Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e2038313030.roa
File:                     3139302e3131342e382e302f32332d3233203d3e2038313030.roa (raw, json)
Hash identifier:          UPaxNdkjvPaFPE36kEnvFw1xU0XtkN7uEvU/V6McWGc=
Subject key identifier:   D9:08:27:74:C7:7B:10:82:95:D7:2A:DC:26:D4:F2:C7:2C:C5:AD:61
Certificate issuer:       /CN=9B98FCCDFC87543A629F8754493A026527EBF528
Certificate serial:       2EF228DED7A7E74FDC00CDF14E6CCE699319A732
Authority key identifier: 9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e2038313030.roa
Signing time:             Tue 04 Feb 2025 18:42:17 +0000
ROA not before:           Tue 04 Feb 2025 18:37:17 +0000
ROA not after:            Tue 03 Feb 2026 18:42:17 +0000
asID:                     8100
IP address blocks:        190.114.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:28:de:d7:a7:e7:4f:dc:00:cd:f1:4e:6c:ce:69:93:19:a7:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B98FCCDFC87543A629F8754493A026527EBF528
        Validity
            Not Before: Feb  4 18:37:17 2025 GMT
            Not After : Feb  3 18:42:17 2026 GMT
        Subject: CN=D9082774C77B108295D72ADC26D4F2C72CC5AD61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:34:d6:65:56:8f:d0:a5:de:0a:66:04:c2:
                    e7:2c:1e:3d:15:ab:53:73:c1:b7:03:07:39:e7:93:
                    ab:2d:e4:91:ba:28:2e:1d:71:7a:7f:33:53:a1:41:
                    32:04:bb:65:7d:97:34:90:6c:0e:cf:b1:dc:f9:97:
                    9e:15:92:63:ff:8c:92:b2:ab:ea:a2:8d:c1:22:d8:
                    24:3f:63:96:a7:9a:44:a9:5a:b6:53:3e:2f:2c:d3:
                    7e:40:cb:5b:04:1d:f5:3e:b8:bb:15:02:22:43:5f:
                    c7:ce:92:45:6a:f8:6d:52:c2:fc:f9:87:17:41:8a:
                    25:95:35:2e:f2:5a:14:08:b3:ba:f2:63:74:71:0d:
                    3c:5e:f3:a5:e6:ad:64:68:56:3a:03:a9:ab:0f:c2:
                    7d:1d:3c:c4:06:fa:ff:d2:b2:ab:94:db:7e:11:ea:
                    5b:07:a0:1b:aa:41:cd:e7:b8:8f:0a:a2:36:7c:e3:
                    04:fe:36:14:11:f0:19:1a:9f:7e:c2:7a:4d:9c:c7:
                    dd:53:41:c0:78:20:71:3b:11:b3:32:62:e9:d1:42:
                    8c:cc:3a:ce:a7:06:0b:c2:71:30:8d:1a:48:0c:04:
                    18:b7:dc:a9:fb:32:96:eb:ce:a7:73:52:b3:31:ff:
                    f2:d5:4a:0d:ca:7c:e4:02:90:39:73:b2:f9:b9:1e:
                    d1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:08:27:74:C7:7B:10:82:95:D7:2A:DC:26:D4:F2:C7:2C:C5:AD:61
            X509v3 Authority Key Identifier:
                keyid:9B:98:FC:CD:FC:87:54:3A:62:9F:87:54:49:3A:02:65:27:EB:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/9B98FCCDFC87543A629F8754493A026527EBF528.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B98FCCDFC87543A629F8754493A026527EBF528.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0664BDCE7FE8DF6FD6B137F86607E9B491099BC625ED90BC37BB9FC8000AFCAF/0/3139302e3131342e382e302f32332d3233203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:27:f9:70:bf:3f:d8:a9:be:65:f5:30:4d:b9:4e:cc:82:d8:
