Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3139302e3136382e3139322e302f31382d3138203d3e203237383931.roa
File:                     3139302e3136382e3139322e302f31382d3138203d3e203237383931.roa (raw, json)
Hash identifier:          nmKhyd4yWgSeCrBh/nWwBWIEyXYE6KS1D3X4qlJuWdU=
Subject key identifier:   FF:E9:57:2A:D3:7A:C1:E6:2F:05:75:1A:7E:C5:EF:8D:5A:D5:49:47
Certificate issuer:       /CN=3C181C58C943704D75823C9900C54516564C54BF
Certificate serial:       75020B8CDB3CD91C36960F71BBA2A479470BE0F0
Authority key identifier: 3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3139302e3136382e3139322e302f31382d3138203d3e203237383931.roa
Signing time:             Tue 04 Feb 2025 18:07:50 +0000
ROA not before:           Tue 04 Feb 2025 18:02:50 +0000
ROA not after:            Tue 03 Feb 2026 18:07:50 +0000
asID:                     27891
IP address blocks:        190.168.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:02:0b:8c:db:3c:d9:1c:36:96:0f:71:bb:a2:a4:79:47:0b:e0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C181C58C943704D75823C9900C54516564C54BF
        Validity
            Not Before: Feb  4 18:02:50 2025 GMT
            Not After : Feb  3 18:07:50 2026 GMT
        Subject: CN=FFE9572AD37AC1E62F05751A7EC5EF8D5AD54947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d3:ab:d8:12:fc:bb:d6:63:1a:9f:b7:4c:42:
                    38:1e:00:b1:46:0d:3b:42:52:1d:a8:24:bd:7e:01:
                    87:16:33:c2:3d:b7:9c:17:57:c0:a6:53:0a:82:de:
                    65:3c:ff:69:ac:16:18:b0:39:3f:a7:19:73:8c:9b:
                    69:ab:3f:35:d6:cd:bf:a1:d8:8c:5e:a2:d8:bf:c9:
                    ca:13:14:4f:ea:18:77:98:f1:d0:e9:f6:52:62:8b:
                    39:68:e5:31:b0:41:09:2e:cb:fd:da:e1:87:03:d7:
                    bc:52:2d:55:65:72:6d:7c:17:77:20:65:2a:73:9b:
                    83:ec:55:57:59:cf:08:4f:be:1b:fe:79:5e:7e:6f:
                    23:b3:27:42:8c:58:5c:c0:7b:b2:87:d3:0c:bb:be:
                    6d:18:97:2b:16:58:38:0d:cd:b5:6a:a1:08:3c:fa:
                    00:32:f9:74:77:07:91:f7:0b:7c:c6:fa:1a:92:b5:
                    0a:98:0b:30:c9:3b:59:28:1f:a6:87:07:ee:f1:d1:
                    97:82:0b:02:29:57:12:1d:8c:f8:e5:dd:90:36:f4:
                    d2:7f:89:1c:0b:e5:ff:64:14:ff:e6:90:17:04:fb:
                    88:87:d7:13:0f:c1:7c:8d:d5:81:c9:5f:6e:56:5b:
                    c1:7f:ec:85:13:08:b8:41:4b:34:d1:c9:2d:21:a4:
                    59:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E9:57:2A:D3:7A:C1:E6:2F:05:75:1A:7E:C5:EF:8D:5A:D5:49:47
            X509v3 Authority Key Identifier:
                keyid:3C:18:1C:58:C9:43:70:4D:75:82:3C:99:00:C5:45:16:56:4C:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3C181C58C943704D75823C9900C54516564C54BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C181C58C943704D75823C9900C54516564C54BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E605EA83BAEDA3220BADB04FE6B00216A40FB18814ACD440AFF6575E88032742/0/3139302e3136382e3139322e302f31382d3138203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.168.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:3e:c7:f2:f1:75:99:81:68:15:ed:7d:41:e2:9c:43:3f:c7:
         9c:9d:2f:9e:95:33:a0:de:f3:02:8f:7b:bd:93:16:eb:46:a9:
         3a:3b:f7:c9:67:68:cc:81:46:98:ff:8b:ca:a4:79:30:71:bb:
         7c:54:e5:5f:d8:e8:b1:1d:ec:f2:32:90:cb:29:27:4c:bd:5f:
         af:6c:76:59:df:bc:67:13:b0:63:1b:d2:8a:de:44:a1:25:b3:
         e3:93:e6:fc:34:8e:8c:d4:f7:df:26:57:89:c1:2a:d1:bd:44:
         46:04:b8:a6:16:5d:d3:4f:7d:f8:78:dd:a4:c4:48:ef:a6:5d:
         60:9a:cd:8e:ce:17:c3:bb:ff:c4:51:5f:8a:37:ef:02:81:85:
         42:82:83:53:86:a1:ef:83:f2:8f:0e:05:c8:6a:c5:36:93:94:
         38:ca:1c:70:5b:a7:10:c7:e1:7a:71:65:ac:79:e7:a1:94:03:
         91:d4:be:58:ba:81:10:1e:ef:66:96:a1:60:77:29:aa:66:10:
         a9:da:c5:3b:67:20:fa:4f:f0:14:1e:05:2e:d5:72:9d:5f:09:
         44:7e:29:75:da:c1:f2:dc:cf:b0:b2:7e:fa:fe:13:f6:a1:39:
         d5:fd:a6:f5:0a:d2:bc:01:0d:00:c1:be:77:4b:c1:84:bc:ca:
         12:5a:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:26 2025 by rpki-client