Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3134342e302f32312d3234203d3e203238303135.roa
File:                     3139302e3132342e3134342e302f32312d3234203d3e203238303135.roa (raw, json)
Hash identifier:          zMIHjerWIM9ghnRh0qoTu5euf9OtL/IUe1jaBdo70sA=
Subject key identifier:   4D:06:C4:C3:45:00:60:B8:58:4D:91:D1:2E:0F:5B:DA:B0:92:74:7A
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       5AB2AF337FE7FC00AF881CD394941B4512BDB491
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3134342e302f32312d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:09 +0000
ROA not before:           Tue 04 Feb 2025 20:01:09 +0000
ROA not after:            Tue 03 Feb 2026 20:06:09 +0000
asID:                     28015
IP address blocks:        190.124.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b2:af:33:7f:e7:fc:00:af:88:1c:d3:94:94:1b:45:12:bd:b4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:09 2025 GMT
            Not After : Feb  3 20:06:09 2026 GMT
        Subject: CN=4D06C4C3450060B8584D91D12E0F5BDAB092747A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:74:83:fa:c3:d5:a2:2b:91:ef:83:f3:d7:
                    e5:28:f6:5f:56:99:3c:1c:73:6e:f3:26:d7:8d:44:
                    1f:95:e1:1e:15:9e:59:98:ac:59:4f:d7:b4:74:16:
                    c8:4c:b4:8a:5d:59:13:2b:72:22:e6:bd:a9:b6:57:
                    7b:fd:f1:f8:38:0d:a9:af:ee:f5:b6:04:3c:20:de:
                    cf:de:3e:d8:9e:91:ad:21:31:0f:a1:22:e2:f0:e5:
                    48:d1:02:bd:63:17:8e:c7:df:20:61:37:f9:8b:9f:
                    c4:6a:63:60:a3:66:db:ea:c7:66:83:1a:ef:a0:4f:
                    e7:83:c3:90:50:63:56:31:43:56:e3:3a:cf:c3:47:
                    92:1a:c6:44:34:e2:58:85:48:17:87:f1:2a:a0:cb:
                    ae:ff:6e:69:a5:92:69:be:6a:b6:b1:89:cd:7e:e4:
                    8b:44:41:8b:a8:fd:e3:35:15:9d:b0:81:7d:15:1b:
                    31:fc:d4:20:b2:e6:01:ec:cb:4c:12:41:31:c0:4d:
                    70:f5:b1:14:98:f9:61:d8:ba:80:ca:26:49:39:7b:
                    90:76:31:3e:8a:8e:5e:b3:54:55:b8:21:87:06:67:
                    ac:93:74:60:83:f9:e1:3d:2a:29:e3:92:d4:67:d2:
                    f0:f4:56:94:70:4b:fe:ab:8c:cf:86:18:af:63:df:
                    33:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:C4:C3:45:00:60:B8:58:4D:91:D1:2E:0F:5B:DA:B0:92:74:7A
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e3132342e3134342e302f32312d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:fd:80:05:f4:a5:b1:6c:d1:b7:47:cf:ff:d7:a0:6b:58:0f:
         7b:3e:92:82:39:6b:ce:26:ad:71:ba:52:f4:ca:8d:54:2a:28:
         76:84:71:24:5e:93:26:e9:26:5a:f8:c6:47:50:bf:f0:a8:87:
         a7:9a:3a:c8:b0:5c:06:23:63:cd:69:ba:1f:3a:ce:08:cf:66:
         8f:21:70:a8:d4:41:c5:da:41:72:58:93:02:fd:a7:a2:50:d1:
         77:3c:96:b6:1f:c0:2b:9d:41:2b:fb:d9:10:e6:9f:d8:56:88:
         94:f6:d0:48:40:3f:cb:f7:7a:46:24:04:8e:12:5d:be:c6:8f:
         ea:4c:4a:3a:10:2e:5e:3f:8f:5c:cb:57:e3:10:e9:38:c4:0d:
         45:f2:4d:1f:76:8f:55:0b:57:06:06:cd:93:cd:f0:ab:fa:f5:
         a5:b8:e3:c1:dd:7f:b1:fd:8a:f7:b1:da:b6:bf:19:de:96:0f:
         e6:8d:26:c8:f4:aa:7d:93:21:5c:51:45:b1:a6:78:16:f5:b1:
         08:27:da:75:18:f2:c4:68:37:8f:97:89:c4:ca:88:31:fe:0f:
         a7:f9:88:6a:aa:5b:3b:ae:b1:a0:d7:e8:8f:64:99:55:94:ca:
         b4:bd:11:cb:61:5d:7c:ef:a7:d3:c2:77:d3:c4:54:bd:28:cf:
         9d:f2:f2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:39:35 2025 by rpki-client