Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa
File:                     3139302e31312e3132382e302f31392d3234203d3e203532343230.roa (raw, json)
Hash identifier:          +R1COv6BjT/Kuir9zDsx0adZqtmZMKB0o/i789mb8ss=
Subject key identifier:   C1:D8:15:4D:53:0C:75:41:40:43:AD:58:32:79:3E:8A:C5:EC:30:3D
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       2B6C24C1FFF77B6C3187DE60AC7803AC67D66A36
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa
Signing time:             Tue 04 Feb 2025 20:03:00 +0000
ROA not before:           Tue 04 Feb 2025 19:58:00 +0000
ROA not after:            Tue 03 Feb 2026 20:03:00 +0000
asID:                     52420
IP address blocks:        190.11.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:6c:24:c1:ff:f7:7b:6c:31:87:de:60:ac:78:03:ac:67:d6:6a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Feb  4 19:58:00 2025 GMT
            Not After : Feb  3 20:03:00 2026 GMT
        Subject: CN=C1D8154D530C75414043AD5832793E8AC5EC303D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d7:f7:2c:fa:8d:e5:f7:31:51:2a:0d:d1:5f:
                    5c:2c:06:a5:40:39:86:0a:60:14:6a:56:4a:01:db:
                    c9:ed:76:d2:98:e9:ea:f9:6b:a4:22:01:85:20:b3:
                    07:d8:33:57:23:55:0c:d0:ab:83:b5:2c:3c:01:5b:
                    ee:cf:df:29:fb:68:7d:ad:6d:88:19:03:9c:b1:2c:
                    16:79:4c:06:25:f4:a3:96:04:4f:11:98:6f:b6:5a:
                    5d:52:56:58:c8:61:58:c2:39:f1:53:b9:e6:17:a7:
                    87:62:b3:b1:a6:70:49:04:57:be:95:f9:cf:c1:64:
                    5e:18:ec:68:cc:e4:eb:32:43:03:0a:d9:b7:5e:85:
                    3e:fe:3d:cd:f4:4a:39:3d:02:86:24:14:9d:1e:99:
                    ea:fa:2f:09:8e:60:bc:b6:d9:6c:d7:de:90:61:0f:
                    0b:2c:f7:1d:0b:db:3c:3e:9f:4d:1d:ca:49:06:ad:
                    f8:9d:c5:07:5f:2e:e8:b1:71:58:a1:cf:13:c1:71:
                    7c:02:d8:7a:28:ef:6c:4b:9c:33:41:50:ac:d1:24:
                    78:88:39:25:4e:1b:f2:0c:40:84:a0:ec:b3:fc:cc:
                    1b:e8:f5:07:7b:f8:6d:22:f7:da:36:73:8e:79:19:
                    41:78:42:31:4e:42:1c:65:b2:07:0f:20:38:18:4e:
                    19:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D8:15:4D:53:0C:75:41:40:43:AD:58:32:79:3E:8A:C5:EC:30:3D
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203532343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:32:fb:80:6f:c6:eb:0b:a6:bf:13:88:cf:be:c4:d9:7a:f0:
         2c:13:65:a2:c3:4c:86:9e:62:07:6d:f1:e9:8e:d6:12:fe:90:
         10:a3:10:1f:b3:cc:70:3c:8a:2f:3d:6d:58:3e:c7:ea:3d:0b:
         c7:21:a3:78:fd:17:43:41:74:ed:65:9b:02:cb:cd:b9:f2:45:
         40:b6:4b:6b:98:94:80:a6:a8:69:5e:f8:84:8d:9c:17:26:e7:
         2a:64:93:09:d5:74:49:30:3c:af:24:97:d2:65:9a:83:b5:b2:
         53:3c:c7:84:cb:86:f5:9f:5c:8a:e4:b3:91:41:69:76:56:d9:
         e1:7d:7e:6e:51:b2:9d:c9:d2:ec:39:42:20:e8:e1:33:ad:29:
         2d:fe:4f:05:9d:2a:18:0f:19:b0:cb:68:44:a7:7f:64:30:f8:
         dc:e0:9b:1c:1d:6a:09:d6:02:80:49:4c:1c:ca:57:9e:74:b2:
         90:1d:2f:b2:29:a2:18:38:ca:99:b4:7b:7a:04:2f:83:2f:0f:
         77:1d:16:6e:b8:9f:8c:63:d8:82:e0:e3:50:ca:09:14:0a:95:
         c6:34:81:28:6f:de:5e:92:23:9e:65:29:d2:40:dd:94:63:a0:
         76:37:9f:f0:f2:df:a1:2a:66:42:61:46:7a:62:8b:b9:53:91:
         9e:9d:64:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:05 2025 by rpki-client