Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3232342e302f31392d3234203d3e203237393833.roa
File:                     3139302e3130332e3232342e302f31392d3234203d3e203237393833.roa (raw, json)
Hash identifier:          5rL/aPrIAtjkO+Oj0Zm+emqTsU2Cf7N+W5gUm8QSUhY=
Subject key identifier:   BD:6D:D7:98:CA:0B:DA:87:95:FF:4C:40:DE:1C:93:BB:20:5B:7D:A7
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       0B6724EA1341A265B773FB25F0E62E356A5D9837
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3232342e302f31392d3234203d3e203237393833.roa
Signing time:             Tue 04 Feb 2025 18:30:42 +0000
ROA not before:           Tue 04 Feb 2025 18:25:42 +0000
ROA not after:            Tue 03 Feb 2026 18:30:42 +0000
asID:                     27983
IP address blocks:        190.103.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:67:24:ea:13:41:a2:65:b7:73:fb:25:f0:e6:2e:35:6a:5d:98:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Feb  4 18:25:42 2025 GMT
            Not After : Feb  3 18:30:42 2026 GMT
        Subject: CN=BD6DD798CA0BDA8795FF4C40DE1C93BB205B7DA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:54:05:d9:7f:fb:4f:4d:9c:82:9c:6d:a7:f0:
                    5d:08:f1:5b:20:30:36:dd:50:2d:81:e8:22:87:6e:
                    ef:52:b5:0f:5f:31:bb:f0:79:18:0a:30:ac:dd:e2:
                    de:2a:25:cf:68:0b:ca:f4:e9:89:04:1d:c1:ef:5e:
                    0f:58:c5:0e:fa:79:a8:2b:eb:08:17:c1:b5:35:c3:
                    39:82:32:fe:3f:32:fd:17:30:80:77:2c:75:7c:59:
                    0d:ce:b9:f2:09:e7:8e:2d:7a:b2:6c:01:a6:ed:84:
                    55:05:70:9e:65:1a:79:b9:c4:13:51:9e:d6:84:cb:
                    34:93:58:f8:b1:e7:63:43:df:05:b8:7a:2c:a0:31:
                    68:4a:bb:f8:42:d5:f1:d3:02:42:76:70:ac:e6:17:
                    e0:a8:f2:03:81:8c:ec:63:d7:74:15:09:53:8a:c4:
                    77:51:a6:3c:65:a0:1a:03:10:b2:a0:ad:ae:5d:e1:
                    e6:86:c1:e7:23:ed:aa:31:b3:89:42:0e:2e:ca:c4:
                    83:31:1a:e5:47:22:91:f7:99:0b:20:ed:10:17:55:
                    f9:45:6f:74:da:a0:bf:ed:f5:1a:ed:ec:a7:42:a8:
                    1e:e0:4b:e7:09:10:87:0e:0a:84:9b:9f:d0:ef:c2:
                    3c:7d:74:13:e6:1c:3d:f2:4d:fd:d7:e4:c1:24:4b:
                    80:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:6D:D7:98:CA:0B:DA:87:95:FF:4C:40:DE:1C:93:BB:20:5B:7D:A7
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3139302e3130332e3232342e302f31392d3234203d3e203237393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:19:8a:b3:bb:a2:89:48:17:0f:f4:d5:11:91:a2:31:83:
         a2:c6:a7:38:c7:3c:eb:b8:a8:5b:c8:36:bf:94:98:72:ca:b4:
