Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e39322e3131322e302f32302d3230203d3e203237373235.roa
File:                     3139302e39322e3131322e302f32302d3230203d3e203237373235.roa (raw, json)
Hash identifier:          6VDQY1tdCcSHT9rRazg99kMtQYPVoUuheTzNkOpfyCY=
Subject key identifier:   B5:CE:27:24:5A:27:2C:3B:DC:E5:A7:72:D6:3B:69:7C:6B:CD:48:E7
Certificate issuer:       /CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
Certificate serial:       51CB194AAB8DED8F9CE7C2A023EC126B41D9DFC5
Authority key identifier: F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e39322e3131322e302f32302d3230203d3e203237373235.roa
Signing time:             Tue 04 Feb 2025 18:45:57 +0000
ROA not before:           Tue 04 Feb 2025 18:40:57 +0000
ROA not after:            Tue 03 Feb 2026 18:45:57 +0000
asID:                     27725
IP address blocks:        190.92.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cb:19:4a:ab:8d:ed:8f:9c:e7:c2:a0:23:ec:12:6b:41:d9:df:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F61921851FAF179EC5A5784ECA91704DCD1B66C7
        Validity
            Not Before: Feb  4 18:40:57 2025 GMT
            Not After : Feb  3 18:45:57 2026 GMT
        Subject: CN=B5CE27245A272C3BDCE5A772D63B697C6BCD48E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:1e:6a:76:22:70:b0:f1:66:a7:2d:6d:40:
                    f5:0b:56:1c:d4:f4:1d:17:28:e4:48:f4:cb:4b:eb:
                    cf:66:97:05:bf:c1:2e:cf:c1:9b:1b:75:50:fe:60:
                    3b:2d:dc:83:03:07:31:45:38:78:df:b5:bb:c7:78:
                    76:76:ca:6f:57:a6:cb:e6:77:a5:df:a4:36:9c:82:
                    77:b0:9a:aa:aa:34:c1:5b:40:73:1d:a9:62:3a:84:
                    57:09:d2:55:15:c1:63:39:79:b8:b1:24:c0:ae:e6:
                    d9:99:f1:6d:32:ad:8f:7a:6c:b5:2f:cf:a1:1e:13:
                    18:ee:2a:47:03:b8:18:42:c2:63:ca:c8:5d:8f:68:
                    e8:e5:e2:73:8b:0d:b9:da:00:02:92:9a:ec:9a:87:
                    0a:1b:16:39:89:65:ea:7b:ec:0d:71:aa:60:24:18:
                    ba:0f:e9:1f:e5:9d:d1:25:50:53:df:3b:4e:83:2c:
                    5c:18:ec:60:c3:8d:d6:d8:72:23:f6:94:98:15:5a:
                    a1:5c:8e:02:46:0f:cb:5c:1c:b4:82:fc:ef:e2:13:
                    4d:cb:0e:2e:f8:b8:86:1e:c7:ba:e2:46:75:48:6b:
                    cb:8b:1d:72:6f:66:f1:23:8c:de:d3:61:4c:37:8c:
                    45:f3:6a:a6:14:ec:4e:ac:11:27:89:4b:98:b8:fb:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CE:27:24:5A:27:2C:3B:DC:E5:A7:72:D6:3B:69:7C:6B:CD:48:E7
            X509v3 Authority Key Identifier:
                keyid:F6:19:21:85:1F:AF:17:9E:C5:A5:78:4E:CA:91:70:4D:CD:1B:66:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F61921851FAF179EC5A5784ECA91704DCD1B66C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DDDA5FFC7CC01E56FBC5E47819B35AEDB7CBC1F3332E5452803F1A87B501816A/0/3139302e39322e3131322e302f32302d3230203d3e203237373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.92.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0e:c4:12:3d:72:a8:53:7a:a4:7d:f3:ac:2c:ea:8a:b1:c5:46:
         4b:77:2a:98:e4:b8:78:aa:cb:96:b8:f6:48:ec:57:6a:cd:ce:
         57:d0:64:b8:ab:2e:bc:fa:ae:b3:75:fb:4d:79:9f:f8:f0:2b:
         6d:0a:e0:b0:e1:c8:e9:6a:c4:02:94:87:43:db:30:cf:e2:59:
         20:9b:43:01:b6:80:88:f7:27:4e:04:67:a6:e1:9c:93:06:fc:
         c4:63:3f:3a:8a:5c:db:68:87:c5:8a:b6:8c:22:5f:b0:20:bf:
         f9:f0:f1:f8:e3:d6:08:38:63:e8:cc:41:ea:da:3a:83:ef:b6:
         e4:6d:64:3e:33:50:9e:2a:98:8a:56:0a:89:ef:d4:cd:b1:61:
         2a:30:7b:a6:6a:2d:fe:31:94:1c:df:f6:64:96:ae:2a:63:36:
         ef:86:9a:92:e5:43:6b:c3:ae:d6:2e:31:26:40:a6:49:89:a0:
         bc:12:44:5d:69:d7:f2:54:24:57:7d:2a:77:85:16:87:d9:b0:
         05:ef:78:36:23:5b:17:80:df:ef:ae:ca:1d:88:72:aa:68:59:
         e9:3d:b5:89:dd:31:b2:bb:bf:1b:95:8f:b0:f9:9b:16:0b:35:
         d6:47:dc:e4:c0:89:05:32:62:a1:88:65:91:1f:5d:27:44:2c:
         bf:58:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:33 2025 by rpki-client