Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa
File:                     3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa (raw, json)
Hash identifier:          NFV97uMmFNSO7XJiyrzln8qWh6LUuUPJ8UMiK1Gv9Rc=
Subject key identifier:   21:08:18:1D:1C:8A:4C:6F:3D:8E:F3:80:0E:AA:AD:63:F7:D1:67:D5
Certificate issuer:       /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Certificate serial:       6E89B53A9AF89347364CE2A72700D1C2E30EDF26
Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa
Signing time:             Tue 04 Feb 2025 18:20:23 +0000
ROA not before:           Tue 04 Feb 2025 18:15:23 +0000
ROA not after:            Tue 03 Feb 2026 18:20:23 +0000
asID:                     262181
IP address blocks:        190.185.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:89:b5:3a:9a:f8:93:47:36:4c:e2:a7:27:00:d1:c2:e3:0e:df:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
        Validity
            Not Before: Feb  4 18:15:23 2025 GMT
            Not After : Feb  3 18:20:23 2026 GMT
        Subject: CN=2108181D1C8A4C6F3D8EF3800EAAAD63F7D167D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:2e:30:f9:2f:d4:fd:52:01:e5:4f:08:fd:
                    fd:c5:4b:d7:49:5f:81:19:0f:70:cb:28:cf:15:6a:
                    bd:b8:77:d0:28:a5:a2:70:ee:d7:c7:29:78:d0:af:
                    07:cf:1e:0d:c7:d7:00:e6:94:de:fc:e0:a3:8e:85:
                    ab:c7:cb:0d:e5:f3:cf:44:ba:d1:32:24:62:9f:61:
                    5e:f2:5a:dc:c7:6e:78:00:94:05:19:7d:85:32:2f:
                    6d:02:c2:e5:7a:b3:63:a3:89:dc:e4:41:98:1e:f9:
                    db:7f:b9:b1:fe:88:95:53:38:70:ee:d7:de:b9:34:
                    5b:f2:62:46:c4:b0:be:b4:6a:76:5b:c6:7f:95:41:
                    a9:6b:72:d6:6f:ab:cc:3b:02:68:89:fb:7b:01:25:
                    db:b4:21:ff:5c:7e:1f:e7:ac:04:bf:fb:53:38:6c:
                    14:40:6b:c6:40:5a:f4:55:52:81:66:fe:53:ea:6c:
                    78:d6:8e:57:e4:af:06:17:6f:93:94:a6:88:13:74:
                    04:71:ab:a8:a1:da:70:95:5d:21:6d:de:b5:95:6c:
                    a3:f8:84:0d:02:06:31:f8:1e:e1:06:4b:73:c9:98:
                    4a:28:8f:b4:cc:14:d8:00:9f:9a:17:e2:46:c4:94:
                    d5:f2:14:1f:9a:55:70:c5:a2:45:27:47:f1:6d:13:
                    b4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:08:18:1D:1C:8A:4C:6F:3D:8E:F3:80:0E:AA:AD:63:F7:D1:67:D5
            X509v3 Authority Key Identifier:
                keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:1b:3a:39:de:2d:ff:aa:d0:95:23:4b:fe:ad:c3:d8:6f:
         89:c1:59:62:40:ab:63:d7:69:bb:bd:5e:26:9f:db:3d:04:1b:
         b5:41:36:a6:45:a7:56:a5:e6:a0:a0:1f:82:ae:73:cc:fd:a1:
         75:6e:03:4c:50:d4:de:3d:75:70:11:69:19:3d:1d:8a:aa:d1:
         b9:f1:85:68:ed:17:ea:59:5e:9f:8b:4a:8a:19:f6:4e:40:61:
         77:e1:a5:61:0f:73:a2:69:71:a7:b8:d0:50:e6:e1:f0:a2:4d:
         82:e8:f0:36:2b:a5:c0:a0:e7:be:c7:22:88:00:ed:a3:b3:ff:
         4f:5b:3c:e7:e9:8c:be:1d:40:fa:0b:ff:4e:10:b1:21:0c:ea:
         5b:a4:92:c2:56:65:51:f5:7d:3d:cf:d8:19:47:33:35:8d:72:
         d4:b3:3f:8c:e9:06:cd:ed:6c:2a:c0:df:6a:b4:a3:8b:e0:43:
         4d:8d:c0:a2:95:e7:dd:ad:55:65:fc:25:51:fa:01:6b:14:4e:
         56:12:b3:9d:96:07:ab:90:ea:49:53:29:c4:df:d9:20:d5:90:
         59:74:be:69:44:af:29:ac:36:60:2b:6f:9f:6d:e3:14:b0:83:
         06:51:70:65:04:38:7a:2c:dc:6c:36:a2:47:99:2d:fb:e0:cb:
         1b:69:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:29 2025 by rpki-client