Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3139302e3131332e3234342e302f32322d3234203d3e203532343339.roa
File:                     3139302e3131332e3234342e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          21AnHj2J/40/dB3JfECZ6XUvjF8OtLER4J7XMOf847o=
Subject key identifier:   56:DF:6C:48:F2:F9:37:98:42:35:7D:40:2F:F5:78:CA:48:F2:EB:05
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       194F0F466895110C5DCA0868163D1C05088AD24C
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3139302e3131332e3234342e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:52:58 +0000
ROA not before:           Tue 04 Feb 2025 18:47:58 +0000
ROA not after:            Tue 03 Feb 2026 18:52:58 +0000
asID:                     52439
IP address blocks:        190.113.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:4f:0f:46:68:95:11:0c:5d:ca:08:68:16:3d:1c:05:08:8a:d2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Feb  4 18:47:58 2025 GMT
            Not After : Feb  3 18:52:58 2026 GMT
        Subject: CN=56DF6C48F2F9379842357D402FF578CA48F2EB05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:10:68:24:37:61:47:57:5e:fc:28:96:4d:
                    20:bd:ae:89:62:93:ab:09:4b:6b:a4:6b:32:d1:88:
                    02:9e:46:38:33:58:83:04:31:34:35:b3:f7:2c:d5:
                    1e:9a:72:c2:a6:a2:6d:53:ef:d0:d7:ff:38:c2:33:
                    82:c2:5d:42:2f:10:db:ab:d5:8f:d4:7b:f7:36:e2:
                    00:7b:ea:78:b2:d2:4a:85:64:be:bf:36:a4:f9:2d:
                    72:45:2e:3b:e0:30:0f:c3:d3:99:72:3e:cf:d5:99:
                    a9:6a:6f:04:80:b9:ac:00:80:30:b2:cd:7b:a4:ac:
                    d6:d8:cf:d3:e6:6c:ba:b6:24:7a:93:76:e2:d8:9f:
                    4f:1c:bc:d7:2b:7d:08:64:34:d4:6c:e9:10:a8:e7:
                    b7:db:05:8b:ba:09:d9:d3:96:83:22:7b:fa:ad:8f:
                    5e:cc:51:29:c7:88:c2:f6:e7:d9:40:b6:fe:9e:cb:
                    d3:6d:66:01:8b:5b:1b:c6:e3:d5:ed:d6:19:ac:e4:
                    c4:88:b0:d9:0a:fe:09:dd:97:16:76:db:8d:e6:00:
                    ba:7c:5a:5e:d3:2a:b8:07:28:b8:05:93:2b:77:71:
                    ad:42:d9:79:83:b1:0d:7f:de:d0:35:d3:80:13:01:
                    c6:49:d4:df:e0:66:53:30:b2:e0:ec:0a:02:4c:4d:
                    18:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:6C:48:F2:F9:37:98:42:35:7D:40:2F:F5:78:CA:48:F2:EB:05
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3139302e3131332e3234342e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f8:e3:fc:42:7d:f7:89:54:4f:5d:38:10:49:e7:f9:b0:43:
         19:16:b2:c4:5e:0c:15:86:b1:12:63:f7:50:5b:e8:f3:55:0e:
