Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa
File:                     3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa (raw, json)
Hash identifier:          utKfbItlMxe6olWWK8DsXGD6XCKOJbHF+JuyR7131w0=
Subject key identifier:   A1:25:57:24:CF:8D:CA:F9:A1:F5:0D:91:98:A9:86:2E:35:43:97:B7
Certificate issuer:       /CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
Certificate serial:       59768326CF32705C2C72747010D41FB24F992C29
Authority key identifier: 86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa
Signing time:             Tue 04 Feb 2025 18:35:00 +0000
ROA not before:           Tue 04 Feb 2025 18:30:00 +0000
ROA not after:            Tue 03 Feb 2026 18:35:00 +0000
asID:                     271926
IP address blocks:        190.113.49.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:76:83:26:cf:32:70:5c:2c:72:74:70:10:d4:1f:b2:4f:99:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F
        Validity
            Not Before: Feb  4 18:30:00 2025 GMT
            Not After : Feb  3 18:35:00 2026 GMT
        Subject: CN=A1255724CF8DCAF9A1F50D9198A9862E354397B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:d1:fc:3b:b2:a4:c1:3f:14:2b:a9:66:1a:
                    fb:ff:14:1c:71:4f:80:73:ea:22:d5:b7:05:72:13:
                    1e:ac:40:55:c9:c7:70:8b:1b:84:e3:bd:c3:a6:39:
                    4f:b8:cd:aa:ea:1c:8d:88:0c:ae:da:86:18:54:19:
                    d2:1d:4c:6e:29:49:a6:9e:24:f7:d5:ac:bd:e9:72:
                    6c:99:19:51:72:81:0b:c1:5f:1e:fe:38:fb:90:60:
                    25:df:8d:85:c4:8d:35:2e:4b:68:d4:89:f1:9a:30:
                    57:81:b7:a3:00:8b:57:33:78:4c:c5:dc:3e:af:4d:
                    24:93:0f:87:97:56:fa:e0:7b:66:8e:73:ce:2c:d6:
                    a1:80:b7:fe:84:29:57:ee:ee:da:e0:c6:b2:2c:7c:
                    fc:d4:0e:16:73:d3:d8:c4:e9:aa:d2:82:a5:59:6b:
                    18:1f:e3:a8:26:bd:dc:0b:db:33:3d:70:69:f5:71:
                    7c:7b:c0:5d:43:66:a8:0d:58:29:47:f1:5b:a7:a9:
                    97:33:ae:52:0d:b8:74:2e:25:66:9e:a5:06:96:41:
                    b5:75:98:d2:79:e4:f9:a2:85:68:9a:67:b0:1f:f8:
                    5d:e6:c7:81:e6:89:b2:8e:48:f6:50:0a:73:3f:b5:
                    77:28:15:af:99:e1:dd:dd:90:e4:c9:93:58:05:e7:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:25:57:24:CF:8D:CA:F9:A1:F5:0D:91:98:A9:86:2E:35:43:97:B7
            X509v3 Authority Key Identifier:
                keyid:86:6B:7D:C5:BD:9E:9C:D5:9F:31:69:3C:32:7A:B7:E0:AE:DB:84:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/866B7DC5BD9E9CD59F31693C327AB7E0AEDB840F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7EDE29EBBCF33DD905D57173E4B0C83C5E37D65E0FE36F9A7463AFD31EFE4AF/0/3139302e3131332e34392e302f32342d3234203d3e20323731393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:ff:15:41:b5:79:5f:03:30:fb:a7:d4:ff:10:f3:2e:89:0a:
         a2:81:9b:29:f1:53:cb:c1:cc:d6:b8:51:8a:3b:2c:00:82:34:
         92:d9:17:3c:aa:50:42:e8:95:b9:c1:10:29:b0:cc:8f:28:c3:
         79:97:22:f4:45:f6:08:b2:a9:cf:fc:ba:43:3f:be:53:ca:62:
         ca:4b:ea:2a:70:89:e5:34:11:85:70:e3:bf:9c:c3:7f:67:95:
         ae:2a:bb:11:43:75:9a:af:e9:5a:0c:a3:5a:76:88:77:53:97:
         48:87:dd:d8:a0:ca:f0:7c:66:bb:6f:38:4a:79:7e:97:80:3d:
         c5:cb:8c:66:d7:b7:2e:44:0e:cf:a0:5d:52:7b:8b:d9:58:39:
         ff:7d:f7:c4:8b:2c:7e:18:1a:2a:f8:7c:1f:5b:8e:c2:69:5f:
         14:ca:10:6e:5e:59:31:c7:8a:f9:25:61:52:94:dc:e0:ed:6e:
         67:0b:3a:76:95:04:72:24:36:c3:bd:5f:89:10:df:6c:23:4b:
         5d:74:c7:fb:ee:25:eb:ff:1c:c9:a4:fe:23:4f:3b:32:24:2e:
         e7:80:a7:64:b1:30:8f:25:c8:34:13:c7:15:b5:4b:5f:07:a2:
         9f:43:a9:7a:c2:4f:ca:56:56:7b:1f:79:d2:64:9e:0d:4d:53:
         95:f9:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:46:39 2025 by rpki-client