Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa
File:                     3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          Q0DNCxc8kuq3c38dnUubv6z8nhEzd9aiSPELoil2YpQ=
Subject key identifier:   1F:B7:FA:1D:70:3C:E5:AA:3A:1C:96:E5:DE:63:13:BA:55:D4:A0:00
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2F60F54173EE12EFDE8A1494CF6BCE37C76E6726
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa
Signing time:             Tue 04 Feb 2025 18:33:14 +0000
ROA not before:           Tue 04 Feb 2025 18:28:14 +0000
ROA not after:            Tue 03 Feb 2026 18:33:14 +0000
asID:                     20454
IP address blocks:        190.112.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:f5:41:73:ee:12:ef:de:8a:14:94:cf:6b:ce:37:c7:6e:67:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Feb  4 18:28:14 2025 GMT
            Not After : Feb  3 18:33:14 2026 GMT
        Subject: CN=1FB7FA1D703CE5AA3A1C96E5DE6313BA55D4A000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fa:da:02:84:20:c7:49:4f:d0:39:73:ec:fa:
                    60:a0:a7:7d:9f:3f:f8:f3:b1:c2:06:cd:4d:8e:93:
                    96:e2:2f:3d:99:4b:7b:a3:26:a3:fc:61:aa:06:3c:
                    08:0f:be:c2:2d:9a:59:f8:ee:9d:e2:68:8e:5a:6f:
                    6c:3b:67:28:7a:08:95:d1:d6:42:c0:b2:1f:61:d8:
                    dc:8f:1b:29:fa:2a:c9:61:e5:58:3d:42:e5:09:80:
                    5e:d3:95:92:cb:8d:fb:39:97:72:41:c3:36:ca:fc:
                    43:7a:2f:13:94:c9:4f:73:25:1a:cc:f8:53:e1:75:
                    5e:9f:26:84:07:9d:da:b8:f4:65:f2:91:80:e4:9a:
                    cf:b9:38:12:d3:f3:05:39:f3:7d:dc:c3:0a:c0:32:
                    78:b8:7d:7d:e4:85:d7:9d:75:ca:9b:78:c0:58:67:
                    6c:7c:ff:e5:8d:4e:e4:55:70:65:23:cc:9b:f8:2b:
                    d3:1f:14:53:97:c7:cc:7b:04:bf:2e:08:1d:16:0e:
                    c5:88:6e:28:c6:e2:9e:79:86:42:8d:c0:9b:9c:3d:
                    bf:50:69:14:e0:d0:3e:fe:74:b1:7f:4a:dc:76:e6:
                    0b:ad:f7:85:bc:a2:2b:9e:74:3e:99:bd:ca:b4:d2:
                    ee:ce:5b:5e:16:53:64:d7:88:a3:42:07:c3:93:a8:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B7:FA:1D:70:3C:E5:AA:3A:1C:96:E5:DE:63:13:BA:55:D4:A0:00
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:a9:f5:7d:e5:75:7d:ad:7b:54:c1:e5:4f:98:a6:dd:7d:
         a5:bf:e3:d2:99:23:67:fc:d8:aa:22:ce:dc:b3:aa:19:22:47:
         1d:d9:ae:bd:a6:46:34:a3:d9:13:fd:a4:09:4a:31:37:72:a3:
         98:de:5c:c9:63:17:55:98:68:c0:f2:3e:5e:53:ef:b6:7a:01:
         8d:91:21:33:f6:2c:1a:f9:7a:96:dd:f6:f0:87:f3:4d:19:d8:
         e9:0b:fa:65:21:92:53:6c:d8:a8:26:f9:cb:2f:42:84:b7:4d:
         bd:f6:61:c2:d3:84:84:e8:b4:fc:4d:f7:36:68:62:2f:25:a5:
         40:f8:b9:5c:a7:93:dc:25:47:48:bb:03:fc:25:19:3d:20:3c:
         ca:e3:a4:f2:44:0e:91:06:89:f8:da:8e:7a:b6:fc:f2:eb:c0:
         28:98:dd:d1:68:ab:83:16:ec:e7:b1:aa:84:d7:00:3b:10:3b:
         1d:fb:c0:1a:fa:a3:42:10:ce:7d:6e:d8:14:6f:8b:2f:1b:35:
         b9:71:94:ab:33:c3:25:78:12:65:3a:f2:98:ca:eb:11:4a:ef:
         1d:39:65:8c:2d:83:e3:2c:85:5b:7f:d5:6a:fb:3b:8a:b7:98:
         3a:64:85:ea:67:6d:5d:df:ac:a9:c5:66:79:a0:76:8b:d3:2e:
         5f:80:45:44
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL2D1QXPuEu/eihSUz2vON8duZyYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTAyMDQxODI4MTRaFw0yNjAyMDMxODMzMTRaMDMxMTAvBgNV
BAMTKDFGQjdGQTFENzAzQ0U1QUEzQTFDOTZFNURFNjMxM0JBNTVENEEwMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+toChCDHSU/QOXPs+mCgp32f
P/jzscIGzU2Ok5biLz2ZS3ujJqP8YaoGPAgPvsItmln47p3iaI5ab2w7Zyh6CJXR
1kLAsh9h2NyPGyn6Kslh5Vg9QuUJgF7TlZLLjfs5l3JBwzbK/EN6LxOUyU9zJRrM
+FPhdV6fJoQHndq49GXykYDkms+5OBLT8wU5833cwwrAMni4fX3khdeddcqbeMBY
Z2x8/+WNTuRVcGUjzJv4K9MfFFOXx8x7BL8uCB0WDsWIbijG4p55hkKNwJucPb9Q
aRTg0D7+dLF/Stx25gut94W8oiuedD6Zvcq00u7OW14WU2TXiKNCB8OTqHMRAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUH7f6HXA85ao6HJbl3mMTulXUoAAwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDC
MA0GCSqGSIb3DQEBCwUAA4IBAQAnm6n1feV1fa17VMHlT5im3X2lv+PSmSNn/Niq
Is7cs6oZIkcd2a69pkY0o9kT/aQJSjE3cqOY3lzJYxdVmGjA8j5eU++2egGNkSEz
9iwa+XqW3fbwh/NNGdjpC/plIZJTbNioJvnLL0KEt0299mHC04SE6LT8Tfc2aGIv
JaVA+Llcp5PcJUdIuwP8JRk9IDzK46TyRA6RBon42o56tvzy68AomN3RaKuDFuzn
saqE1wA7EDsd+8Aa+qNCEM59btgUb4svGzW5cZSrM8MleBJlOvKYyusRSu8dOWWM
LYPjLIVbf9Vq+zuKt5g6ZIXqZ21d36ypxWZ5oHaL0y5fgEVE
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:29:57 2025 by rpki-client