         0f:18:37:eb:2e:87:fd:34:41:05:bc:5e:93:ff:93:f5:7a:32:
         08:9a:db:db:6d:11:07:be:6f:5b:03:37:ea:ee:ae:86:90:53:
         35:c7:36:69:cc:4a:b2:06:1d:27:ef:1d:bd:e4:76:9a:a0:56:
         46:04:cf:e8:a6:8e:4c:64:c8:38:cf:e5:26:a1:04:42:f6:73:
         fa:2d:77:ce:0e:c5:d6:c2:1d:1d:60:e7:36:c8:0d:f1:7b:6d:
         46:43:dc:eb:65:39:f8:13:40:06:53:3d:da:83:2e:50:55:0f:
         0f:a9:a1:fc:6d:6a:dc:3c:ca:69:91:f8:0f:a4:9e:29:06:db:
         35:19:32:23:bc:e2:7e:16:0f:c7:cc:d1:79:47:19:7b:cb:68:
         f4:8f:b8:a1:b4:cb:37:4a:e7:d2:c8:ba:94:c3:d6:39:b7:1e:
         ad:29:1a:c5:f7:a7:f0:d0:11:a9:e2:8e:ca:84:0e:d8:e2:e6:
         21:90:d4:de:e2:91:20:f9:50:33:2a:ec:14:b5:c1:ac:2a:76:
         5b:4c:d4:c5:09:e4:cd:93:6c:b3:0a:cc:f5:1d:f3:77:08:eb:
         22:b7:d3:3c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGU8PRmiVEQxdyghoFj0cBQiK0kwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODJGRkY4RTJEMzlBQjAwNUJFMkFCODFEQTA3RUMyQjRG
NjE3NUVEQzAeFw0yNTAyMDQxODQ3NThaFw0yNjAyMDMxODUyNThaMDMxMTAvBgNV
BAMTKDU2REY2QzQ4RjJGOTM3OTg0MjM1N0Q0MDJGRjU3OENBNDhGMkVCMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJBBoJDdhR1de/CiWTSC9roli
k6sJS2ukazLRiAKeRjgzWIMEMTQ1s/cs1R6acsKmom1T79DX/zjCM4LCXUIvENur
1Y/Ue/c24gB76niy0kqFZL6/NqT5LXJFLjvgMA/D05lyPs/VmalqbwSAuawAgDCy
zXukrNbYz9PmbLq2JHqTduLYn08cvNcrfQhkNNRs6RCo57fbBYu6CdnTloMie/qt
j17MUSnHiML259lAtv6ey9NtZgGLWxvG49Xt1hms5MSIsNkK/gndlxZ2243mALp8
Wl7TKrgHKLgFkyt3ca1C2XmDsQ1/3tA104ATAcZJ1N/gZlMwsuDsCgJMTRgpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUVt9sSPL5N5hCNX1AL/V4ykjy6wUwHwYDVR0j
BBgwFoAUgv/44tOasAW+KrgdoH7CtPYXXtwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkVBRUUzRUE1RUMxMzM4MEFFOTE5MzBGNTk0NENGMDdC
RDM2MjNGOTgzRUUzMTAxOTZDNTY4OTkwQUVGODZFLzAvODJGRkY4RTJEMzlBQjAw
NUJFMkFCODFEQTA3RUMyQjRGNjE3NUVEQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MkZGRjhFMkQzOUFCMDA1QkUy
QUI4MURBMDdFQzJCNEY2MTc1RURDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJFQUVFM0VBNUVDMTMzODBBRTkxOTMwRjU5NDRDRjA3QkQzNjIzRjk4
M0VFMzEwMTk2QzU2ODk5MEFFRjg2RS8wLzMxMzkzMDJlMzEzMTMzMmUzMjM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzQzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvnH0
MA0GCSqGSIb3DQEBCwUAA4IBAQB/+OP8Qn33iVRPXTgQSef5sEMZFrLEXgwVhrES
Y/dQW+jzVQ4PGDfrLof9NEEFvF6T/5P1ejIImtvbbREHvm9bAzfq7q6GkFM1xzZp
zEqyBh0n7x295HaaoFZGBM/opo5MZMg4z+UmoQRC9nP6LXfODsXWwh0dYOc2yA3x
e21GQ9zrZTn4E0AGUz3agy5QVQ8PqaH8bWrcPMppkfgPpJ4pBts1GTIjvOJ+Fg/H
zNF5Rxl7y2j0j7ihtMs3SufSyLqUw9Y5tx6tKRrF96fw0BGp4o7KhA7Y4uYhkNTe
4pEg+VAzKuwUtcGsKnZbTNTFCeTNk2yzCsz1HfN3COsit9M8
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:23:44 2025 by rpki-client