Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135312e302f32342d3234203d3e203138363738.roa
File:                     3139302e39302e3135312e302f32342d3234203d3e203138363738.roa (raw, json)
Hash identifier:          begjIO6V4aNE70NJzCTjUZO7VzhtCSpzLf4Oqb5LqNc=
Subject key identifier:   0B:78:D3:44:D2:D9:98:6F:47:8D:11:C9:10:97:A9:B2:71:C7:2C:B3
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       69B9DA9894A0127E2AC2E4AFB34F807EED9995A4
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135312e302f32342d3234203d3e203138363738.roa
Signing time:             Tue 04 Feb 2025 18:17:25 +0000
ROA not before:           Tue 04 Feb 2025 18:12:25 +0000
ROA not after:            Tue 03 Feb 2026 18:17:25 +0000
asID:                     18678
IP address blocks:        190.90.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b9:da:98:94:a0:12:7e:2a:c2:e4:af:b3:4f:80:7e:ed:99:95:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:25 2025 GMT
            Not After : Feb  3 18:17:25 2026 GMT
        Subject: CN=0B78D344D2D9986F478D11C91097A9B271C72CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:aa:9a:b4:7a:74:f0:c8:63:99:c8:9d:3b:8f:
                    18:23:02:15:d9:eb:0a:cb:3e:d5:cc:2f:2a:84:81:
                    a2:b2:68:4b:63:c1:62:03:a7:47:b2:f6:7e:2a:2f:
                    51:f5:76:e9:91:93:1e:8b:8a:29:87:d2:e4:5d:29:
                    da:39:be:96:43:1f:97:3f:38:72:40:b3:3d:57:cf:
                    86:00:06:65:e9:0a:6f:31:66:4a:d0:c2:2e:ed:61:
                    29:53:64:b7:ef:6f:48:42:27:25:23:03:ca:92:4b:
                    d4:dd:e4:62:3e:36:d6:d6:0e:5a:41:36:1d:f4:e1:
                    8b:2f:74:7b:fa:10:7f:ba:36:5c:06:39:b7:35:82:
                    81:f0:6b:fb:7c:16:5e:c5:74:f7:40:cc:ea:3d:e2:
                    69:9f:f6:79:1f:d0:02:ca:f7:73:fb:93:be:f2:f8:
                    be:10:64:1e:ac:d1:c8:eb:2c:2a:95:82:08:ff:83:
                    21:75:a6:fd:bd:ee:99:62:3e:7c:ee:76:f8:8d:a5:
                    f4:9b:f6:8c:c9:f7:70:31:f7:3e:e1:71:68:0e:f3:
                    40:06:82:9a:83:54:6a:9b:7d:b5:02:f1:04:43:e5:
                    bf:70:05:40:dd:f6:47:4b:f7:dc:4d:ce:8d:67:5a:
                    33:31:14:69:e0:f2:e1:b6:d1:6a:c1:61:7d:43:77:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:78:D3:44:D2:D9:98:6F:47:8D:11:C9:10:97:A9:B2:71:C7:2C:B3
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3135312e302f32342d3234203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:2c:95:88:7c:58:e0:cc:84:07:ec:b3:31:0d:0a:aa:c5:
         4c:f8:8a:14:95:27:61:47:2a:66:73:69:cb:0e:39:26:d6:6b:
         92:42:20:85:60:a1:0d:1b:c9:e1:b1:d1:b4:77:01:8e:57:9e:
         cf:26:35:5a:d4:06:6b:2b:38:d9:f2:d1:6a:8f:84:16:e5:d2:
         5f:6a:9d:53:6e:59:39:24:0e:9d:60:71:8a:5b:89:88:40:1f:
         e8:7f:b7:2e:b0:cb:a9:31:6a:4e:8c:ce:6d:96:51:62:d5:39:
         90:b0:c1:ff:f2:c6:65:b9:ca:82:66:23:91:28:2a:0b:df:6e:
         d8:30:3d:3f:3e:61:e9:d8:92:28:8e:bd:c1:63:ec:9d:7c:ab:
         ec:79:80:de:a7:32:34:17:8f:7a:58:7d:37:b3:3e:39:54:b2:
         e4:ce:7b:2b:5f:de:46:55:d3:57:35:72:64:70:6e:0f:90:87:
         41:ef:25:72:87:c4:a0:c0:be:e5:0a:26:d1:4f:c3:12:9f:6d:
         21:35:79:fb:2c:a5:81:e6:50:e2:79:11:cf:4b:1a:3e:51:1e:
         8c:6f:e3:9e:21:ab:42:5f:e6:4d:76:78:04:ee:7d:4a:8c:59:
         d1:e9:62:de:27:3c:56:f0:e1:2d:97:10:0f:57:26:77:fe:15:
         f6:e4:a9:cc
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUabnamJSgEn4qwuSvs0+Afu2ZlaQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMjVaFw0yNjAyMDMxODE3MjVaMDMxMTAvBgNV
BAMTKDBCNzhEMzQ0RDJEOTk4NkY0NzhEMTFDOTEwOTdBOUIyNzFDNzJDQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqpq0enTwyGOZyJ07jxgjAhXZ
6wrLPtXMLyqEgaKyaEtjwWIDp0ey9n4qL1H1dumRkx6LiimH0uRdKdo5vpZDH5c/
OHJAsz1Xz4YABmXpCm8xZkrQwi7tYSlTZLfvb0hCJyUjA8qSS9Td5GI+NtbWDlpB
Nh304YsvdHv6EH+6NlwGObc1goHwa/t8Fl7FdPdAzOo94mmf9nkf0ALK93P7k77y
+L4QZB6s0cjrLCqVggj/gyF1pv297pliPnzudviNpfSb9ozJ93Ax9z7hcWgO80AG
gpqDVGqbfbUC8QRD5b9wBUDd9kdL99xNzo1nWjMxFGng8uG20WrBYX1Dd4GZAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUC3jTRNLZmG9HjRHJEJepsnHHLLMwHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzNTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODM2MzczOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5alzAN
BgkqhkiG9w0BAQsFAAOCAQEAW/oslYh8WODMhAfsszENCqrFTPiKFJUnYUcqZnNp
yw45JtZrkkIghWChDRvJ4bHRtHcBjleezyY1WtQGays42fLRao+EFuXSX2qdU25Z
OSQOnWBxiluJiEAf6H+3LrDLqTFqTozObZZRYtU5kLDB//LGZbnKgmYjkSgqC99u
2DA9Pz5h6diSKI69wWPsnXyr7HmA3qcyNBePelh9N7M+OVSy5M57K1/eRlXTVzVy
ZHBuD5CHQe8lcofEoMC+5Qom0U/DEp9tITV5+yylgeZQ4nkRz0saPlEejG/jniGr
Ql/mTXZ4BO59SoxZ0eli3ic8VvDhLZcQD1cmd/4V9uSpzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:59:59 2025 by rpki-client