Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e203230343733.roa
File:                     3139302e3131322e3139322e302f32322d3232203d3e203230343733.roa (raw, json)
Hash identifier:          QxsC4KVc/4Rc97k5sulkeSbE4jcr3LhPRFDQgbopgNg=
Subject key identifier:   CC:55:4B:8D:98:EF:81:26:F6:17:35:6A:70:B6:BE:EE:C6:48:89:4F
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       1259C36ED51988D72AD2C1E1F067BCEB083B8F8B
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e203230343733.roa
Signing time:             Thu 07 Aug 2025 11:10:02 +0000
ROA not before:           Thu 07 Aug 2025 11:05:02 +0000
ROA not after:            Thu 06 Aug 2026 11:10:02 +0000
asID:                     20473
IP address blocks:        190.112.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:59:c3:6e:d5:19:88:d7:2a:d2:c1:e1:f0:67:bc:eb:08:3b:8f:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:05:02 2025 GMT
            Not After : Aug  6 11:10:02 2026 GMT
        Subject: CN=CC554B8D98EF8126F617356A70B6BEEEC648894F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:9b:ea:8d:aa:77:b2:65:bc:15:7d:97:8f:
                    f9:15:ec:0c:5c:bc:4c:0f:8a:ed:1a:5d:17:92:bc:
                    73:17:c7:4f:22:f2:4c:ac:61:e6:11:dd:9a:d9:86:
                    7b:f4:7e:2f:e2:27:5a:0a:e0:00:97:ab:d3:9e:53:
                    b4:54:37:2f:a5:27:0b:32:be:25:73:7b:bf:d0:33:
                    af:a8:c5:a6:9e:98:35:89:70:e3:60:c5:24:85:72:
                    30:51:a5:fa:e5:8e:97:c6:38:4c:60:78:82:75:32:
                    ef:71:9c:d4:5f:6a:02:7b:c9:48:d1:ef:ef:af:0c:
                    da:c8:3f:fb:0e:bc:f6:0a:80:22:8f:c8:66:2e:a1:
                    93:7d:db:8b:0b:69:57:67:4c:c9:88:1f:b8:a1:9f:
                    c6:ce:cd:40:24:c5:13:29:cb:5f:51:ae:3e:ae:2f:
                    3d:fe:f5:39:79:82:e0:03:6b:76:eb:d2:94:15:bd:
                    00:ba:36:2c:f7:e0:5f:34:e9:66:54:d2:c6:09:76:
                    53:56:9f:53:8c:8f:b2:ab:53:f6:2c:0b:96:a4:93:
                    f8:67:b8:c8:14:99:be:dc:01:bf:e4:2f:0b:d0:1c:
                    9c:d3:b1:d3:09:cf:21:57:1e:16:ef:71:e1:6c:76:
                    28:5b:f2:85:e6:71:05:9f:b8:b1:90:14:0d:10:69:
                    42:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:4B:8D:98:EF:81:26:F6:17:35:6A:70:B6:BE:EE:C6:48:89:4F
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:80:00:c5:b8:1b:e7:cc:0d:88:9c:a8:d7:b9:90:1a:a0:c8:
         4e:8b:b7:6c:23:0f:a8:c1:20:2d:d8:5a:81:d5:77:06:56:63:
         e9:dc:27:a3:7f:9d:04:8e:bf:e8:2f:ea:86:8d:82:05:14:0e:
         06:32:37:00:27:43:7b:16:eb:12:c9:a3:33:42:be:72:db:b0:
         cf:6a:3b:96:27:12:9f:91:97:87:c1:68:60:b1:45:2d:cc:50:
         26:00:b4:c5:09:45:22:e4:68:e6:69:16:67:ad:39:d9:ee:bb:
         a6:20:90:bf:67:c5:4a:bf:e8:18:9f:ea:8e:a6:f0:c9:2a:35:
         38:9f:b9:4a:30:f0:b3:84:1f:4a:f4:42:d4:7f:32:2e:cf:8b:
         31:92:54:32:09:f5:e7:22:70:3f:0b:d3:29:d1:42:d2:5c:57:
         b4:79:35:fa:46:04:b8:38:6f:0c:be:6f:ef:f7:fe:1d:04:44:
         60:f6:11:70:30:cd:ef:b8:65:d6:60:57:3d:12:3b:73:1a:41:
         8d:4a:1a:f7:4f:03:2b:55:8f:fc:5f:91:eb:b8:d0:82:4a:79:
         fc:c1:01:ff:70:38:96:c8:74:69:43:b1:71:c1:20:85:40:ec:
         d5:49:a1:f0:a3:94:15:fe:4a:7d:4a:00:50:0d:d1:91:83:50:
         f2:06:62:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:02:40 2025 by rpki-client