Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
File:                     3139302e3132322e33322e302f32302d3233203d3e203237393630.roa (raw, json)
Hash identifier:          jyMC+YBQSc1Eqxg79JQ8uNyRjcFOJnWdeQMKAAkWt8M=
Subject key identifier:   8C:A5:90:C0:E1:9F:C3:1E:B5:1B:03:60:DE:43:D6:C6:75:6C:3F:BF
Certificate issuer:       /CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
Certificate serial:       7EF612896449B0389F553278D1D23683D586C1AF
Authority key identifier: DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa
Signing time:             Tue 04 Feb 2025 18:31:04 +0000
ROA not before:           Tue 04 Feb 2025 18:26:04 +0000
ROA not after:            Tue 03 Feb 2026 18:31:04 +0000
asID:                     27960
IP address blocks:        190.122.32.0/20 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f6:12:89:64:49:b0:38:9f:55:32:78:d1:d2:36:83:d5:86:c1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666
        Validity
            Not Before: Feb  4 18:26:04 2025 GMT
            Not After : Feb  3 18:31:04 2026 GMT
        Subject: CN=8CA590C0E19FC31EB51B0360DE43D6C6756C3FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cc:21:8c:69:65:5d:a6:3a:13:d0:f3:17:83:
                    d5:92:23:92:80:16:d4:a1:ef:2f:a5:95:f2:00:a6:
                    bc:36:96:8e:1e:a4:59:88:3f:e7:13:6e:d7:e4:cd:
                    39:6d:7d:ce:a4:6d:1d:18:c8:04:c0:cf:ee:91:f8:
                    21:43:66:6c:ff:03:9d:5d:3c:b0:92:4b:a6:45:af:
                    01:75:10:79:ec:eb:97:a7:61:4f:14:04:43:32:ea:
                    00:6e:42:75:0d:4a:b2:41:4f:c8:44:fb:4b:3a:bc:
                    0a:7c:27:34:08:b1:b4:99:11:8a:97:75:5a:35:00:
                    1c:72:cc:4d:85:83:2f:c4:b7:30:c6:ae:99:b2:61:
                    ba:34:77:31:bc:54:eb:7b:e9:ac:59:64:c1:e5:95:
                    d9:08:9e:0c:03:5f:b7:bf:f0:98:25:97:00:3b:d1:
                    eb:44:c8:de:05:1a:87:0d:c6:88:59:df:02:4b:ad:
                    d2:b5:c9:63:df:56:35:bd:60:db:46:2d:78:31:e9:
                    be:3f:91:ac:7e:fe:b2:98:02:ed:3b:0f:8b:a6:e1:
                    cd:54:50:a8:cf:03:e0:f6:ac:ed:1e:3b:d6:31:66:
                    05:cd:42:8e:ed:45:09:d4:59:fa:0e:eb:bd:91:ff:
                    e9:db:77:3f:dd:27:71:0a:81:35:8c:aa:9b:53:a0:
                    ad:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A5:90:C0:E1:9F:C3:1E:B5:1B:03:60:DE:43:D6:C6:75:6C:3F:BF
            X509v3 Authority Key Identifier:
                keyid:DB:9F:A7:7F:7E:5E:5E:28:CC:59:5B:CF:2F:0E:48:E0:A4:63:36:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB9FA77F7E5E5E28CC595BCF2F0E48E0A4633666.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CAB157650586FD2C3F96F16D5026C1F08DA7C09C411B94461F8E8AA89292E21/0/3139302e3132322e33322e302f32302d3233203d3e203237393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         76:05:16:4d:a4:a5:8d:8b:08:4c:67:92:8b:13:90:6b:d0:da:
