Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139313830.roa
File:                     3139302e3138372e302e302f31362d3234203d3e203139313830.roa (raw, json)
Hash identifier:          ySItX7303TXKZsw5342KFEd0MDQg7VB2OLz4wGW6Mmo=
Subject key identifier:   4A:25:52:CA:83:37:78:55:69:7A:CE:06:E9:98:1F:0D:95:52:96:BE
Certificate issuer:       /CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
Certificate serial:       7D68C9A7116C87325093CCA120F4F2FA3BB962F1
Authority key identifier: 2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139313830.roa
Signing time:             Tue 04 Feb 2025 18:42:26 +0000
ROA not before:           Tue 04 Feb 2025 18:37:26 +0000
ROA not after:            Tue 03 Feb 2026 18:42:26 +0000
asID:                     19180
IP address blocks:        190.187.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:68:c9:a7:11:6c:87:32:50:93:cc:a1:20:f4:f2:fa:3b:b9:62:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5
        Validity
            Not Before: Feb  4 18:37:26 2025 GMT
            Not After : Feb  3 18:42:26 2026 GMT
        Subject: CN=4A2552CA83377855697ACE06E9981F0D955296BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:02:32:c5:78:d9:ec:29:66:fe:c8:06:f3:
                    cb:03:66:bf:31:f1:04:97:4f:6e:cb:ca:e4:b2:12:
                    0a:a6:82:99:9b:38:e1:9f:03:f0:35:be:21:ca:d0:
                    76:3b:0f:f4:e6:c6:cf:1c:ad:08:31:a9:fd:0d:b6:
                    71:64:a7:4e:44:59:21:b7:13:61:7e:20:a9:83:7b:
                    38:03:63:06:6f:03:89:66:aa:47:e9:e7:26:ab:5c:
                    2a:b4:e7:3f:07:79:60:2d:73:3c:1b:23:df:16:40:
                    9c:94:66:a9:18:c5:b7:94:1e:3f:f2:ab:db:8c:4c:
                    97:7b:ef:7f:dd:99:be:a4:21:72:11:e0:08:80:d3:
                    37:dc:fa:93:ee:3a:9c:d3:d0:02:16:e0:9f:9d:b3:
                    44:c2:e2:ff:ec:c8:58:a4:f3:2e:d2:70:0c:6c:48:
                    77:1b:d9:18:64:74:5a:f7:9a:68:d2:e1:4d:0b:d6:
                    7f:f5:4e:af:11:f2:52:bf:6b:88:a3:a2:ac:ad:c5:
                    23:93:d2:5a:f6:d1:e5:a8:92:20:97:c3:b4:14:a4:
                    b2:30:e0:69:89:79:9b:f8:e1:61:d2:5e:39:da:72:
                    a1:13:e8:26:1c:68:1c:24:2e:bc:bc:c1:63:f1:11:
                    b1:5f:a8:56:fb:5e:43:24:95:e6:d2:8b:23:ed:5f:
                    b6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:25:52:CA:83:37:78:55:69:7A:CE:06:E9:98:1F:0D:95:52:96:BE
            X509v3 Authority Key Identifier:
                keyid:2B:1C:1B:7B:81:83:60:05:B4:55:C4:FF:26:DD:AA:1F:B3:A6:78:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B1C1B7B81836005B455C4FF26DDAA1FB3A678E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFC63211A8F9C6FF567972E914B866B7E4BD6F9E5612597420EE70B61A4C723F/0/3139302e3138372e302e302f31362d3234203d3e203139313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.187.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         59:70:92:fb:b3:3e:94:80:59:9a:12:94:06:32:3b:e3:1a:87:
         8d:9d:54:3e:af:0a:c7:5d:14:cf:0c:3b:d4:e9:75:2e:72:ee:
         54:8e:44:03:ab:d4:a5:b0:d4:91:fb:7b:26:d1:8d:78:8f:fc:
         11:9c:b6:0c:d8:89:7c:1f:4e:e8:d4:27:ca:45:41:2a:f0:f5:
         64:39:f5:83:8a:40:b3:95:3a:1b:fd:f0:fc:ee:12:86:4d:da:
         80:82:3f:d9:7b:ab:e5:54:97:56:83:82:79:9a:80:31:ae:14:
         81:1c:4f:4c:cb:b9:57:aa:d6:d3:37:f8:17:18:46:b6:f4:94:
         da:36:78:45:6d:7b:27:4c:b1:78:b1:65:2a:69:0a:df:38:aa:
         8a:a4:68:20:e6:95:ba:7d:aa:07:2e:30:47:7c:07:43:62:13:
         d1:67:a4:77:94:3e:04:7e:f9:8f:d1:7b:6a:26:50:ea:7b:14:
         28:39:a1:84:9c:de:96:8e:48:d9:da:6e:4d:bb:bf:c7:b0:09:
         7e:39:48:66:db:71:e1:06:50:b0:e5:ec:cd:60:92:64:e6:ff:
         85:8f:63:09:8c:61:81:00:f8:ce:c0:09:0e:52:e0:5a:03:63:
         3c:00:a8:ce:f6:37:26:76:9e:07:a3:f8:9a:24:dd:d9:01:f6:
         d5:e4:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:07:41 2025 by rpki-client