Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231322e302f32322d3234203d3e20323632313931.roa
File:                     3139302e3133312e3231322e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          noo2PL4ENwDmY8qFeMFtHL0W1fSmLpkHkQCdye/jPi8=
Subject key identifier:   6D:99:5A:B5:90:A7:52:DC:72:2D:07:CC:79:20:F4:3E:6F:66:6C:D4
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4610D6847DC3F85EFC7787C1F94B2A693951BD83
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231322e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:34 +0000
ROA not before:           Tue 04 Feb 2025 19:59:34 +0000
ROA not after:            Tue 03 Feb 2026 20:04:34 +0000
asID:                     262191
IP address blocks:        190.131.212.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:10:d6:84:7d:c3:f8:5e:fc:77:87:c1:f9:4b:2a:69:39:51:bd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:34 2025 GMT
            Not After : Feb  3 20:04:34 2026 GMT
        Subject: CN=6D995AB590A752DC722D07CC7920F43E6F666CD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:cd:5c:3d:19:5c:c1:f1:66:66:76:c9:94:
                    43:7b:08:cb:8a:56:36:6b:cf:9f:22:22:dd:b4:dc:
                    f6:f1:a6:32:90:dd:10:d6:ce:04:9a:7f:2a:1c:70:
                    e2:a4:bc:1d:2e:44:0b:4c:fc:e2:0b:02:a4:97:83:
                    bf:82:c4:f8:1c:2b:4c:12:0d:3e:41:86:34:5a:5c:
                    16:99:03:2a:a6:62:e8:5c:de:fa:e1:2e:d0:6f:72:
                    31:74:35:22:e2:33:74:6f:db:9d:26:35:50:cc:a5:
                    85:05:51:7e:e6:58:39:94:da:83:86:c7:31:b2:f6:
                    df:e0:7b:ef:ad:b3:48:47:d4:ed:b1:3b:2e:b8:87:
                    8b:9f:97:f4:54:67:4e:9c:a8:48:d2:1e:98:89:7c:
                    23:fc:43:13:9f:11:dc:b6:b4:51:25:33:d3:b0:19:
                    c5:a4:cd:21:b2:10:8f:8c:f1:94:13:17:08:ec:2f:
                    7e:8c:1b:eb:31:34:ed:c4:35:52:d8:b0:c4:72:bb:
                    7d:6e:17:7b:d3:8c:7f:7b:70:88:f2:c5:94:83:14:
                    3c:24:ef:c2:eb:4e:da:bc:87:1e:31:53:a8:22:8b:
                    7c:43:9f:3d:e9:6c:f1:1d:52:c7:a3:de:a7:7e:74:
                    12:a9:49:1c:98:5b:43:3d:07:f7:b0:c4:ac:a2:ba:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:99:5A:B5:90:A7:52:DC:72:2D:07:CC:79:20:F4:3E:6F:66:6C:D4
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3231322e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:02:ea:4b:95:9e:23:67:fd:85:21:4d:d9:a6:b1:e5:74:79:
         30:86:f7:88:f2:4e:2d:b0:2d:dd:da:ff:eb:f5:60:54:d8:f7:
         84:27:28:49:d4:3a:39:c1:ac:97:23:6d:15:5e:db:45:7b:93:
         05:e0:60:3d:dd:07:f5:f7:59:70:8a:34:3b:99:18:0f:e2:4d:
         cc:59:c9:bc:00:52:d8:f7:63:6f:ae:b4:b6:00:3d:d5:e7:fe:
         46:2a:2a:6a:a0:af:58:64:f9:f5:94:18:5e:64:c3:f9:6b:4e:
         61:31:a9:db:d7:72:47:7d:00:e6:e5:15:94:1e:29:48:58:80:
         ac:59:5b:10:37:43:1d:55:2f:d1:4b:97:b6:72:8d:52:cf:9c:
         04:b8:48:17:f5:27:49:a4:7b:b7:08:de:ce:14:a8:14:52:53:
         77:61:f9:80:72:73:3e:f6:6c:c6:4c:79:2a:3d:29:8c:20:34:
         f7:f0:b8:60:a7:0e:7d:0f:fd:b6:80:ab:2a:22:25:47:eb:fc:
         18:d9:a2:86:65:14:a5:94:f0:06:0a:8b:a7:84:20:f4:28:80:
         0d:e1:a9:c1:4c:e0:91:0e:e6:ab:e7:ad:ed:62:ea:e8:bd:b7:
         96:1d:57:a2:f3:67:2a:87:85:f5:6c:2c:71:e7:5c:96:35:31:
         a0:52:23:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:16 2025 by rpki-client