         2b:16:87:f6:b7:b7:55:80:bc:35:2e:7a:9f:a2:2e:07:c4:c7:
         f5:9f:38:a1:28:49:fa:83:88:bf:6b:33:20:39:a5:4f:95:76:
         45:dd:9c:ee:d9:9b:ff:8f:3a:4a:0c:bc:aa:bd:db:a9:14:c0:
         40:de:3a:6d:f6:8c:06:d2:10:a7:42:9c:14:8a:ee:3d:f4:d5:
         23:ae:1b:00:27:9a:cd:6b:4b:a4:a3:13:0b:ef:9a:6d:d8:af:
         9e:fb:96:1e:4f:e9:14:4d:c0:e7:7f:5d:3c:6b:93:1c:94:07:
         0b:de:26:6b:e5:f9:52:97:6d:56:f2:f8:56:aa:6e:6a:8d:f9:
         8d:27:09:12:32:0d:98:8a:76:19:87:6e:a3:73:88:8d:c7:40:
         c2:d8:7b:bd:15:f0:40:04:df:5f:b9:74:9d:b5:05:fe:02:20:
         09:33:2c:a9:a5:0c:ec:c6:73:35:27:4c:12:7a:57:ba:34:78:
         70:58:d9:05:ac:5f:c9:07:8e:18:5a:90:b7:f6:a4:dd:89:5f:
         5d:ae:39:ca:f0:8c:b7:f9:91:ad:67:a5:ab:4c:74:7c:33:8f:
         29:21:b1:d9:71:c6:8b:80:f5:27:3f:93:ce:6e:6e:83:dd:93:
         e9:db:ab:da
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUfvYSiWRJsDifVTJ40dI2g9WGwa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI5RkE3N0Y3RTVFNUUyOENDNTk1QkNGMkYwRTQ4RTBB
NDYzMzY2NjAeFw0yNTAyMDQxODI2MDRaFw0yNjAyMDMxODMxMDRaMDMxMTAvBgNV
BAMTKDhDQTU5MEMwRTE5RkMzMUVCNTFCMDM2MERFNDNENkM2NzU2QzNGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSzCGMaWVdpjoT0PMXg9WSI5KA
FtSh7y+llfIAprw2lo4epFmIP+cTbtfkzTltfc6kbR0YyATAz+6R+CFDZmz/A51d
PLCSS6ZFrwF1EHns65enYU8UBEMy6gBuQnUNSrJBT8hE+0s6vAp8JzQIsbSZEYqX
dVo1ABxyzE2Fgy/EtzDGrpmyYbo0dzG8VOt76axZZMHlldkIngwDX7e/8JgllwA7
0etEyN4FGocNxohZ3wJLrdK1yWPfVjW9YNtGLXgx6b4/kax+/rKYAu07D4um4c1U
UKjPA+D2rO0eO9YxZgXNQo7tRQnUWfoO672R/+nbdz/dJ3EKgTWMqptToK0RAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUjKWQwOGfwx61GwNg3kPWxnVsP78wHwYDVR0j
BBgwFoAU25+nf35eXijMWVvPLw5I4KRjNmYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQ0FCMTU3NjUwNTg2RkQyQzNGOTZGMTZENTAyNkMxRjA4
REE3QzA5QzQxMUI5NDQ2MUY4RThBQTg5MjkyRTIxLzAvREI5RkE3N0Y3RTVFNUUy
OENDNTk1QkNGMkYwRTQ4RTBBNDYzMzY2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjlGQTc3RjdFNUU1RTI4Q0M1
OTVCQ0YyRjBFNDhFMEE0NjMzNjY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUNBQjE1NzY1MDU4NkZEMkMzRjk2RjE2RDUwMjZDMUYwOERBN0MwOUM0
MTFCOTQ0NjFGOEU4QUE4OTI5MkUyMS8wLzMxMzkzMDJlMzEzMjMyMmUzMzMyMmUz
MDJmMzIzMDJkMzIzMzIwM2QzZTIwMzIzNzM5MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL56IDAN
BgkqhkiG9w0BAQsFAAOCAQEAdgUWTaSljYsITGeSixOQa9DaKxaH9re3VYC8NS56
n6IuB8TH9Z84oShJ+oOIv2szIDmlT5V2Rd2c7tmb/486Sgy8qr3bqRTAQN46bfaM
BtIQp0KcFIruPfTVI64bACeazWtLpKMTC++abdivnvuWHk/pFE3A539dPGuTHJQH
C94ma+X5UpdtVvL4Vqpuao35jScJEjINmIp2GYduo3OIjcdAwth7vRXwQATfX7l0
nbUF/gIgCTMsqaUM7MZzNSdMEnpXujR4cFjZBaxfyQeOGFqQt/ak3YlfXa45yvCM
t/mRrWelq0x0fDOPKSGx2XHGi4D1Jz+Tzm5ug92T6dur2g==
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:19:22 2025 by rpki-client