         dd:7f:1f:a1:d9:0c:93:1b:7a:23:38:a4:8d:7f:be:39:8a:d2:
         24:d1:03:08:fc:cb:d3:80:48:51:0e:02:fb:dd:44:04:70:5c:
         6a:ed:9e:d3:46:dd:9c:68:8c:4c:92:f1:47:28:fb:d2:f4:ed:
         25:4a:9e:64:90:a2:81:3c:5c:97:48:45:48:84:70:78:24:0b:
         79:7b:63:c8:41:b8:6d:5a:13:40:86:a7:bc:31:15:8a:dd:70:
         3f:98:e7:d1:d5:ad:68:a4:85:1e:04:37:88:96:8b:e7:3b:e3:
         33:19:3a:ed:1a:57:a5:d8:9f:28:79:f2:77:21:c4:66:5e:d9:
         ea:d8:30:7b:4f:4f:44:5c:5a:97:ae:7a:83:17:55:77:80:87:
         4e:33:00:40:11:43:67:bf:54:7e:45:cf:50:b1:90:a2:e3:95:
         eb:47:21:5e:50:01:92:85:41:f4:fc:e6:d3:70:8a:e0:d6:8c:
         e4:3a:84:81:5b:e4:ae:cf:87:ad:46:88:36:ee:e7:3e:34:54:
         5b:5a:d2:de:95:9f:ed:b8:30:18:f8:d7:77:05:41:1d:16:90:
         74:d2:41:70
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUC2ck6hNBomW3c/sl8OYuNWpdmDcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFDMzVCOUNGNDVCRERBQkU4MjlBOUY3OEJDMjREQzU4
QUZEN0VDQTAeFw0yNTAyMDQxODI1NDJaFw0yNjAyMDMxODMwNDJaMDMxMTAvBgNV
BAMTKEJENkRENzk4Q0EwQkRBODc5NUZGNEM0MERFMUM5M0JCMjA1QjdEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWVAXZf/tPTZyCnG2n8F0I8Vsg
MDbdUC2B6CKHbu9StQ9fMbvweRgKMKzd4t4qJc9oC8r06YkEHcHvXg9YxQ76eagr
6wgXwbU1wzmCMv4/Mv0XMIB3LHV8WQ3OufIJ544terJsAabthFUFcJ5lGnm5xBNR
ntaEyzSTWPix52ND3wW4eiygMWhKu/hC1fHTAkJ2cKzmF+Co8gOBjOxj13QVCVOK
xHdRpjxloBoDELKgra5d4eaGwecj7aoxs4lCDi7KxIMxGuVHIpH3mQsg7RAXVflF
b3TaoL/t9Rrt7KdCqB7gS+cJEIcOCoSbn9Dvwjx9dBPmHD3yTf3X5MEkS4DzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvW3XmMoL2oeV/0xA3hyTuyBbfacwHwYDVR0j
BBgwFoAU8cNbnPRb3avoKan3i8JNxYr9fsowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQThEMzJEREVCNDcyN0EzNEQ3ODFFNDJGODFFMzA4NDY5
MkU5QTMyQ0EwMkM2QzUyQTVCQTQxMENFMTkwRjRCLzAvRjFDMzVCOUNGNDVCRERB
QkU4MjlBOUY3OEJDMjREQzU4QUZEN0VDQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMUMzNUI5Q0Y0NUJEREFCRTgy
OUE5Rjc4QkMyNERDNThBRkQ3RUNBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E4RDMyRERFQjQ3MjdBMzRENzgxRTQyRjgxRTMwODQ2OTJFOUEzMkNB
MDJDNkM1MkE1QkE0MTBDRTE5MEY0Qi8wLzMxMzkzMDJlMzEzMDMzMmUzMjMyMzQy
ZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzMjM3MzkzODMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFvmfg
MA0GCSqGSIb3DQEBCwUAA4IBAQAlnBmKs7uiiUgXD/TVEZGiMYOixqc4xzzruKhb
yDa/lJhyyrTdfx+h2QyTG3ojOKSNf745itIk0QMI/MvTgEhRDgL73UQEcFxq7Z7T
Rt2caIxMkvFHKPvS9O0lSp5kkKKBPFyXSEVIhHB4JAt5e2PIQbhtWhNAhqe8MRWK
3XA/mOfR1a1opIUeBDeIlovnO+MzGTrtGlel2J8oefJ3IcRmXtnq2DB7T09EXFqX
rnqDF1V3gIdOMwBAEUNnv1R+Rc9QsZCi45XrRyFeUAGShUH0/ObTcIrg1ozkOoSB
W+Suz4etRog27uc+NFRbWtLelZ/tuDAY+Nd3BUEdFpB00kFw
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:01 2025 by rpki-client