Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
File:                     3139302e36312e33332e302f32342d3234203d3e203532343638.roa (raw, json)
Hash identifier:          JZTq9micoGKHB9VK70i1GqBO4t0Z0wpEY8sVRy3UuNM=
Subject key identifier:   BF:39:B1:40:C5:57:9A:DE:02:88:6F:90:A9:A6:DC:C9:51:DE:B5:EC
Certificate issuer:       /CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
Certificate serial:       49E03958E9D5F97A3F3AA6FA43412A4EC3D889C6
Authority key identifier: 86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 20:04:15 +0000
ROA not before:           Tue 04 Feb 2025 19:59:15 +0000
ROA not after:            Tue 03 Feb 2026 20:04:15 +0000
asID:                     52468
IP address blocks:        190.61.33.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e0:39:58:e9:d5:f9:7a:3f:3a:a6:fa:43:41:2a:4e:c3:d8:89:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8616AFEEE37AE6340A6524D920AA474EED6B6A70
        Validity
            Not Before: Feb  4 19:59:15 2025 GMT
            Not After : Feb  3 20:04:15 2026 GMT
        Subject: CN=BF39B140C5579ADE02886F90A9A6DCC951DEB5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:62:db:40:6d:d4:c0:9f:a0:46:00:2a:27:
                    e7:7c:06:87:90:53:fc:f5:40:7a:4e:f1:a8:ea:ac:
                    9a:3a:1c:01:50:98:bd:d1:7c:4d:f2:c8:34:5c:13:
                    3c:77:d2:ae:31:f8:3d:07:99:b0:36:65:e0:b8:7b:
                    4c:64:1e:56:8a:36:e7:4a:56:de:39:47:6d:e2:47:
                    e8:1e:b7:a2:77:f9:ad:97:89:36:40:34:30:45:dd:
                    80:24:7d:35:10:bf:69:24:d7:39:5f:bd:ca:6d:ad:
                    23:38:bb:12:e9:8b:91:ee:f5:fb:68:e5:3a:28:b1:
                    59:56:13:8f:11:9f:9d:75:f6:4b:92:a9:86:81:3d:
                    8a:9e:19:c5:7a:42:a0:ad:31:c4:2d:35:ff:02:77:
                    c5:1e:74:99:20:34:37:0c:d0:72:27:ff:f9:fe:b9:
                    83:cb:75:4d:31:92:4f:f3:0e:03:09:0f:73:79:a8:
                    ac:fd:e2:f3:3b:d7:c0:6f:04:86:34:c3:3e:5e:7b:
                    6a:e3:97:3a:e6:3a:a4:c2:3b:50:53:c2:6e:bf:fa:
                    1b:0d:7c:7a:d9:1d:2b:b7:73:50:39:88:6d:eb:6f:
                    98:73:52:4b:5f:05:55:43:fe:bb:9c:9e:7a:f9:e9:
                    0e:1e:9b:a2:64:1f:a2:8e:ef:f9:4d:9c:53:ec:44:
                    63:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:39:B1:40:C5:57:9A:DE:02:88:6F:90:A9:A6:DC:C9:51:DE:B5:EC
            X509v3 Authority Key Identifier:
                keyid:86:16:AF:EE:E3:7A:E6:34:0A:65:24:D9:20:AA:47:4E:ED:6B:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8616AFEEE37AE6340A6524D920AA474EED6B6A70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D6633A8732FC2FBB1FC821D3A7390B5E1B0220A07672532B53E32506040C0B44/0/3139302e36312e33332e302f32342d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8e:ad:a7:9e:b5:9a:43:62:27:a7:93:4e:ed:03:9b:b0:b7:
         b4:0e:3e:86:d9:6a:a8:4d:a5:c1:33:58:3a:c9:65:36:9b:cf:
         19:4f:ca:5c:14:f7:2c:f1:5e:a6:dc:30:68:c8:92:d7:0c:7e:
         ca:a1:48:4f:db:e9:a1:95:ba:f7:ad:e8:5d:ee:2d:85:bd:64:
         82:6c:29:c3:1f:75:d0:fe:45:2b:a3:92:e6:d9:c8:01:5d:45:
         28:35:31:e1:35:b7:5a:41:fc:c7:a7:62:9f:11:10:d8:77:86:
         8d:45:0f:bd:8f:f2:5a:07:86:f2:89:90:e3:09:83:1b:61:0a:
         6a:0b:26:30:58:2a:bf:e2:c9:40:0d:5a:3c:98:21:02:e4:40:
         c6:08:a2:97:c3:2a:ae:42:87:a7:8b:e3:b1:bf:10:1d:b6:57:
         2b:1e:9c:5b:fa:4d:e7:63:e6:3e:1d:c1:76:e5:09:3e:50:9b:
         fb:ec:42:17:b1:33:71:77:ae:48:7d:37:ac:05:ef:37:2c:b7:
         39:fc:bb:cf:c9:d9:df:04:4f:77:d3:77:81:61:f5:4a:cc:26:
         01:95:3e:4d:97:46:3b:f4:ed:a6:ab:99:b3:54:18:c6:1d:45:
         88:24:74:ce:4b:17:50:27:b1:da:08:88:6a:e2:72:0a:d5:0b:
         f2:5c:fc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:13 2025 by rpki-client