Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e3131322e302f32312d3231203d3e203237383737.roa
File:                     3139302e3132332e3131322e302f32312d3231203d3e203237383737.roa (raw, json)
Hash identifier:          kmQ7qvk/sHjYPBrFGH2mNWnphXtaAFA4K3dios+KwLE=
Subject key identifier:   DC:CD:18:16:D1:5A:78:BD:F1:80:88:60:F4:9E:E1:BF:C8:A6:46:0A
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       560FF01754994DBE50DFB40C5CDD858C3C770B8A
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e3131322e302f32312d3231203d3e203237383737.roa
Signing time:             Tue 04 Feb 2025 18:36:54 +0000
ROA not before:           Tue 04 Feb 2025 18:31:54 +0000
ROA not after:            Tue 03 Feb 2026 18:36:54 +0000
asID:                     27877
IP address blocks:        190.123.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0f:f0:17:54:99:4d:be:50:df:b4:0c:5c:dd:85:8c:3c:77:0b:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Feb  4 18:31:54 2025 GMT
            Not After : Feb  3 18:36:54 2026 GMT
        Subject: CN=DCCD1816D15A78BDF1808860F49EE1BFC8A6460A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:ee:62:13:98:d3:c7:ef:df:1f:a7:06:1a:
                    11:d5:1d:2c:16:a9:58:48:07:2a:ad:3e:8b:b8:d5:
                    78:07:b2:15:ab:9f:67:a4:3e:83:b2:c5:93:ab:2b:
                    33:24:4a:e1:93:ea:5f:f0:31:65:c1:63:49:65:28:
                    42:21:f3:77:aa:a0:76:56:89:e6:c3:d9:07:6d:b2:
                    8c:d5:64:4c:5d:49:bc:86:29:83:64:06:46:6f:3c:
                    6d:4c:11:6a:64:71:bf:f2:1d:b7:b2:54:d2:d4:17:
                    07:2d:64:88:07:31:84:c7:97:2a:e5:6c:6f:ef:ab:
                    91:8d:a8:1e:2b:fa:92:79:d0:d4:66:3d:40:fa:dc:
                    97:5e:03:9f:fc:cf:5b:14:45:06:3d:14:09:7e:b6:
                    e3:70:83:df:ff:e4:c7:d5:e3:2f:4a:65:bc:41:4f:
                    a6:fa:0d:cd:b5:0e:26:68:1a:5a:4a:b2:1d:1b:ff:
                    60:7f:09:c0:48:98:49:32:5b:b3:cc:8c:51:83:f7:
                    a1:8b:0d:69:46:37:3f:e1:24:b1:ac:66:96:7a:59:
                    16:bd:bc:a0:8b:04:79:58:2b:1d:93:d6:fa:8a:42:
                    89:75:18:95:5b:a5:02:ea:3a:f8:f7:11:2d:c4:bd:
                    88:d4:32:c4:33:c3:fe:3d:4b:5a:49:52:c2:81:22:
                    32:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CD:18:16:D1:5A:78:BD:F1:80:88:60:F4:9E:E1:BF:C8:A6:46:0A
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e3131322e302f32312d3231203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:19:5f:f3:ad:cc:7a:e6:14:7a:a6:91:c3:65:43:11:78:
         1b:90:5c:09:f6:db:cd:85:a4:0a:45:5e:39:62:75:5f:c5:d3:
         85:08:6b:d0:79:b2:c4:41:07:65:df:0d:de:30:fb:fa:84:59:
         b9:4f:38:3a:c8:3b:aa:c7:a1:f9:4c:e9:6e:ac:6c:cd:6e:77:
         42:17:2f:ac:7f:44:62:54:f8:18:08:6b:8f:f6:22:df:00:6d:
         7c:38:08:88:db:88:38:de:9b:7e:0b:fe:ec:f1:03:43:b8:98:
         43:2b:07:11:e0:df:92:22:27:2b:1e:e7:90:1f:f2:ee:25:24:
         4b:2f:af:f8:ee:cb:24:0f:6c:13:09:da:d3:1c:e6:db:2a:53:
         42:b6:ba:16:c0:7d:c0:7e:99:aa:11:88:c6:2a:7e:16:dd:13:
         b1:24:50:a5:5e:1c:16:2c:15:43:99:c1:53:c0:2b:c9:2b:6a:
         25:20:06:07:d1:b3:c6:77:99:1c:17:0b:cc:97:f0:5b:39:6d:
         f0:f7:70:d4:a6:44:e8:2a:f1:2a:43:af:e7:7c:5a:27:2d:97:
         1b:cc:0a:79:7b:ae:40:02:01:83:c5:95:dc:72:49:9e:7d:24:
         62:4b:43:04:b8:95:1b:76:f3:33:bd:13:d6:1b:b0:58:1a:02:
         18:69:e8:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:43 2025 by rpki-client