Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa
File:                     3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa (raw, json)
Hash identifier:          L1b0gv13fWqN8b2Kjhfp1iK1Ps4olWSIyuaiZCk9SeI=
Subject key identifier:   BE:06:FC:5B:94:5E:70:03:1C:A1:55:33:38:D5:BF:E2:C9:46:E7:22
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       510CAA1F5E07903D37EE499A2876235680E99E9D
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:38 +0000
ROA not before:           Tue 04 Feb 2025 18:23:38 +0000
ROA not after:            Tue 03 Feb 2026 18:28:38 +0000
asID:                     52253
IP address blocks:        190.108.200.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0c:aa:1f:5e:07:90:3d:37:ee:49:9a:28:76:23:56:80:e9:9e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:38 2025 GMT
            Not After : Feb  3 18:28:38 2026 GMT
        Subject: CN=BE06FC5B945E70031CA1553338D5BFE2C946E722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:44:62:95:8d:e8:f0:87:57:8e:4d:df:42:
                    37:75:85:8c:4e:2a:ce:fb:2e:69:6f:65:37:6f:7b:
                    b1:09:82:4b:5c:d5:a9:0e:fb:76:50:67:a2:bd:cb:
                    34:48:0e:69:42:18:c2:f0:d4:0e:f4:d6:70:f6:7f:
                    59:7f:94:f5:eb:b2:18:aa:01:e6:91:ae:ec:77:4f:
                    2f:eb:b9:ee:cc:01:c8:8f:f8:68:a1:35:f4:d9:be:
                    23:61:d5:82:74:19:42:32:2c:1d:f1:d3:02:87:a9:
                    61:af:6b:b0:ac:e2:90:9f:4f:eb:b8:1f:1e:d1:ff:
                    3a:45:90:7b:df:0f:d8:28:35:ca:59:0a:e8:ea:f6:
                    64:93:69:1a:46:17:8a:4c:f2:9d:ed:8e:cc:94:01:
                    5b:77:c5:4c:98:2c:c2:7f:c0:29:57:6c:06:ae:ea:
                    88:c9:80:17:b0:ab:37:79:b0:01:67:e5:21:88:ed:
                    96:14:0d:58:0c:46:6e:25:b2:19:32:d6:7d:9f:2b:
                    40:4f:f3:76:6b:0c:c0:44:68:17:a5:84:fc:bd:00:
                    4f:4c:dd:29:fe:89:1e:f7:78:87:ca:47:43:bf:01:
                    18:ef:78:b7:67:33:7b:65:bf:58:24:a5:89:8b:cc:
                    81:9c:ec:76:8a:69:b4:cc:59:58:7c:77:03:fb:b0:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:FC:5B:94:5E:70:03:1C:A1:55:33:38:D5:BF:E2:C9:46:E7:22
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230302e302f32312d3231203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:90:32:21:ac:c5:e9:0e:82:c6:19:40:eb:47:cb:99:10:ef:
         ce:6e:12:9d:33:ae:fb:8e:08:4e:5e:9e:62:c5:20:a0:11:29:
         a7:59:4e:61:95:0f:1e:73:bd:67:18:0d:3c:d4:aa:51:4b:99:
         95:d3:da:f9:9c:35:1f:95:0d:79:c7:60:2a:44:5b:2d:8b:85:
         30:21:c9:80:0a:49:ec:5d:7e:47:fa:f3:2e:b9:e9:19:e2:73:
         ec:d5:b3:f1:8e:4d:0d:4f:ce:30:c2:ee:2b:ef:8d:25:bd:c4:
         a8:64:6e:94:56:ac:ad:ad:e8:b4:aa:90:56:ea:8c:a0:5e:d2:
         2b:b9:f3:47:f7:cb:fd:6a:2a:eb:5d:96:ab:0f:44:db:ae:bd:
         7b:5b:5d:30:4c:90:b4:29:d8:5a:f6:a5:83:db:ec:8b:e6:65:
         1b:75:f5:51:72:19:8d:61:1a:e9:0f:36:03:e5:bd:17:20:c9:
         02:26:9c:95:62:29:07:f1:89:74:4d:57:56:dd:55:21:a8:18:
         b0:ad:0f:2f:68:0a:24:2a:4c:61:24:38:0e:45:05:71:c8:4d:
         82:4c:4b:2c:66:42:9c:c3:8a:f2:fa:c7:b4:e4:a0:d9:58:c5:
         46:7d:49:22:fe:1f:0a:60:a7:d0:be:59:f9:70:2a:de:c5:93:
         fd:c0:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:52:51 2025 by rpki-client