Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa
File:                     3139302e3135332e302e302f31372d3234203d3e203131353632.roa (raw, json)
Hash identifier:          u37X5QG0ODPbQRJftBWJa5fYxnjkZpruHk2sRkFfwgM=
Subject key identifier:   B8:F6:BB:F9:85:F2:F6:BC:0C:09:A7:85:D5:E2:0E:5E:EE:3D:02:3F
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       607AD0A7C699AF44D2F96691226E1C18960D1545
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa
Signing time:             Tue 04 Feb 2025 18:00:51 +0000
ROA not before:           Tue 04 Feb 2025 17:55:51 +0000
ROA not after:            Tue 03 Feb 2026 18:00:51 +0000
asID:                     11562
IP address blocks:        190.153.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:7a:d0:a7:c6:99:af:44:d2:f9:66:91:22:6e:1c:18:96:0d:15:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Feb  4 17:55:51 2025 GMT
            Not After : Feb  3 18:00:51 2026 GMT
        Subject: CN=B8F6BBF985F2F6BC0C09A785D5E20E5EEE3D023F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:4c:a0:09:b2:92:d7:a5:dd:e3:6c:57:46:
                    43:ed:21:f0:1c:7b:58:0c:1c:0c:c6:62:24:fb:3d:
                    e3:2b:d7:e6:47:4e:ec:cc:cc:9a:f9:d5:9e:6d:a5:
                    a0:6b:17:03:31:f9:f0:2d:49:08:03:e4:2c:2d:96:
                    d1:00:93:ab:10:35:fd:07:22:4f:0c:0e:1e:63:cc:
                    36:cc:46:8f:1b:7e:bf:f4:5b:a1:4f:fb:f4:91:e1:
                    48:b9:72:ae:6d:b1:07:3b:62:de:46:5a:c4:18:f6:
                    2a:a4:fe:2c:ed:8e:9b:47:38:5e:66:68:f4:bd:c0:
                    94:4e:db:70:c4:36:9e:91:4b:47:db:53:80:1b:4d:
                    b4:6d:bc:f9:cb:e6:88:e9:64:50:d9:48:2d:6f:a6:
                    e5:ee:90:eb:b0:94:41:a0:fb:f5:1e:d5:50:84:1a:
                    6f:a5:5f:f0:5d:99:f4:7d:cc:01:4f:b2:23:e9:86:
                    c0:25:16:6d:87:e6:1c:45:62:13:ee:f2:7f:63:84:
                    ff:f8:24:a9:de:69:40:c3:f7:cb:37:2b:90:0c:e0:
                    0c:08:3a:7a:d1:98:5c:74:99:4e:2a:bd:c9:e0:0d:
                    db:5a:30:ee:d9:58:dc:ed:2a:1e:73:3a:3b:4b:f7:
                    a3:0f:ed:f0:d0:38:93:9b:f8:d0:f9:c8:ad:ec:80:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F6:BB:F9:85:F2:F6:BC:0C:09:A7:85:D5:E2:0E:5E:EE:3D:02:3F
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3139302e3135332e302e302f31372d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.153.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         bc:0d:7c:97:c3:e9:c5:07:91:18:86:e2:ae:14:51:3a:a6:4e:
         52:d3:71:aa:5c:d4:5d:bb:1c:75:10:31:b1:9e:90:c9:89:a2:
         95:cc:8f:d7:ad:9c:07:a0:71:4b:42:c7:e0:ce:9d:27:fb:85:
         35:11:2f:b9:53:c8:cb:40:db:de:7b:ad:d6:67:2d:ad:d1:07:
         90:f2:6e:23:9e:41:88:db:11:1f:d7:bc:cb:ed:d0:cc:52:ea:
         cb:b3:68:cb:de:78:4e:a4:ce:00:0d:28:ab:70:1e:d8:89:e9:
         25:ec:b4:a6:74:44:69:53:d3:f8:9a:05:48:3a:f4:c2:1f:ce:
         e4:34:4a:8a:00:50:93:2b:8f:e7:cc:e6:be:9b:2f:0d:c0:53:
         7e:26:4d:2e:4a:f3:80:8f:37:37:85:07:88:6d:3c:ca:3a:16:
         e9:c7:13:b7:f6:bb:bb:6c:b2:c9:9c:00:3c:cc:c5:e1:f6:f2:
         1e:a6:f2:8e:d5:27:e0:32:3e:96:79:fa:0e:22:de:15:d7:4a:
         4f:c9:d0:e1:91:ea:d9:45:5a:45:3d:5a:5a:99:c6:6a:db:91:
         b3:e1:91:4a:70:04:d0:9b:0e:f6:3a:1e:c1:ae:55:b7:50:3a:
         13:54:ea:85:f8:ec:f3:81:b2:2f:cc:51:83:32:77:86:fa:7f:
         d4:21:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:44 2025 by rpki-client