Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa
File:                     3139312e39382e302e302f31372d3137203d3e203133343839.roa (raw, json)
Hash identifier:          0A/qLPWhjv2OqzXU9IJ7WYt8vVMYee1wvpvhQYe08FU=
Subject key identifier:   70:F1:5B:C0:C8:DC:FA:C3:99:B4:3B:AC:86:41:74:4B:BB:4A:0F:A6
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       6E5D1FD337C068F7E80FAE7FF21D1271CA536C97
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa
Signing time:             Tue 04 Feb 2025 18:33:32 +0000
ROA not before:           Tue 04 Feb 2025 18:28:32 +0000
ROA not after:            Tue 03 Feb 2026 18:33:32 +0000
asID:                     13489
IP address blocks:        191.98.0.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5d:1f:d3:37:c0:68:f7:e8:0f:ae:7f:f2:1d:12:71:ca:53:6c:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Feb  4 18:28:32 2025 GMT
            Not After : Feb  3 18:33:32 2026 GMT
        Subject: CN=70F15BC0C8DCFAC399B43BAC8641744BBB4A0FA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:5b:9a:e3:ed:f3:9c:17:93:e4:8d:f0:e5:
                    78:50:74:d3:eb:e3:ca:98:91:6a:87:1e:f6:b6:22:
                    c4:d5:93:03:67:f1:75:a1:a6:54:60:f4:f1:01:0f:
                    25:37:4e:bd:30:f5:c2:91:07:22:68:b3:d9:48:18:
                    91:32:7c:68:ed:04:71:ae:4b:9d:ae:06:42:38:61:
                    3c:e7:a4:c5:f8:2f:03:83:29:12:55:5c:6c:90:41:
                    d9:a4:f8:b6:c5:ce:09:b9:d8:b9:74:f0:c4:f6:64:
                    37:e6:1f:f0:89:4f:83:c9:be:2a:45:fa:62:45:cb:
                    37:be:fe:ff:b7:53:cf:a7:02:b4:66:91:f8:ba:f1:
                    5d:a0:73:18:fa:a2:e1:e0:fa:e4:25:48:cf:4a:38:
                    d7:61:1c:5e:0a:cd:2d:76:88:0a:74:9a:cf:23:21:
                    11:9c:d1:1e:52:0c:c3:01:47:d0:b8:1c:eb:37:cc:
                    fe:4e:84:17:af:9a:72:85:b1:09:db:72:2f:e1:ea:
                    61:95:7a:4e:5e:0a:4f:c4:ef:27:2e:c1:a0:ec:55:
                    64:4c:ad:30:84:88:79:b7:51:a8:63:58:17:c7:c7:
                    99:dc:29:dd:34:6f:7b:43:d8:d9:da:62:e8:3a:10:
                    c1:98:af:6d:c9:8a:4c:66:21:5c:32:53:6c:22:fd:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F1:5B:C0:C8:DC:FA:C3:99:B4:3B:AC:86:41:74:4B:BB:4A:0F:A6
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/3139312e39382e302e302f31372d3137203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:c8:4f:39:c1:12:f9:e9:99:8d:dc:69:74:b2:7d:26:c7:1d:
         34:c9:00:8e:26:46:88:7b:bc:d2:56:b9:d0:1a:83:d7:97:f3:
         26:04:9d:53:d9:6d:36:66:91:7e:0b:1f:8e:de:7c:f2:90:91:
         97:a0:60:85:e5:f9:3d:ba:32:e1:f7:af:18:ba:2a:18:06:5a:
         0f:f1:09:17:f3:43:1e:80:ff:3b:76:4c:e2:bf:74:e7:72:4d:
         44:b5:b6:0a:78:a3:b9:59:14:86:e3:58:4b:bc:85:60:d0:b7:
         f8:ba:1a:8a:40:bb:4a:81:4c:5b:a1:d4:32:95:03:b5:c3:4f:
         e3:c4:42:08:69:45:fe:da:ae:1b:f3:d5:3b:36:2f:6f:ae:51:
         56:ee:15:31:9a:f4:6b:c2:dd:65:b2:dc:61:ee:01:f9:4a:da:
         5f:5e:9e:3c:83:04:29:f0:45:9d:4b:1a:fc:09:22:42:53:2f:
         19:37:ec:da:4f:42:93:0f:91:61:a9:48:30:6c:65:9b:3d:2f:
         02:bf:e7:2c:14:b0:35:c2:df:e6:0d:50:b7:0c:4d:6f:75:0f:
         aa:29:b0:3a:eb:5d:33:68:01:7b:1b:dd:fe:5d:8d:f7:49:d1:
         81:2e:d8:71:d5:67:7f:ba:89:3f:8b:1f:cb:ab:30:9b:04:48:
         ea:d9:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client