Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3132342e39362e302f31392d3234203d3e203232333638.roa
File:                     3139302e3132342e39362e302f31392d3234203d3e203232333638.roa (raw, json)
Hash identifier:          bSq2xIkJBLtXascR59+6hXmFkeKlgA9hZ+iWv+ko8P8=
Subject key identifier:   2B:DA:0E:9B:87:26:7F:47:55:10:1C:FF:8B:81:C0:60:02:A0:36:22
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       1931D7EC9D49C31E723F9CE6758D57DE1300FF03
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3132342e39362e302f31392d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:20 +0000
ROA not before:           Tue 04 Feb 2025 18:17:20 +0000
ROA not after:            Tue 03 Feb 2026 18:22:20 +0000
asID:                     22368
IP address blocks:        190.124.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:31:d7:ec:9d:49:c3:1e:72:3f:9c:e6:75:8d:57:de:13:00:ff:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:20 2025 GMT
            Not After : Feb  3 18:22:20 2026 GMT
        Subject: CN=2BDA0E9B87267F4755101CFF8B81C06002A03622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:ab:1a:30:97:ee:e0:e7:fa:1b:4d:51:20:
                    77:83:f9:f6:4d:e3:45:a4:54:7f:97:bb:27:99:60:
                    38:15:05:07:2e:b5:0b:f9:d6:8b:ea:3c:1d:24:c5:
                    ae:66:a8:96:fd:2a:74:4f:7a:8c:76:d4:c1:7e:c5:
                    53:a9:29:34:49:86:51:e2:73:ad:63:95:84:50:a1:
                    c0:c8:03:58:ec:ce:50:8b:e6:cb:19:2e:4e:16:13:
                    6b:ac:c1:2c:89:6a:02:72:4e:6e:1a:a0:35:67:4a:
                    a7:80:dc:60:1b:b1:6e:f0:11:38:d8:1e:e4:8b:e1:
                    65:87:42:e1:4f:b2:53:7b:8a:0f:a8:49:e9:19:6b:
                    73:47:60:6e:4f:ab:ba:18:72:ec:dd:19:e9:80:fc:
                    53:4a:07:fa:0f:20:9f:0b:48:6a:69:00:5e:ae:b2:
                    ce:f6:18:8e:e6:79:08:64:ed:3b:66:22:65:92:3b:
                    a7:ea:06:42:d8:85:47:35:0d:fe:7b:05:51:87:3b:
                    19:13:72:55:c0:96:eb:a1:0c:d1:31:c5:3a:3f:2a:
                    c2:85:a1:a5:72:2e:b8:99:21:33:1c:b9:60:4d:b0:
                    19:d3:3b:c6:df:e6:8b:fa:dd:74:9f:b9:aa:34:b2:
                    46:5e:5b:b1:9f:e8:f7:82:af:19:7e:00:ae:f4:a2:
                    a4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:0E:9B:87:26:7F:47:55:10:1C:FF:8B:81:C0:60:02:A0:36:22
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3132342e39362e302f31392d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:91:df:c5:88:95:f9:25:ce:6b:4f:2f:e8:37:43:ba:52:4c:
         89:ca:be:41:df:a0:89:e1:09:27:81:63:ba:15:48:1a:4d:25:
         54:e1:58:9b:6e:14:ac:60:f6:a4:31:86:db:a5:37:8c:6f:f9:
         a7:f1:09:55:dd:e4:f1:38:06:07:94:5c:cf:eb:10:da:ec:ea:
         5d:64:b9:8e:a2:9c:7c:e6:f7:02:58:87:85:ec:80:39:fa:c0:
         a4:c2:f4:bf:ec:55:ce:84:eb:5e:b7:be:a7:d3:a8:5f:91:77:
         5a:11:bd:dd:c5:13:6d:a8:b8:a6:2e:d5:e0:a6:4a:06:fa:13:
         c8:2f:d3:7f:a0:b4:cc:55:3b:32:9a:af:db:d3:ba:99:58:a8:
         28:ba:f7:0a:6b:f2:2a:8c:c0:f6:3c:e0:07:1d:06:9f:6b:9f:
         69:8d:6d:78:18:26:aa:b9:09:5d:fc:ce:42:97:77:e0:18:a2:
         b9:74:b1:7d:66:c3:4b:c6:62:52:49:71:85:1d:4f:1b:ec:80:
         ae:9c:5f:33:ed:6d:ce:a8:a1:0c:90:64:20:3a:79:f6:33:63:
         96:aa:08:0d:ee:9f:3d:95:86:0f:b6:69:5d:c4:09:c2:bd:b1:
         3d:df:00:61:b8:e3:67:b8:99:a0:c7:14:c9:4e:54:e3:43:d2:
         6d:7d:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:06 2025 by rpki-client