Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa
File:                     3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          BGQILorhFZSnPEcU4xf1yJSyhmxLT6i1Xz3qCwZNkmY=
Subject key identifier:   52:24:AB:0F:A3:4B:9F:1D:61:05:D4:24:79:7A:85:54:96:E8:B9:7D
Certificate issuer:       /CN=B29AFE85DC197D537BB9426875AD7F12DC402702
Certificate serial:       38B17CBE63A29A7ECFC50C440D686D38DF1C0C07
Authority key identifier: B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa
Signing time:             Tue 04 Feb 2025 18:09:08 +0000
ROA not before:           Tue 04 Feb 2025 18:04:08 +0000
ROA not after:            Tue 03 Feb 2026 18:09:08 +0000
asID:                     262234
IP address blocks:        190.185.114.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b1:7c:be:63:a2:9a:7e:cf:c5:0c:44:0d:68:6d:38:df:1c:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B29AFE85DC197D537BB9426875AD7F12DC402702
        Validity
            Not Before: Feb  4 18:04:08 2025 GMT
            Not After : Feb  3 18:09:08 2026 GMT
        Subject: CN=5224AB0FA34B9F1D6105D424797A855496E8B97D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:7d:3b:8d:3f:43:1a:03:d9:16:90:5f:54:
                    81:0e:86:e5:64:90:86:8c:1e:64:24:24:b4:e7:3d:
                    2f:d3:e9:49:ed:99:91:36:41:2b:ad:ef:52:da:41:
                    a1:f9:17:48:2d:63:dd:5f:a1:a7:66:17:bc:b2:d7:
                    35:a1:1b:a4:77:97:bc:3c:a8:0e:41:77:90:2f:13:
                    bc:ab:e3:90:8a:2b:c9:dc:75:fe:98:14:95:fa:a2:
                    c7:b2:76:f4:0c:51:4e:5a:fb:8e:6d:6c:d1:f5:5e:
                    e3:cd:10:85:e5:a6:1f:97:e3:96:d2:96:44:a8:92:
                    2d:76:80:b5:42:fe:38:17:fc:70:7d:c5:dc:c7:7a:
                    a2:56:54:1d:d9:3e:31:3f:04:14:00:19:0a:2f:51:
                    1c:11:ce:39:f8:82:76:7d:e6:1e:52:de:3c:0b:f9:
                    75:a3:2f:4b:9d:0f:00:00:54:b5:03:24:53:48:59:
                    3f:b8:0c:cb:ee:89:ca:e1:a9:1d:66:5c:1e:87:97:
                    f4:a4:ac:b1:71:3d:33:59:70:6e:6c:84:1b:af:75:
                    6d:22:a9:c3:50:9a:d6:bf:f4:42:4b:d3:be:05:cf:
                    68:4d:cd:4c:96:8c:0e:3b:68:d2:37:a2:14:f5:00:
                    ce:4c:fc:a0:14:81:b1:e2:81:8a:99:5d:ae:26:1f:
                    22:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:24:AB:0F:A3:4B:9F:1D:61:05:D4:24:79:7A:85:54:96:E8:B9:7D
            X509v3 Authority Key Identifier:
                keyid:B2:9A:FE:85:DC:19:7D:53:7B:B9:42:68:75:AD:7F:12:DC:40:27:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/B29AFE85DC197D537BB9426875AD7F12DC402702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B29AFE85DC197D537BB9426875AD7F12DC402702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/564B58A038166080E27F2369888EA0EEEEBFD78862419C16539E7084BF120C43/0/3139302e3138352e3131342e302f32342d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:28:96:25:e4:33:3d:5b:c0:e0:66:00:bb:29:e2:18:df:a5:
