Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3230203d3e203237383737.roa
File:                     3139302e3132332e39362e302f32302d3230203d3e203237383737.roa (raw, json)
Hash identifier:          9I1eODHZvZjhtbBJ+jEyEBnwUAxq3VR3l/fMNHYjX58=
Subject key identifier:   71:D5:E6:E4:23:AD:91:76:79:34:4A:0A:06:82:6C:D2:4A:4C:12:CA
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       1AE275EA0772C8F9D53EDAEC4F4A879A14710F96
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3230203d3e203237383737.roa
Signing time:             Tue 04 Feb 2025 18:36:54 +0000
ROA not before:           Tue 04 Feb 2025 18:31:54 +0000
ROA not after:            Tue 03 Feb 2026 18:36:54 +0000
asID:                     27877
IP address blocks:        190.123.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e2:75:ea:07:72:c8:f9:d5:3e:da:ec:4f:4a:87:9a:14:71:0f:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Feb  4 18:31:54 2025 GMT
            Not After : Feb  3 18:36:54 2026 GMT
        Subject: CN=71D5E6E423AD917679344A0A06826CD24A4C12CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:15:11:4b:bb:40:ed:bf:16:be:1e:37:3a:76:
                    c3:33:76:a8:c9:6e:49:7a:cd:0a:b2:5a:ae:bd:a0:
                    63:e9:ac:1c:90:3c:0b:7d:09:b3:5d:c4:06:b9:5e:
                    3c:00:95:c5:8b:56:d7:e1:a0:7d:50:7f:57:4b:a6:
                    6e:52:a5:40:a9:62:79:a3:67:b4:2b:3e:b8:f7:ef:
                    35:2a:a4:9d:9f:b6:7f:4b:84:25:95:50:40:93:29:
                    56:bc:de:5a:ad:1a:49:06:c7:1c:1a:8f:0e:4b:5d:
                    83:7e:c2:51:4d:2c:3f:b8:bb:7b:cd:9c:42:e5:a8:
                    bb:21:0b:cf:cf:6d:74:43:36:3d:4a:59:25:13:dc:
                    aa:83:09:1d:8f:fc:78:6c:96:0b:e5:c7:62:c4:e9:
                    c0:a1:c9:12:49:0b:13:2d:53:b0:9a:3d:e6:5c:db:
                    86:eb:c9:97:f4:83:bd:d5:40:69:48:0a:89:71:98:
                    8d:88:79:b6:e7:7d:51:fa:4b:62:f8:4b:95:dd:b4:
                    45:00:f2:9e:52:9b:96:2a:4e:b3:d4:f3:46:52:ad:
                    71:91:30:87:7c:39:63:cc:2c:41:b4:42:0b:69:a7:
                    69:1f:2b:69:10:31:7e:25:dd:f3:a6:54:61:78:ce:
                    da:4e:07:ab:7d:10:9a:82:ba:25:b2:44:9f:22:ca:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D5:E6:E4:23:AD:91:76:79:34:4A:0A:06:82:6C:D2:4A:4C:12:CA
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/3139302e3132332e39362e302f32302d3230203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:65:8a:48:2d:e5:64:0c:dc:47:d4:b8:41:e2:af:2c:74:8f:
         ab:7d:c3:d9:c2:ae:f8:38:66:4b:d9:e3:dc:b4:6b:fa:2c:36:
         f9:69:77:51:17:73:9c:e0:ed:6e:ea:0a:0c:b5:dc:5f:3a:ad:
         19:fb:de:3b:a4:3e:f7:a5:e1:22:d8:0e:ce:99:f4:34:f0:04:
         02:a0:a4:7d:30:9a:31:1f:98:a0:cb:73:58:1d:7c:4e:79:a3:
         bc:28:e5:54:5c:2a:9c:a3:2a:f8:9e:a8:d1:54:71:35:22:2e:
         eb:2b:a9:5f:15:0c:8e:c6:6d:d2:30:f1:e0:98:17:88:2b:a6:
         67:dd:1f:a7:99:3a:80:39:6c:a0:07:f4:9a:96:dc:66:ed:d7:
         ff:8c:2c:9e:23:d5:f6:f6:b8:f8:e0:1a:aa:f6:c0:c7:c1:79:
         fe:44:49:3b:73:6c:eb:ec:b2:2d:79:6a:ec:cc:89:11:52:23:
         dc:eb:8e:31:37:c5:62:94:7f:f6:b2:b1:21:fb:f1:3d:e2:7f:
         3d:d2:df:83:ba:10:e2:81:0c:89:aa:06:5e:a0:80:3e:c8:ee:
         f9:64:44:b8:c2:9c:a7:66:c5:6d:3a:8c:43:de:06:8f:0a:d8:
         1a:ff:df:29:83:0d:c1:e2:94:86:2b:1b:e2:4d:1c:cc:dc:c0:
         6f:58:a0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:29 2025 by rpki-client