Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa
File:                     3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa (raw, json)
Hash identifier:          2dB0lgBucFLmt6M85YYI2L0h7NeRxF0PnDnr8EdetFU=
Subject key identifier:   91:70:DB:B1:8A:F1:88:4D:90:1A:EE:A6:75:AC:1D:FE:38:DF:1B:33
Certificate issuer:       /CN=F5FA228A2301CA3C33BD8830D58A40473348595F
Certificate serial:       4C6E16EBD9534F0CE754E45F4F96C75133B10587
Authority key identifier: F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa
Signing time:             Tue 04 Feb 2025 18:34:55 +0000
ROA not before:           Tue 04 Feb 2025 18:29:55 +0000
ROA not after:            Tue 03 Feb 2026 18:34:55 +0000
asID:                     28109
IP address blocks:        190.124.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6e:16:eb:d9:53:4f:0c:e7:54:e4:5f:4f:96:c7:51:33:b1:05:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5FA228A2301CA3C33BD8830D58A40473348595F
        Validity
            Not Before: Feb  4 18:29:55 2025 GMT
            Not After : Feb  3 18:34:55 2026 GMT
        Subject: CN=9170DBB18AF1884D901AEEA675AC1DFE38DF1B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:00:48:7d:0f:87:0c:c3:47:0d:13:48:b4:
                    e0:e7:88:0d:f0:d7:39:7f:08:4c:4c:fa:88:b1:fb:
                    58:0f:09:98:3d:6e:96:5a:16:da:21:2e:0b:08:79:
                    ab:4b:bc:ac:14:2c:43:78:0d:8d:44:11:43:60:70:
                    6d:47:a3:9c:be:2a:44:71:99:f4:13:c5:e4:57:70:
                    c8:b4:c2:5f:89:d4:73:b3:20:9b:ed:9d:67:99:e9:
                    91:01:08:b3:74:52:65:1f:27:68:32:77:be:bd:b2:
                    bd:d6:a4:85:42:95:82:f5:f1:a1:a9:cc:47:41:9f:
                    b5:b8:5c:cd:9e:ff:76:47:5c:bd:74:f5:bb:cc:3e:
                    3a:ce:eb:55:0b:de:ac:d6:a4:26:99:61:94:3c:8c:
                    da:3b:45:94:d8:29:6e:36:92:d8:a1:05:c0:de:74:
                    46:a8:8b:ed:48:35:f3:f1:23:f1:f8:d4:fa:16:59:
                    03:8f:63:eb:d0:bd:c3:27:f4:9b:86:ba:e3:12:4e:
                    24:53:1f:dc:a3:86:f7:7b:2f:00:08:74:63:0f:7c:
                    1c:4d:1e:0e:3d:30:37:f5:3a:66:09:70:ed:e7:1c:
                    9f:ff:b6:e2:f6:35:c1:b4:c0:2c:ba:81:7a:f4:c9:
                    ba:1a:72:3a:a9:56:82:c2:af:94:56:57:77:31:45:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:70:DB:B1:8A:F1:88:4D:90:1A:EE:A6:75:AC:1D:FE:38:DF:1B:33
            X509v3 Authority Key Identifier:
                keyid:F5:FA:22:8A:23:01:CA:3C:33:BD:88:30:D5:8A:40:47:33:48:59:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/F5FA228A2301CA3C33BD8830D58A40473348595F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5FA228A2301CA3C33BD8830D58A40473348595F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8E4E9BBD786655635251BE1AB2B30115F865C40EEDFF12459E0636ED80936CD/0/3139302e3132342e3139322e302f32302d3230203d3e203238313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:f3:f8:e9:31:b2:24:93:ed:2f:be:6e:2b:35:ca:f2:cb:1c:
         35:1e:1d:f2:84:0c:7b:fa:df:6e:f4:38:1c:27:7f:a4:f9:f8:
         39:f1:73:e1:6b:d7:e0:5a:d2:49:13:9d:c6:9c:18:6f:d8:0e:
         28:42:a1:f6:0d:dd:8d:b2:46:fe:0c:52:dd:d1:4c:8d:d4:e7:
         c2:00:2e:dd:7c:8e:50:30:f0:22:5b:88:4d:8b:93:af:f7:9f:
         aa:30:9c:f4:30:6a:91:d6:e6:b1:6a:8a:17:b7:8a:ed:b5:b1:
         74:ae:3f:32:c6:29:52:b4:b7:c2:69:d1:b3:9f:03:0c:78:ef:
         0d:b5:69:ed:48:34:49:3e:7c:1f:88:e6:73:33:7c:27:2a:eb:
         bc:af:db:5e:51:1b:2a:03:3c:87:8b:1b:a8:53:45:0d:0f:3b:
         ca:09:4b:75:fa:fa:e5:eb:93:06:a4:97:8a:e8:1c:c5:f6:b8:
         db:54:f4:6b:ff:6d:85:c6:41:1d:32:6e:61:d6:21:e8:56:c6:
         ff:93:32:ba:95:52:91:97:27:46:ce:85:03:46:2c:ae:b1:f6:
         a8:0e:9b:8b:5f:2c:27:b9:09:8c:25:64:8f:f9:82:47:35:f0:
         f1:b0:2d:94:06:17:2c:73:9a:69:e0:97:f5:f6:90:3c:6c:37:
         26:81:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:50 2025 by rpki-client