Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa
File:                     3139302e36302e302e302f31362d3234203d3e203138373437.roa (raw, json)
Hash identifier:          6sShuOFOcCXmZP/lKbJHiEDbgMSP+H7UQmcuZpSvovE=
Subject key identifier:   9E:79:A7:76:46:66:DA:7B:38:2A:03:F6:00:F8:98:9E:36:E7:80:D3
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       7CA64E57C6F68263AD614E378EAAB048CF07694A
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa
Signing time:             Tue 04 Feb 2025 18:23:55 +0000
ROA not before:           Tue 04 Feb 2025 18:18:55 +0000
ROA not after:            Tue 03 Feb 2026 18:23:55 +0000
asID:                     18747
IP address blocks:        190.60.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a6:4e:57:c6:f6:82:63:ad:61:4e:37:8e:aa:b0:48:cf:07:69:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Feb  4 18:18:55 2025 GMT
            Not After : Feb  3 18:23:55 2026 GMT
        Subject: CN=9E79A7764666DA7B382A03F600F8989E36E780D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c7:55:c0:7c:dd:95:52:a9:97:05:ff:3c:37:
                    e0:5c:3d:1c:64:af:ae:85:1c:69:27:6f:69:a5:fb:
                    e0:74:f2:89:0c:89:88:c3:d2:7b:ff:2a:ea:af:1b:
                    28:e2:b5:c3:0c:5d:46:94:ab:e5:02:a6:25:32:eb:
                    bd:01:4c:5e:e6:0c:3e:50:6f:38:cc:94:3d:9c:0e:
                    a2:b6:95:a7:9d:0e:91:4d:93:19:26:3d:19:ea:f9:
                    b3:29:e5:37:de:5c:8a:18:31:b7:07:07:02:20:c7:
                    88:bc:f8:33:d4:57:d6:a9:ea:8c:91:03:8e:b4:91:
                    86:62:05:ee:e1:8d:8c:ec:a5:56:12:ac:d1:d0:ae:
                    a0:90:39:1b:49:9b:20:95:c9:fc:22:48:43:fe:6d:
                    c6:62:61:d5:3e:50:ee:28:e2:f9:be:64:32:aa:a6:
                    ee:c6:9a:ca:25:6f:49:73:8d:34:cf:23:be:73:1a:
                    62:54:94:90:09:1d:3f:2c:f3:d1:c9:5b:28:6f:8a:
                    95:e1:7a:cc:3a:50:e0:32:6a:06:78:da:43:8f:a4:
                    23:0c:6a:cd:89:4b:61:ad:23:e6:07:6b:89:3e:2e:
                    0e:23:60:6d:e7:4c:82:01:d9:51:29:b6:df:96:9b:
                    7f:81:47:ce:ca:88:97:0c:3b:82:9d:e3:54:92:01:
                    41:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:A7:76:46:66:DA:7B:38:2A:03:F6:00:F8:98:9E:36:E7:80:D3
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36302e302e302f31362d3234203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:01:39:43:42:9f:d6:c6:ea:c6:d1:3e:36:73:19:12:94:ec:
         1e:65:93:47:c3:69:24:95:16:59:1c:94:1d:ef:e3:1e:81:f9:
         72:ca:fa:2a:07:92:83:cc:30:f7:4c:85:8a:23:00:51:d3:ac:
         7a:0e:96:f4:f0:92:a2:53:56:9a:2a:72:4e:e0:8c:6f:a7:eb:
         79:ad:9a:98:09:e5:7f:1f:ab:69:dc:d0:fe:f1:4a:b5:19:03:
         bd:6e:bb:e1:4b:34:ae:8a:79:2f:4d:99:1e:13:93:80:56:b2:
         ed:aa:bb:ab:1a:cb:5a:60:6c:bd:62:71:5c:c5:f6:c0:5d:84:
         91:05:8a:01:9b:16:01:05:34:77:d2:d4:d6:bd:8d:e1:50:89:
         a6:3a:54:16:2e:68:38:2c:ca:42:10:c8:c2:3b:93:3a:6f:80:
         96:f0:a7:fe:c5:20:77:72:bd:5d:d8:01:96:38:39:04:a3:f3:
         0b:bc:a7:a3:2f:66:ac:11:e4:73:0e:fc:03:aa:a8:ae:95:e5:
         e6:f4:85:0b:b0:84:8c:61:42:6e:fd:26:1b:a7:08:3a:f2:f9:
         44:e3:52:6d:46:6e:ed:c1:52:b8:4c:21:80:30:90:d2:2f:aa:
         8c:fa:56:e7:53:1e:48:27:3f:be:ba:48:9d:1a:0e:89:7d:4a:
         88:20:b7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:35 2025 by rpki-client