         58:2e:1f:35:09:82:54:7f:de:90:5b:a8:d4:d5:9c:f1:e6:65:
         6d:5b:c6:bc:e5:23:fc:8e:92:35:4c:ba:05:4c:69:1c:0a:69:
         14:a0:5e:38:39:82:f0:e0:9b:fe:e0:9e:d8:a5:c2:36:61:79:
         bd:ab:35:3d:4d:fe:ad:9b:b2:d8:2b:95:7f:d2:a0:bc:04:20:
         99:5b:bd:17:83:f6:1e:98:c1:29:ce:00:7e:62:2f:4e:0d:03:
         36:a9:2c:59:4d:91:e8:16:b8:9e:70:0b:12:d8:c0:58:02:2a:
         c9:bb:f9:ea:07:37:3a:9e:cd:df:0b:76:71:60:9a:84:1d:6e:
         44:74:79:f8:f2:79:1c:e3:ae:e4:a7:00:6d:13:65:63:86:e9:
         cd:d8:ed:98:38:05:46:ce:65:39:00:d1:ea:33:21:a9:94:aa:
         56:51:48:41:26:62:1d:1c:94:47:c3:db:b3:f3:ec:30:92:c6:
         47:76:37:29:a8:71:03:95:b5:25:44:54:ac:b5:53:78:42:2b:
         a0:06:66:14:7a:91:25:63:72:7f:7f:37:f1:24:a7:e2:39:a5:
         06:00:26:ac:63:ca:c8:10:db:4b:11:70:95:4d:77:34:42:8d:
         e6:ea:3c:ab
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUOLF8vmOimn7PxQxEDWhtON8cDAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI5QUZFODVEQzE5N0Q1MzdCQjk0MjY4NzVBRDdGMTJE
QzQwMjcwMjAeFw0yNTAyMDQxODA0MDhaFw0yNjAyMDMxODA5MDhaMDMxMTAvBgNV
BAMTKDUyMjRBQjBGQTM0QjlGMUQ2MTA1RDQyNDc5N0E4NTU0OTZFOEI5N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyy307jT9DGgPZFpBfVIEOhuVk
kIaMHmQkJLTnPS/T6UntmZE2QSut71LaQaH5F0gtY91foadmF7yy1zWhG6R3l7w8
qA5Bd5AvE7yr45CKK8ncdf6YFJX6oseydvQMUU5a+45tbNH1XuPNEIXlph+X45bS
lkSoki12gLVC/jgX/HB9xdzHeqJWVB3ZPjE/BBQAGQovURwRzjn4gnZ95h5S3jwL
+XWjL0udDwAAVLUDJFNIWT+4DMvuicrhqR1mXB6Hl/SkrLFxPTNZcG5shBuvdW0i
qcNQmta/9EJL074Fz2hNzUyWjA47aNI3ohT1AM5M/KAUgbHigYqZXa4mHyKdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUUiSrD6NLnx1hBdQkeXqFVJbouX0wHwYDVR0j
BBgwFoAUspr+hdwZfVN7uUJoda1/EtxAJwIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjRCNThBMDM4MTY2MDgwRTI3RjIzNjk4ODhFQTBFRUVF
QkZENzg4NjI0MTlDMTY1MzlFNzA4NEJGMTIwQzQzLzAvQjI5QUZFODVEQzE5N0Q1
MzdCQjk0MjY4NzVBRDdGMTJEQzQwMjcwMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMjlBRkU4NURDMTk3RDUzN0JC
OTQyNjg3NUFEN0YxMkRDNDAyNzAyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTY0QjU4QTAzODE2NjA4MEUyN0YyMzY5ODg4RUEwRUVFRUJGRDc4ODYy
NDE5QzE2NTM5RTcwODRCRjEyMEM0My8wLzMxMzkzMDJlMzEzODM1MmUzMTMxMzQy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
uXIwDQYJKoZIhvcNAQELBQADggEBABcoliXkMz1bwOBmALsp4hjfpVguHzUJglR/
3pBbqNTVnPHmZW1bxrzlI/yOkjVMugVMaRwKaRSgXjg5gvDgm/7gntilwjZheb2r
NT1N/q2bstgrlX/SoLwEIJlbvReD9h6YwSnOAH5iL04NAzapLFlNkegWuJ5wCxLY
wFgCKsm7+eoHNzqezd8LdnFgmoQdbkR0efjyeRzjruSnAG0TZWOG6c3Y7Zg4BUbO
ZTkA0eozIamUqlZRSEEmYh0clEfD27Pz7DCSxkd2NymocQOVtSVEVKy1U3hCK6AG
ZhR6kSVjcn9/N/Ekp+I5pQYAJqxjysgQ20sRcJVNdzRCjebqPKs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:48 2025 by rpki-client