3:76:ea:6d:92:f7:62:31:5b:e8:2e:7f:
                    27:b3:91:b3:ff:4c:8e:de:a0:e5:2a:32:25:cb:d9:
                    85:87:c6:d5:08:dc:2a:8f:97:99:61:cd:80:27:32:
                    06:ee:14:f0:74:43:48:2c:9c:e9:62:ce:3e:11:bb:
                    46:e5:e1:df:55:95:51:af:71:43:93:ff:88:0d:83:
                    86:27:cf:f3:33:fc:40:9c:66:6a:f6:15:a0:91:58:
                    49:95:de:6a:75:13:41:9f:7b:22:4b:5f:b2:7c:0f:
                    1c:9e:93:9e:75:1c:93:77:ed:a8:32:96:33:0d:bb:
                    04:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F1:F8:BA:ED:82:AB:F3:1F:ED:17:7B:CF:62:51:20:DA:66:F2:2F
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139302e392e3139322e302f31382d3138203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b0:2e:4d:e3:79:95:9f:fa:9c:60:2d:15:d8:c6:25:c8:fb:b1:
         aa:4e:d9:46:90:fa:57:e7:4e:14:08:9b:ee:69:1b:87:8e:43:
         1d:d7:76:00:aa:54:29:f4:43:19:f2:26:3f:ad:4f:dd:4c:6c:
         86:a7:ea:87:98:2e:8e:2d:6d:7d:b8:25:9c:38:f5:b8:c1:1b:
         4f:20:4f:5c:1a:9a:17:59:02:a9:ee:92:e2:70:4a:ff:67:9c:
         35:90:9c:6f:51:d6:b1:73:9a:48:8f:fe:f9:05:18:94:8a:ed:
         c0:2a:48:95:6c:b1:bf:ca:33:9f:4f:4f:61:c9:8c:bb:43:90:
         c0:08:8b:ca:4c:c6:52:ff:0f:26:3a:12:5d:b8:33:54:66:cb:
         e4:aa:f3:06:f0:27:d4:69:7a:e0:48:bd:c7:1d:e0:3b:e6:26:
         4d:67:c6:04:e5:53:be:e3:7a:18:cc:ef:de:0a:32:5d:49:bf:
         31:12:3e:a5:5e:c6:a0:e0:91:6b:96:24:3c:92:2f:d4:3a:58:
         11:c8:73:aa:eb:fc:44:b7:d2:95:6f:e9:5e:8b:5b:cf:c2:d0:
         1b:3a:43:8e:da:fe:66:6c:dc:49:ad:d0:ca:b0:ad:1a:fc:e7:
         48:f0:3f:ad:81:c7:31:2c:d3:3f:ef:7b:15:b3:84:42:33:06:
         3a:3a:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:49 2025 by rpki-client