Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa
File:                     3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          VNe0g6cU+b9nyHqoOAQScAmOKTT/1UGhJtn9xWPyCbw=
Subject key identifier:   B5:86:94:DE:F5:B4:67:03:0A:C9:92:8D:B9:87:57:85:D8:0C:91:E0
Certificate issuer:       /CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
Certificate serial:       61C13053FBD2A64D731562E1F659CA399350F727
Authority key identifier: D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:41:09 +0000
ROA not before:           Tue 04 Feb 2025 18:36:09 +0000
ROA not after:            Tue 03 Feb 2026 18:41:09 +0000
asID:                     262191
IP address blocks:        191.102.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:c1:30:53:fb:d2:a6:4d:73:15:62:e1:f6:59:ca:39:93:50:f7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3B81DF8275FF8695370D4498DDC3A40FEE98F99
        Validity
            Not Before: Feb  4 18:36:09 2025 GMT
            Not After : Feb  3 18:41:09 2026 GMT
        Subject: CN=B58694DEF5B467030AC9928DB9875785D80C91E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:f1:c6:c8:e0:9f:2f:6c:ad:6b:f5:9f:21:
                    ab:89:f8:02:f1:06:53:f1:6d:6e:f3:f9:0a:88:53:
                    31:ec:e0:b0:1c:fd:ab:e8:63:5d:84:e5:ac:5d:f7:
                    6d:b2:4c:86:1c:fb:e5:ed:6c:c8:ec:3b:b7:50:94:
                    f7:9c:00:31:17:68:18:4f:b7:0e:fc:db:f4:58:8e:
                    ad:8a:cf:97:32:54:7f:dc:96:cc:30:d8:fd:65:e3:
                    2a:65:94:95:d0:23:1a:ba:3e:61:80:71:f3:67:42:
                    bb:3c:68:cf:f2:67:4e:7f:1a:76:cd:c9:73:b1:cc:
                    30:8e:a9:fb:25:9a:0a:89:b3:16:49:51:6b:ca:09:
                    95:1a:02:25:d4:a7:69:a2:9d:f7:4a:3a:7e:36:42:
                    35:1e:4f:a3:7c:18:5d:c9:78:f5:ce:56:e7:b2:27:
                    8f:eb:88:a7:39:05:0b:66:e9:f5:89:e4:3f:4a:c5:
                    56:46:72:4f:4c:62:0d:f7:cb:6f:9d:ac:2b:cc:5a:
                    38:05:34:76:31:b6:0b:c7:6d:a3:07:2b:8f:c0:19:
                    4f:ec:01:73:34:75:f0:df:26:4a:8a:a2:4a:ce:cf:
                    28:88:a3:53:2f:4b:17:81:fb:02:be:1a:6a:69:61:
                    13:82:53:68:d6:b1:7c:4e:2b:e8:b4:6c:f2:bc:48:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:86:94:DE:F5:B4:67:03:0A:C9:92:8D:B9:87:57:85:D8:0C:91:E0
            X509v3 Authority Key Identifier:
                keyid:D3:B8:1D:F8:27:5F:F8:69:53:70:D4:49:8D:DC:3A:40:FE:E9:8F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3B81DF8275FF8695370D4498DDC3A40FEE98F99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74806F814385AAD96FAE92612923C07960461FF7C8DB441E53A0EAC453F5A450/0/3139312e3130322e36302e302f32342d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:8c:4e:78:cd:02:77:22:bd:c1:db:5b:c4:b1:ad:58:93:18:
         60:db:ba:c8:ee:2a:b4:a9:8b:3e:4c:2c:cf:46:79:f1:8a:45:
         48:09:47:07:41:e7:2a:ef:3a:1a:4e:80:4d:e4:df:f8:cd:30:
         c8:05:a1:02:f5:d7:0d:9b:18:a2:b3:f8:93:67:0b:72:b8:cb:
         16:e7:dc:10:4e:94:02:0d:17:0d:7c:fd:28:b5:62:8b:11:8b:
         42:0d:1a:84:df:91:a4:54:f0:23:2e:49:bd:fe:ae:30:c1:39:
         1f:d4:68:b7:3a:eb:8c:6b:fa:f8:52:aa:cb:b3:0c:2e:be:45:
         4d:96:d5:cb:62:76:57:b3:ae:a2:e8:4e:0d:c8:b2:e0:b7:89:
         cc:1e:48:b1:d7:f7:dc:22:9f:ab:cf:eb:9f:23:bb:46:2f:31:
         1f:d5:71:14:f4:ee:37:a0:5b:a3:35:b4:c4:3f:2b:d6:71:ff:
         17:d2:47:33:58:42:b6:d6:58:ec:cf:2a:94:bd:d2:79:15:fd:
         43:f6:b7:d7:1e:a5:69:8c:c1:41:0a:b7:ba:1b:8c:27:0c:65:
         cc:d5:8d:16:28:f2:cc:e1:5c:66:30:c4:44:59:49:cd:c7:dd:
         3b:9e:a9:b5:22:b4:e9:fd:01:d9:c2:aa:d7:14:22:e4:7d:7d:
         1a:2c:71:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:36 2025 by rpki-client