Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa
File:                     3139302e362e3231302e302f32332d3234203d3e203238303135.roa (raw, json)
Hash identifier:          0dBAoc4slA4kO89FeLgF7vzrarv+orDiCjJX6KgMxx0=
Subject key identifier:   D5:22:50:46:CF:14:5F:FC:44:35:5E:01:B3:BD:6F:54:F5:C2:93:65
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       11BCD6E3806271FA5DD8022FA4879E311C30D903
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa
Signing time:             Tue 04 Feb 2025 20:06:10 +0000
ROA not before:           Tue 04 Feb 2025 20:01:10 +0000
ROA not after:            Tue 03 Feb 2026 20:06:10 +0000
asID:                     28015
IP address blocks:        190.6.210.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:bc:d6:e3:80:62:71:fa:5d:d8:02:2f:a4:87:9e:31:1c:30:d9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Feb  4 20:01:10 2025 GMT
            Not After : Feb  3 20:06:10 2026 GMT
        Subject: CN=D5225046CF145FFC44355E01B3BD6F54F5C29365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:20:87:26:e9:85:2a:fa:4c:21:3b:91:f3:df:
                    9d:b6:90:fe:9b:77:fd:9c:82:f4:84:43:cd:26:23:
                    61:67:aa:b9:09:00:0e:2c:29:b9:1b:7d:3b:45:f3:
                    47:ed:3e:66:f2:88:30:b2:59:91:bd:1b:19:42:45:
                    c0:8d:ac:46:1a:e1:3d:60:57:01:6a:b2:8b:4c:de:
                    b8:37:7e:c1:d0:28:f7:b5:53:56:96:b8:12:83:73:
                    2f:70:9d:a9:1d:d9:db:ed:7e:a6:40:18:f1:64:3b:
                    dd:cf:3d:06:48:8e:1a:79:5f:b1:fa:f2:89:3d:55:
                    88:c3:db:d7:f5:1f:f6:87:2c:26:32:65:6a:69:d0:
                    fd:f2:d3:80:29:ef:b3:d1:75:b2:1e:d9:60:20:0a:
                    97:e0:ce:e2:1e:4e:6f:0a:18:b3:b4:c9:69:c0:98:
                    13:1b:72:19:20:f4:e4:39:fb:04:96:62:20:d8:94:
                    a1:24:7b:7a:80:a8:ea:1f:68:0c:fa:95:41:53:d7:
                    ba:b3:ed:a2:19:6d:af:74:16:39:38:29:a7:c3:50:
                    bf:5c:79:8b:68:78:36:4d:75:75:59:37:cb:19:c0:
                    1b:73:ea:e8:bf:5b:ef:90:50:2c:56:15:43:63:7e:
                    74:e7:22:2a:ac:b7:58:7b:0e:44:70:e1:c5:ec:03:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:22:50:46:CF:14:5F:FC:44:35:5E:01:B3:BD:6F:54:F5:C2:93:65
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231302e302f32332d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:78:f2:8c:60:c3:c4:1d:49:cb:04:d7:1c:88:04:6f:59:2f:
         c7:bb:52:db:20:ed:b8:85:3f:43:2b:f0:b5:5a:5c:30:9e:58:
         62:32:d5:77:be:bc:46:a7:02:fd:d4:c6:a2:2c:10:c1:43:74:
         1f:bd:07:64:9e:ea:c1:68:52:c9:e4:5a:c6:1b:89:6e:e2:ab:
         fa:6f:2b:c2:95:ab:36:eb:0e:a2:a9:89:72:5a:2f:85:61:a0:
         ea:9c:f2:81:3e:4e:2d:17:28:7f:b4:82:08:22:1c:c8:c9:84:
         da:3b:71:8f:48:9d:45:34:dc:63:a3:50:73:f7:50:87:5b:32:
         ea:fb:5c:eb:44:ad:57:90:75:62:14:b5:33:10:34:9b:4a:89:
         0b:0f:a9:66:5c:f2:90:aa:68:b4:63:5e:65:d9:12:c6:1a:2d:
         d8:4e:0e:2d:61:c9:ab:50:bb:68:a5:a8:6d:60:9a:7f:d0:a3:
         4b:c1:80:fc:52:38:ea:c5:6b:f3:6a:b7:c9:8a:f6:70:42:eb:
         3e:28:8e:cc:3d:b7:51:3c:50:de:aa:3e:9b:f2:b1:b1:34:87:
         66:df:08:37:67:ec:a6:0a:c1:7f:b6:8b:62:ad:ca:a6:c2:8f:
         ef:3c:c8:2d:b3:f5:36:50:91:04:46:a1:e7:64:89:25:87:d0:
         61:5b:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:38:58 2025 by rpki-client