Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
File:                     3139302e372e3136302e302f32302d3230203d3e203237393038.roa (raw, json)
Hash identifier:          RBfH2qwoDfbMUXE7gNz3K9WJNvswOMqQt7nmCq3uON8=
Subject key identifier:   B4:1C:8B:82:0C:06:51:F0:31:0F:99:89:19:A0:49:2B:1D:85:D1:63
Certificate issuer:       /CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
Certificate serial:       309E131DB3E08605FC361208B0721A1FD184B53A
Authority key identifier: 96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa
Signing time:             Tue 04 Feb 2025 18:07:14 +0000
ROA not before:           Tue 04 Feb 2025 18:02:14 +0000
ROA not after:            Tue 03 Feb 2026 18:07:14 +0000
asID:                     27908
IP address blocks:        190.7.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9e:13:1d:b3:e0:86:05:fc:36:12:08:b0:72:1a:1f:d1:84:b5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D
        Validity
            Not Before: Feb  4 18:02:14 2025 GMT
            Not After : Feb  3 18:07:14 2026 GMT
        Subject: CN=B41C8B820C0651F0310F998919A0492B1D85D163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:47:2f:cc:5d:a4:9b:66:ff:ef:c7:e7:68:fb:
                    c9:96:3f:f2:9d:75:50:16:65:61:d9:71:d0:62:d1:
                    e9:90:8f:84:73:15:37:af:bf:b1:55:18:e4:40:92:
                    3d:aa:3c:f4:58:59:dd:5d:78:08:78:c0:60:4b:f3:
                    8b:aa:1c:72:c3:6d:99:28:87:0e:b0:79:16:5d:67:
                    1e:67:26:01:c8:57:67:19:69:0d:37:f6:67:5d:bc:
                    30:35:03:2d:e7:69:68:b4:05:eb:29:2b:34:49:ca:
                    47:5b:47:0e:00:c6:10:0a:4c:9c:7e:8b:0e:f9:07:
                    15:9c:79:bf:0c:78:43:9d:0c:74:03:1f:3b:69:ba:
                    a4:a6:33:9c:7e:e5:39:28:7d:cb:b7:1a:24:30:03:
                    6b:52:a9:ff:21:01:af:d6:cf:7c:1c:a3:ee:d0:e6:
                    6f:0d:e6:d9:e4:e6:7f:3f:ee:44:ea:42:8a:a3:f5:
                    ac:5f:8e:81:f5:d5:15:23:79:09:e7:0b:93:b7:b5:
                    4b:70:a1:de:46:22:c9:bb:3b:0a:77:d6:24:dd:40:
                    a5:d6:e1:0d:b5:cb:ba:24:71:fb:ef:c7:3f:3a:b3:
                    8d:8b:e7:b0:ea:27:cb:90:fe:07:54:30:c5:33:bb:
                    86:70:e5:1f:a3:1c:bb:c8:11:44:db:3f:1b:63:b4:
                    f2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1C:8B:82:0C:06:51:F0:31:0F:99:89:19:A0:49:2B:1D:85:D1:63
            X509v3 Authority Key Identifier:
                keyid:96:5E:FA:19:AA:4B:DB:3B:6D:33:BA:E5:47:4D:F8:C1:3A:2E:EB:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/965EFA19AA4BDB3B6D33BAE5474DF8C13A2EEB6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2D9DF6B85777B9F53E81AFFD89661627E8DFFF81EEB8D64C76780EF1A0E42C9/0/3139302e372e3136302e302f32302d3230203d3e203237393038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:f3:a3:f1:56:82:17:57:fb:ab:a7:9d:39:15:d6:b2:6b:
         e5:1a:90:7b:78:cb:76:1c:c3:66:1e:c4:ec:72:59:9a:57:81:
         53:ed:20:3c:4d:28:1a:59:c6:63:b0:8f:c5:f6:02:36:de:eb:
         bc:d6:87:2e:84:e3:61:f4:eb:3e:a2:7d:bf:9f:ea:7b:0b:f1:
         12:f1:62:1b:05:ef:32:ff:6d:de:65:fd:91:43:5f:90:2d:9c:
         ab:6f:5e:2b:e9:96:6c:45:f9:89:1d:59:7b:6a:ed:98:29:df:
         c9:13:dc:ac:e8:2b:d1:8f:a2:22:c3:24:b8:e2:0f:b5:ce:93:
         85:7c:2c:e9:7e:77:8e:9e:28:92:31:d6:71:1a:2b:10:95:9c:
         50:a7:a7:68:8b:9a:06:4e:52:bb:bf:ca:f9:96:42:06:38:c2:
         13:6c:77:3d:3d:ef:0e:36:5b:e7:ab:d9:a8:24:00:5a:ff:43:
         0f:ba:cc:cd:36:0e:1f:4a:ed:d8:2c:02:39:2a:b0:7d:4e:16:
         4e:ea:35:4e:25:b2:c8:e2:d5:98:16:e1:85:5f:d2:a4:cc:5e:
         32:06:27:a6:ca:cc:14:b3:a9:4d:38:03:41:a9:0d:fb:ca:1e:
         21:67:00:53:02:48:77:b0:d7:d7:d4:5b:4c:b0:4f:95:cf:86:
         d2:6a:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:07 2025 by rpki-client