Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f32312d3231203d3e203232333638.roa
File:                     3139302e39362e3132382e302f32312d3231203d3e203232333638.roa (raw, json)
Hash identifier:          nGunqB+LEB4h6HOJLYFU64UCW9aQ4HFkfpjGcrlXGgI=
Subject key identifier:   0C:42:5F:0B:41:A7:E2:38:E4:E1:45:7E:0F:CA:AA:C4:E1:D0:97:B5
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       297C6530BC1878B80F22C247FAC9A9A2F78D73AB
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f32312d3231203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:18 +0000
ROA not before:           Tue 04 Feb 2025 18:17:18 +0000
ROA not after:            Tue 03 Feb 2026 18:22:18 +0000
asID:                     22368
IP address blocks:        190.96.128.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:7c:65:30:bc:18:78:b8:0f:22:c2:47:fa:c9:a9:a2:f7:8d:73:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:18 2025 GMT
            Not After : Feb  3 18:22:18 2026 GMT
        Subject: CN=0C425F0B41A7E238E4E1457E0FCAAAC4E1D097B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:13:1c:71:ae:68:55:68:36:05:58:7a:17:
                    fb:82:a0:fe:42:2a:7f:b5:91:9e:05:5d:a2:40:f1:
                    2b:c4:d3:28:00:08:3e:c3:5a:ed:84:66:7f:5a:d9:
                    df:e0:e2:ab:b9:dd:6a:90:cf:b9:21:05:2d:b7:1a:
                    47:f5:85:87:a2:88:f8:d9:0d:b4:44:e4:36:4a:c4:
                    c9:71:49:31:7c:dc:77:35:d3:ba:78:55:e1:3f:40:
                    bf:b6:66:f6:31:f5:53:2f:6e:a3:09:98:30:66:a4:
                    85:34:36:10:ac:36:a2:f8:fc:05:bb:76:82:d2:21:
                    e8:17:88:1e:f0:44:39:b2:d8:01:8b:d7:99:cd:2c:
                    f0:de:da:e4:c0:60:72:b4:26:b9:58:92:10:60:62:
                    96:d7:73:2a:45:3e:56:91:71:be:c9:5d:8f:e3:40:
                    cf:87:f4:08:17:8a:c2:39:47:fe:f2:62:ef:7a:76:
                    60:2d:57:b3:8d:c5:0b:4d:c5:2b:34:18:5a:e3:7d:
                    a5:0e:bd:d2:d0:5f:71:e6:f7:3b:0c:cb:2a:3b:fb:
                    e7:80:8b:bc:ac:22:e4:03:31:60:aa:3a:c7:84:f7:
                    77:48:99:88:ea:33:46:07:28:ae:da:c1:55:56:ee:
                    d3:07:94:97:45:1e:33:ba:c8:d1:ff:68:81:6e:4c:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:5F:0B:41:A7:E2:38:E4:E1:45:7E:0F:CA:AA:C4:E1:D0:97:B5
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3132382e302f32312d3231203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:38:8e:7a:a7:7d:ed:57:59:de:06:59:82:7c:c8:25:ec:a4:
         46:c8:b6:b7:c6:2f:8c:76:75:7a:e1:b2:86:8e:fc:33:6b:46:
         7b:d8:66:84:73:cd:23:8c:b3:6f:a6:f8:27:28:dd:5e:27:d1:
         d4:21:b1:6c:b1:38:32:3a:65:0a:8f:f8:b2:ab:0f:6c:e9:cb:
         80:86:b0:9c:1e:97:a2:03:74:dd:55:4f:3b:c7:37:01:50:6f:
         18:e8:6b:58:a2:6a:c3:ab:71:bf:8d:33:5e:fe:2d:9c:2e:e6:
         58:4d:aa:f3:92:07:0d:f4:3b:69:d7:54:34:e6:df:8f:99:ca:
         43:1b:de:26:70:60:d7:f8:a9:e9:3f:67:e2:a3:89:53:e8:70:
         e6:bf:df:2f:42:54:a4:24:ae:3d:89:e5:65:21:81:34:78:9a:
         6a:f8:b3:9f:b1:28:b4:89:d3:ed:ba:90:8e:ad:ed:09:db:1c:
         b7:b6:d5:b8:ef:b8:4b:d7:d2:3d:2b:34:3c:8d:4e:b1:f0:3c:
         1a:58:e7:1e:53:c7:94:01:63:92:9e:99:81:e5:9d:a9:3b:79:
         2c:1b:21:b5:30:4e:23:5a:8f:23:fe:ad:83:ed:84:f7:03:00:
         0b:98:5e:f2:16:d7:1e:ba:db:bd:f2:aa:31:fd:0e:59:3c:fc:
         d8:44:d5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:52 2025 by rpki-client