Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa
File:                     3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa (raw, json)
Hash identifier:          4fx1VQfhLAq6x8vKLoCXqH+OJNr2qvp7LUGez5LCs4E=
Subject key identifier:   D7:73:1D:F3:6F:CA:D1:C6:E9:C2:50:76:A0:0E:0F:7A:5D:98:CC:A9
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       48F81B4B18FA41D1063197D7F735A6AA84F1A60D
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa
Signing time:             Fri 12 Jul 2024 16:10:00 +0000
ROA not before:           Fri 12 Jul 2024 16:05:00 +0000
ROA not after:            Fri 11 Jul 2025 16:10:00 +0000
asID:                     271773
IP address blocks:        190.13.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f8:1b:4b:18:fa:41:d1:06:31:97:d7:f7:35:a6:aa:84:f1:a6:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Jul 12 16:05:00 2024 GMT
            Not After : Jul 11 16:10:00 2025 GMT
        Subject: CN=D7731DF36FCAD1C6E9C25076A00E0F7A5D98CCA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:cd:a9:cd:0d:76:01:c7:21:d2:f9:b8:47:
                    18:da:bb:1d:4c:52:fb:9b:37:04:98:bc:b9:41:23:
                    92:5e:e5:74:5c:a2:c5:13:47:01:65:ef:56:d2:14:
                    4e:03:0b:3a:52:f3:9d:02:c3:3a:c5:e2:4f:1a:6d:
                    1c:df:1f:d2:33:01:fa:cc:4b:64:6b:79:23:8e:f5:
                    cc:b4:33:ab:15:a5:02:40:4c:d5:d4:04:61:87:87:
                    af:40:a1:3e:a1:01:af:29:83:81:cc:16:48:cc:ec:
                    3c:d0:88:4b:ba:ab:ba:f5:60:cf:02:71:56:f6:6c:
                    68:89:32:1e:5e:bb:76:f7:a4:68:6a:a8:25:63:d9:
                    a3:11:d1:97:0d:63:43:7b:62:ca:92:a0:b7:f1:f3:
                    01:27:f1:17:59:cc:20:56:37:ca:67:cc:a6:41:73:
                    f7:63:7e:73:7c:85:54:85:89:52:f5:17:23:9f:f9:
                    76:f8:3a:c9:de:56:0d:99:55:52:e5:6c:3e:78:2d:
                    5d:90:69:42:ba:19:c7:2e:76:62:e6:f7:9e:95:64:
                    b8:2a:ee:b0:e2:4d:28:b4:53:43:8b:92:ac:5e:ef:
                    3f:32:15:8e:03:97:8f:cd:9f:39:8d:4d:f7:76:c9:
                    c7:a8:9b:32:58:51:89:6b:08:ec:cc:4f:cf:04:44:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:73:1D:F3:6F:CA:D1:C6:E9:C2:50:76:A0:0E:0F:7A:5D:98:CC:A9
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3139302e31332e3139322e302f32302d3234203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         90:e9:29:a8:b7:81:82:08:9c:49:62:a7:f2:06:38:c3:98:98:
         8c:b5:31:2b:d8:b9:14:ae:0b:f1:3a:0b:ef:6b:10:1a:7c:66:
         75:a3:78:5a:48:c7:da:8d:86:ca:db:93:a4:a1:c4:cc:c2:30:
         16:3d:13:db:50:80:a9:b2:21:fb:29:76:50:07:5c:7d:fe:03:
         5f:35:3c:92:d6:91:cf:5c:8d:03:78:7d:7e:1e:1d:81:15:cd:
         61:bc:d4:7c:9e:48:f5:72:2a:93:74:45:e4:21:e4:6d:81:28:
         58:53:4e:a4:8c:22:e6:d3:c2:9f:b0:96:a7:b5:3f:9e:00:40:
         cc:39:af:d2:05:53:e7:bc:b0:10:d2:1d:db:b3:18:8b:d7:f0:
         68:a8:a5:ab:2e:d0:15:bd:08:98:fa:ee:40:16:94:ef:1d:6d:
         45:23:84:4f:d1:69:46:07:f3:80:ee:97:77:2d:6e:13:ae:71:
         df:30:14:f8:62:91:a3:d6:5e:95:27:95:7a:c9:d1:64:13:19:
         db:c7:d6:ff:1e:18:90:af:d2:2c:77:2c:27:6d:a4:f9:2e:17:
         0e:dd:26:91:af:0a:ae:8f:15:04:2d:92:4e:ab:bc:c0:69:05:
         9d:f1:7e:93:d5:a6:d2:3b:08:02:ac:a9:d3:66:58:03:e8:6c:
         3b:8d:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:42 2025 by rpki-client