Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3136302e302f31392d3234203d3e203130363137.roa
File:                     3230302e38312e3136302e302f31392d3234203d3e203130363137.roa (raw, json)
Hash identifier:          pbo/Z7naD57b7X3zy9tgKj316cryATU2KD9B6DbBGBU=
Subject key identifier:   E0:13:5D:E1:0C:E0:66:B9:CF:BD:28:2C:3B:29:D6:79:E0:8C:B3:B1
Certificate issuer:       /CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
Certificate serial:       1B12BB66AEC48145187228B58B31F369EAB78451
Authority key identifier: 16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3136302e302f31392d3234203d3e203130363137.roa
Signing time:             Tue 04 Feb 2025 18:48:44 +0000
ROA not before:           Tue 04 Feb 2025 18:43:44 +0000
ROA not after:            Tue 03 Feb 2026 18:48:44 +0000
asID:                     10617
IP address blocks:        200.81.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:12:bb:66:ae:c4:81:45:18:72:28:b5:8b:31:f3:69:ea:b7:84:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16D6DAFBF5511C53569330FFFD2E9E564974D14D
        Validity
            Not Before: Feb  4 18:43:44 2025 GMT
            Not After : Feb  3 18:48:44 2026 GMT
        Subject: CN=E0135DE10CE066B9CFBD282C3B29D679E08CB3B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:50:d5:33:ed:5c:48:5a:b8:a3:26:0b:aa:
                    bc:f0:9a:a4:12:5d:2e:29:07:73:e2:55:70:fb:43:
                    47:63:d1:1f:6f:4b:a5:b1:38:26:e4:b5:b2:26:85:
                    df:47:7b:6e:97:9e:62:ac:3a:d9:7f:81:05:e1:fa:
                    05:65:ab:c4:3e:2a:a9:fe:1c:ec:70:9a:c5:5c:eb:
                    fa:af:9d:fb:25:da:11:77:3b:11:20:21:9c:b3:d8:
                    7f:06:42:cd:6b:7e:79:c6:54:52:ae:23:07:80:b5:
                    0f:4c:47:11:80:cb:31:b5:a1:61:77:a9:5a:9d:b4:
                    9d:0c:57:79:c0:8a:2c:1e:aa:cf:6b:b9:b6:fd:83:
                    08:40:4b:36:c5:d0:54:ce:27:2d:60:da:c6:4e:c3:
                    41:8b:40:d0:f0:d1:8a:70:23:24:72:4c:07:f6:51:
                    94:42:f8:24:c9:e6:1d:39:ac:f0:50:21:af:b2:f6:
                    0b:fc:b8:6a:74:0e:19:18:2d:52:81:66:15:49:65:
                    21:a7:10:b4:19:6d:f1:a1:2a:be:12:6c:8a:7a:05:
                    3c:09:9e:d2:07:0b:10:80:d1:80:df:57:d3:a9:d3:
                    bf:6f:7d:ea:49:37:c7:d8:59:b9:90:6d:a6:a7:19:
                    58:81:9b:ef:08:70:0a:e1:81:26:28:08:46:fd:d8:
                    91:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:13:5D:E1:0C:E0:66:B9:CF:BD:28:2C:3B:29:D6:79:E0:8C:B3:B1
            X509v3 Authority Key Identifier:
                keyid:16:D6:DA:FB:F5:51:1C:53:56:93:30:FF:FD:2E:9E:56:49:74:D1:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/16D6DAFBF5511C53569330FFFD2E9E564974D14D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76A483C840B59D5A386CC35FE891774F07C940C2A473A0C808FF79E9D673AC01/0/3230302e38312e3136302e302f31392d3234203d3e203130363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.81.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5d:2f:04:5d:ba:62:0a:a4:44:5a:82:86:70:bd:b7:9d:8d:76:
         63:21:09:c0:f3:9f:bf:93:11:be:9f:22:ec:8d:00:64:ae:fa:
         92:eb:b3:04:6e:3d:59:56:3b:2b:0d:73:e3:0b:48:85:03:cf:
         ba:0a:8f:e8:ea:06:64:13:98:91:a8:12:2d:0c:3c:3e:a3:ad:
         d0:b2:84:df:7b:72:71:a6:af:1b:d3:10:ea:b6:8b:76:93:1f:
         42:61:51:82:22:b3:03:f0:95:c7:fe:b9:e3:ac:05:59:34:da:
         62:a1:f9:98:94:25:de:fc:a8:c2:1f:5c:f6:56:0b:d4:d3:78:
         a0:de:59:50:13:94:19:85:d3:0c:11:4c:72:2a:a5:30:ba:31:
         30:0f:d4:79:dd:cf:e0:a3:48:07:a6:68:da:fc:20:a7:0c:99:
         1f:46:9a:3a:23:3e:92:b2:9c:9e:09:71:18:b2:cd:b6:9e:a4:
         bd:66:e6:c1:6e:a6:c8:67:84:e5:67:8c:07:44:64:a6:13:cb:
         a6:01:b8:bd:a4:67:81:47:f5:b4:4b:b6:83:fd:62:76:a9:88:
         98:c8:68:00:2b:ca:f4:47:f0:e9:93:21:52:aa:2f:58:a3:00:
         2a:bd:c5:3e:f0:b8:27:67:e8:8b:a4:8d:52:62:09:78:c9:a6:
         8c:d7:10:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 18:48:30 2025 by rpki-client