Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3138342e302f32312d3231203d3e2033383136.roa
File:                     3139302e39362e3138342e302f32312d3231203d3e2033383136.roa (raw, json)
Hash identifier:          EvVu4jd33T3/6k9f5OK9tdeZIIZnN+e6mBXyIebEHlI=
Subject key identifier:   DC:71:6F:74:73:FE:C8:58:F2:47:F3:80:C6:47:E3:5F:33:91:46:67
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       7FCEF8D364578000543E9B08B2CF4CDD6D3E5E10
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3138342e302f32312d3231203d3e2033383136.roa
Signing time:             Tue 04 Feb 2025 18:22:21 +0000
ROA not before:           Tue 04 Feb 2025 18:17:21 +0000
ROA not after:            Tue 03 Feb 2026 18:22:21 +0000
asID:                     3816
IP address blocks:        190.96.184.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ce:f8:d3:64:57:80:00:54:3e:9b:08:b2:cf:4c:dd:6d:3e:5e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:21 2025 GMT
            Not After : Feb  3 18:22:21 2026 GMT
        Subject: CN=DC716F7473FEC858F247F380C647E35F33914667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:09:1f:5f:10:df:aa:2f:51:f0:67:29:53:
                    9a:58:dd:4c:4f:18:5d:ae:fa:7e:fc:69:b4:2d:dc:
                    d1:35:5e:95:e8:5c:2f:d5:ab:4e:74:23:f2:ba:1d:
                    fe:3d:3f:7f:ad:be:4e:ec:68:22:28:47:8d:08:4d:
                    d9:14:c6:b2:5a:8e:08:df:60:a1:b7:3e:13:ff:7d:
                    17:88:f4:71:71:97:9d:ce:f2:a1:50:19:49:3e:36:
                    73:b8:fb:86:b1:08:64:d6:d4:9c:00:92:8c:2a:7d:
                    81:c6:7d:14:8c:9d:4a:23:44:9e:01:de:5e:24:61:
                    64:a7:03:6b:f6:a4:ae:d9:e8:a5:3d:eb:26:28:9d:
                    51:dd:fe:fb:a2:37:1e:ef:7e:42:37:0c:49:59:9d:
                    d9:c9:1f:35:b0:9a:35:70:d4:36:02:02:04:70:20:
                    77:79:58:f1:fa:82:28:1a:12:d5:dd:03:2b:a9:d5:
                    c2:b0:8d:31:1a:1d:83:03:58:30:a8:f5:b8:79:bf:
                    fd:ac:dd:de:66:63:53:06:43:f7:fb:47:14:25:d1:
                    dd:01:b3:bb:93:d8:a7:1c:4d:24:2a:7a:b2:d6:e2:
                    2e:e3:ff:f4:c5:5e:26:99:81:ce:07:35:e0:b1:60:
                    ee:05:fd:60:9f:fb:23:7d:18:54:92:3d:e8:83:dd:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:71:6F:74:73:FE:C8:58:F2:47:F3:80:C6:47:E3:5F:33:91:46:67
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e39362e3138342e302f32312d3231203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.96.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:31:af:c9:59:29:c0:fd:1d:fc:5c:5a:8c:97:54:01:a2:6f:
         ba:4d:cf:62:3b:0a:8d:54:c9:de:72:7b:ef:81:a6:bf:74:1f:
         73:31:71:4c:87:28:b3:4a:dd:1f:7c:fd:6b:2e:8c:36:1d:d5:
         d0:1b:5d:cd:89:d5:c3:8f:49:18:b7:44:fa:9e:9a:39:c6:62:
         6a:b7:07:51:40:75:4f:85:34:63:31:7a:04:48:0e:0b:aa:f1:
         30:7f:e7:4d:24:29:81:5c:e3:ba:fb:ac:f9:8d:d6:26:5f:09:
         ca:9f:57:17:ec:35:5b:4f:84:3b:c1:c7:83:45:72:6d:85:01:
         96:d4:98:83:d9:e4:e9:8f:4b:da:44:98:bc:f2:0f:64:35:82:
         9e:82:51:f5:c4:92:f6:ea:96:11:7e:81:64:26:eb:ad:44:e7:
         01:b2:ae:6c:76:9f:d5:74:58:45:94:37:69:fd:af:52:83:e6:
         04:5e:78:28:44:ed:40:29:8d:a0:f7:a8:82:ec:82:33:70:b6:
         64:61:4d:f0:13:d4:98:4a:7a:d4:e1:02:07:81:a9:b1:92:d9:
         0c:97:e2:82:d7:40:69:eb:3a:83:1e:10:90:6d:05:b0:da:08:
         60:34:21:9e:7b:9e:5a:0e:f5:57:24:df:06:0f:02:e3:1f:c2:
         a3:92:de:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:59 2025 by rpki-client