         ef:f0:e6:10:90:83:cf:44:43:f9:4a:cb:92:46:4f:38:d8:07:
         ec:23:9e:59:b1:a9:c1:be:eb:45:89:21:3a:69:2b:cc:71:b5:
         f3:84:92:9f:cc:3e:b7:ad:92:bc:44:19:2d:00:61:56:03:de:
         be:c1:3c:f5:9d:ea:d6:f6:ee:66:49:e9:19:e8:53:98:6c:70:
         5b:ba:11:84:41:2b:ba:f5:24:3b:87:b0:03:46:e2:67:9e:df:
         36:2f:3f:9a:b5:15:a3:21:55:8a:90:74:bc:b1:d6:94:85:41:
         01:ef:47:ff:11:a7:69:a5:58:dc:7b:ae:ab:58:3d:37:70:39:
         b3:1a:4c:17:bb:44:31:0f:1c:c4:48:87:00:b7:94:b8:a2:bc:
         32:f1:71:33:76:ca:40:ee:ce:e6:9d:3f:cd:36:28:62:c1:5c:
         5c:98:81:e4:05:50:d0:8e:b4:8e:7c:03:bc:49:fc:f9:6b:75:
         b7:ac:77:ad:56:92:5a:1d:6e:90:f8:aa:1b:32:ea:c2:3a:16:
         35:cc:de:5f:f3:c5:88:55:b1:bf:a5:35:c4:6e:4b:f7:e8:43:
         77:4d:b1:42:af:b9:14:35:5a:8e:10:43:71:e3:a5:21:50:8c:
         6e:6c:39:c4
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIULvIo3ten50/cAM3xTmzOaZMZpzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI5OEZDQ0RGQzg3NTQzQTYyOUY4NzU0NDkzQTAyNjUy
N0VCRjUyODAeFw0yNTAyMDQxODM3MTdaFw0yNjAyMDMxODQyMTdaMDMxMTAvBgNV
BAMTKEQ5MDgyNzc0Qzc3QjEwODI5NUQ3MkFEQzI2RDRGMkM3MkNDNUFENjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXNzTWZVaP0KXeCmYEwucsHj0V
q1NzwbcDBznnk6st5JG6KC4dcXp/M1OhQTIEu2V9lzSQbA7Psdz5l54VkmP/jJKy
q+qijcEi2CQ/Y5anmkSpWrZTPi8s035Ay1sEHfU+uLsVAiJDX8fOkkVq+G1Swvz5
hxdBiiWVNS7yWhQIs7ryY3RxDTxe86XmrWRoVjoDqasPwn0dPMQG+v/SsquU234R
6lsHoBuqQc3nuI8KojZ84wT+NhQR8Bkan37Cek2cx91TQcB4IHE7EbMyYunRQozM
Os6nBgvCcTCNGkgMBBi33Kn7MpbrzqdzUrMx//LVSg3KfOQCkDlzsvm5HtErAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQU2QgndMd7EIKV1yrcJtTyxyzFrWEwHwYDVR0j
BBgwFoAUm5j8zfyHVDpin4dUSToCZSfr9SgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNjY0QkRDRTdGRThERjZGRDZCMTM3Rjg2NjA3RTlCNDkx
MDk5QkM2MjVFRDkwQkMzN0JCOUZDODAwMEFGQ0FGLzAvOUI5OEZDQ0RGQzg3NTQz
QTYyOUY4NzU0NDkzQTAyNjUyN0VCRjUyOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85Qjk4RkNDREZDODc1NDNBNjI5
Rjg3NTQ0OTNBMDI2NTI3RUJGNTI4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDY2NEJEQ0U3RkU4REY2RkQ2QjEzN0Y4NjYwN0U5QjQ5MTA5OUJDNjI1
RUQ5MEJDMzdCQjlGQzgwMDBBRkNBRi8wLzMxMzkzMDJlMzEzMTM0MmUzODJlMzAy
ZjMyMzMyZDMyMzMyMDNkM2UyMDM4MzEzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvnIIMA0GCSqG
SIb3DQEBCwUAA4IBAQBjJ/lwvz/Yqb5l9TBNuU7Mgtjv8OYQkIPPREP5SsuSRk84
2AfsI55ZsanBvutFiSE6aSvMcbXzhJKfzD63rZK8RBktAGFWA96+wTz1nerW9u5m
SekZ6FOYbHBbuhGEQSu69SQ7h7ADRuJnnt82Lz+atRWjIVWKkHS8sdaUhUEB70f/
EadppVjce66rWD03cDmzGkwXu0QxDxzESIcAt5S4orwy8XEzdspA7s7mnT/NNihi
wVxcmIHkBVDQjrSOfAO8Sfz5a3W3rHetVpJaHW6Q+KobMurCOhY1zN5f88WIVbG/
pTXEbkv36EN3TbFCr7kUNVqOEENx46UhUIxubDnE
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:58 2025 by rpki-client