Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa
File:                     3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa (raw, json)
Hash identifier:          N3NJpeUu+N3QzHRpIf5Ye47rEQXnLM5qsupyo3TVLtU=
Subject key identifier:   4D:84:4E:ED:7A:03:FF:59:C0:31:8C:D2:75:91:34:D4:FD:63:89:59
Certificate issuer:       /CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
Certificate serial:       396804CF359A57A035E4ED72EB402D242A1CD74D
Authority key identifier: 9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa
Signing time:             Tue 04 Feb 2025 18:40:43 +0000
ROA not before:           Tue 04 Feb 2025 18:35:43 +0000
ROA not after:            Tue 03 Feb 2026 18:40:43 +0000
asID:                     269931
IP address blocks:        190.110.35.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:68:04:cf:35:9a:57:a0:35:e4:ed:72:eb:40:2d:24:2a:1c:d7:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3
        Validity
            Not Before: Feb  4 18:35:43 2025 GMT
            Not After : Feb  3 18:40:43 2026 GMT
        Subject: CN=4D844EED7A03FF59C0318CD2759134D4FD638959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:a7:73:64:c2:54:62:2d:92:0b:ae:d0:d9:
                    6c:ac:31:76:3d:8d:71:37:30:f5:76:8f:80:72:a9:
                    38:63:a8:b0:1d:f3:43:3a:dd:d0:44:92:ef:71:a8:
                    ca:a9:13:ec:75:61:9c:e5:f1:a3:d6:55:04:f4:61:
                    75:c8:af:43:18:4a:52:8f:4f:63:47:4f:93:e7:26:
                    81:8b:4c:ab:96:d5:a2:51:90:09:b1:c1:28:1f:58:
                    38:1a:a7:b6:fa:77:d5:7f:bb:4c:1e:17:bc:84:2e:
                    10:d3:3e:74:63:12:ec:4d:6c:a1:23:07:5b:db:30:
                    f9:10:6e:b9:9b:05:67:9a:4e:d1:a3:71:6f:29:71:
                    ae:9a:77:7c:03:9b:e5:d3:12:ee:9f:41:53:c7:ab:
                    73:20:a0:f8:bb:7f:ac:47:23:05:53:5c:97:36:10:
                    f3:22:3a:dc:6a:5c:3b:e4:09:7f:12:13:a2:7e:79:
                    e1:e3:d3:f7:d7:37:a4:14:42:b6:33:64:94:de:8a:
                    33:8b:b1:86:38:37:49:5a:af:e9:2e:96:da:5f:37:
                    02:20:64:a0:79:20:2e:fa:58:4b:fa:f4:63:05:b1:
                    a5:04:6d:aa:45:51:92:85:9a:ba:7f:7e:5b:4b:a5:
                    1b:2b:67:11:82:c9:77:1f:97:b7:52:66:44:3c:0d:
                    d5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:84:4E:ED:7A:03:FF:59:C0:31:8C:D2:75:91:34:D4:FD:63:89:59
            X509v3 Authority Key Identifier:
                keyid:9F:65:C4:A0:CB:01:A2:D6:47:B2:27:7C:58:09:7F:EF:E3:D8:0A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F65C4A0CB01A2D647B2277C58097FEFE3D80AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2A20CC709CA1D69F74BBA7E6E87FF5DD4B3783F9CA1824D2A782004E591867AB/0/3139302e3131302e33352e302f32342d3234203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:4b:4d:c0:ca:66:56:6c:12:f0:2b:13:42:25:72:f3:6a:aa:
         95:c0:83:78:18:1e:8d:c1:d7:43:32:c9:68:d2:c5:61:1a:1b:
         85:a3:6a:e9:62:75:e3:68:4c:f5:16:54:49:f4:7c:4f:f3:6d:
         32:4a:d2:32:7f:95:dd:11:76:62:ce:4a:14:44:3b:fa:44:49:
         a2:36:51:32:02:d2:0f:12:2f:f9:91:18:c4:bb:d4:33:f9:0a:
         cc:81:78:89:b7:32:44:3d:65:0e:ac:2c:f4:be:02:2f:da:9e:
         09:39:8b:eb:7e:2d:70:73:b5:02:38:f7:b3:ac:66:77:a5:76:
         ad:8a:59:9c:ac:08:fa:5b:55:a7:1f:1f:57:34:60:b8:a7:3c:
         f3:10:13:6e:5f:c2:c6:90:02:b6:0f:2d:50:99:f2:1b:0c:21:
         63:b8:1a:e2:4d:f7:50:56:78:f6:6f:c1:f4:f5:5a:56:a9:e6:
         27:72:42:7e:4c:a0:d0:af:26:67:9a:06:de:22:91:c6:b2:e9:
         65:3f:7b:c1:9c:a1:8f:e0:41:bb:2d:d9:62:30:11:f5:9a:57:
         04:7a:16:77:8c:f2:1e:89:a1:cf:77:ea:4e:ff:2a:b4:60:80:
         dc:27:d8:57:b5:d5:24:4f:a5:92:82:c9:f2:23:4b:39:24:3e:
         60:a0:87:b8
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOWgEzzWaV6A15O1y60AtJCoc100wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2NUM0QTBDQjAxQTJENjQ3QjIyNzdDNTgwOTdGRUZF
M0Q4MEFDMzAeFw0yNTAyMDQxODM1NDNaFw0yNjAyMDMxODQwNDNaMDMxMTAvBgNV
BAMTKDREODQ0RUVEN0EwM0ZGNTlDMDMxOENEMjc1OTEzNEQ0RkQ2Mzg5NTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUKdzZMJUYi2SC67Q2WysMXY9
jXE3MPV2j4ByqThjqLAd80M63dBEku9xqMqpE+x1YZzl8aPWVQT0YXXIr0MYSlKP
T2NHT5PnJoGLTKuW1aJRkAmxwSgfWDgap7b6d9V/u0weF7yELhDTPnRjEuxNbKEj
B1vbMPkQbrmbBWeaTtGjcW8pca6ad3wDm+XTEu6fQVPHq3MgoPi7f6xHIwVTXJc2
EPMiOtxqXDvkCX8SE6J+eeHj0/fXN6QUQrYzZJTeijOLsYY4N0lar+kultpfNwIg
ZKB5IC76WEv69GMFsaUEbapFUZKFmrp/fltLpRsrZxGCyXcfl7dSZkQ8DdXdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUTYRO7XoD/1nAMYzSdZE01P1jiVkwHwYDVR0j
BBgwFoAUn2XEoMsBotZHsid8WAl/7+PYCsMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQTIwQ0M3MDlDQTFENjlGNzRCQkE3RTZFODdGRjVERDRC
Mzc4M0Y5Q0ExODI0RDJBNzgyMDA0RTU5MTg2N0FCLzAvOUY2NUM0QTBDQjAxQTJE
NjQ3QjIyNzdDNTgwOTdGRUZFM0Q4MEFDMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjY1QzRBMENCMDFBMkQ2NDdC
MjI3N0M1ODA5N0ZFRkUzRDgwQUMzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkEyMENDNzA5Q0ExRDY5Rjc0QkJBN0U2RTg3RkY1REQ0QjM3ODNGOUNB
MTgyNEQyQTc4MjAwNEU1OTE4NjdBQi8wLzMxMzkzMDJlMzEzMTMwMmUzMzM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5MzkzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvm4j
MA0GCSqGSIb3DQEBCwUAA4IBAQBPS03AymZWbBLwKxNCJXLzaqqVwIN4GB6NwddD
Mslo0sVhGhuFo2rpYnXjaEz1FlRJ9HxP820yStIyf5XdEXZizkoURDv6REmiNlEy
AtIPEi/5kRjEu9Qz+QrMgXiJtzJEPWUOrCz0vgIv2p4JOYvrfi1wc7UCOPezrGZ3
pXatilmcrAj6W1WnHx9XNGC4pzzzEBNuX8LGkAK2Dy1QmfIbDCFjuBriTfdQVnj2
b8H09VpWqeYnckJ+TKDQryZnmgbeIpHGsullP3vBnKGP4EG7LdliMBH1mlcEehZ3
jPIeiaHPd+pO/yq0YIDcJ9hXtdUkT6WSgsnyI0s5JD5goIe4
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:27 2025 by rpki-client