Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          tnkNITQIHjb0ALdmbo/sWpDt4tu5RhUqVoRlS9ZbpUA=
Subject key identifier:   5F:87:4D:40:ED:03:3B:E9:03:3C:AC:87:84:5C:DF:13:FA:F9:4F:EC
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       31E6D72686788998E707F5457C0570B656BAEBD9
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:42 +0000
ROA not before:           Tue 04 Feb 2025 18:23:42 +0000
ROA not after:            Tue 03 Feb 2026 18:28:42 +0000
asID:                     52253
IP address blocks:        190.108.206.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e6:d7:26:86:78:89:98:e7:07:f5:45:7c:05:70:b6:56:ba:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:42 2025 GMT
            Not After : Feb  3 18:28:42 2026 GMT
        Subject: CN=5F874D40ED033BE9033CAC87845CDF13FAF94FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:00:94:97:eb:73:7b:64:ea:ee:14:2c:3c:d7:
                    7f:3e:13:76:d6:4d:1c:af:8e:cc:09:90:12:f2:ee:
                    d8:9e:29:6d:2c:ff:8a:7a:b4:cd:ea:0f:32:63:c1:
                    20:56:de:4b:be:99:01:26:59:5a:12:76:0d:59:bb:
                    1f:19:ae:f8:eb:f4:40:b9:c4:8a:97:f3:a8:8a:9d:
                    1a:90:b0:2e:b4:e9:5e:49:e2:b7:4b:cc:f7:52:e9:
                    b8:52:75:d8:94:ff:d3:86:85:a2:cd:90:d7:60:3d:
                    c0:a4:75:97:04:c6:09:7c:94:4f:f2:f8:d7:c4:e0:
                    30:34:a5:be:57:a8:a5:07:cf:e0:6a:fa:e1:f7:a1:
                    83:1b:43:8d:93:23:ba:15:36:c4:d9:23:ca:f8:7e:
                    f5:61:ad:d2:5e:55:12:85:c3:04:20:0d:ab:7d:1b:
                    3f:85:89:8e:75:36:04:c2:a0:51:2e:b1:1a:ea:99:
                    4a:40:03:3d:6f:f8:26:07:dd:37:eb:9a:af:1d:a7:
                    2a:53:e0:0f:8d:31:00:d0:c3:61:1e:43:07:34:d2:
                    7d:ee:18:a3:0e:f5:cc:96:8b:ca:60:77:9e:1e:45:
                    71:78:2c:f7:f4:3a:69:b0:cd:e8:a8:e1:82:8b:ee:
                    e6:3e:a6:d7:2a:9b:fa:09:cd:0f:cf:67:79:1d:cd:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:87:4D:40:ED:03:3B:E9:03:3C:AC:87:84:5C:DF:13:FA:F9:4F:EC
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230362e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:c5:26:62:c7:c6:7d:e4:e3:53:cd:b8:02:bb:2b:a0:9c:28:
         e2:59:8c:fd:a0:6c:ab:35:34:23:71:e5:39:86:c8:23:7e:22:
         43:f3:e1:05:2f:93:97:1c:f4:fe:5e:e1:9d:3c:b1:a0:65:d4:
         41:90:a6:59:5c:68:ff:42:60:b9:23:ec:77:3f:5a:ab:36:f0:
         97:14:fd:cc:e1:e6:3e:4b:68:e8:b8:b1:bd:8b:dc:17:d8:54:
         d0:00:d8:1a:0b:4b:dd:c8:10:f9:1f:06:81:64:9b:ac:ba:53:
         d4:68:7b:5f:82:9a:cc:a5:b1:8a:3f:26:41:f2:4e:59:1d:58:
         08:cc:0a:52:a4:37:19:78:e8:bd:49:1b:89:2a:2d:85:a5:b2:
         83:d8:aa:c8:c2:aa:89:de:d5:4d:01:dd:20:0f:fe:b2:30:61:
         d3:a4:0e:d3:5f:37:63:be:ec:29:76:79:6b:79:ac:15:29:7c:
         62:e2:7b:e1:64:b8:75:7f:aa:7e:35:89:5d:3e:90:ea:c5:10:
         42:93:4b:01:2c:3d:2a:b7:f6:14:2b:8c:b0:32:20:27:8c:51:
         0d:81:97:1c:8e:1c:3a:00:4a:8b:ba:99:19:e9:b1:7a:ad:31:
         39:63:89:10:2d:9c:f0:ba:51:a2:e5:9f:76:dc:c2:35:59:d8:
         2c:be:37:d5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMebXJoZ4iZjnB/VFfAVwtla669kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNTAyMDQxODIzNDJaFw0yNjAyMDMxODI4NDJaMDMxMTAvBgNV
BAMTKDVGODc0RDQwRUQwMzNCRTkwMzNDQUM4Nzg0NUNERjEzRkFGOTRGRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4AJSX63N7ZOruFCw8138+E3bW
TRyvjswJkBLy7tieKW0s/4p6tM3qDzJjwSBW3ku+mQEmWVoSdg1Zux8Zrvjr9EC5
xIqX86iKnRqQsC606V5J4rdLzPdS6bhSddiU/9OGhaLNkNdgPcCkdZcExgl8lE/y
+NfE4DA0pb5XqKUHz+Bq+uH3oYMbQ42TI7oVNsTZI8r4fvVhrdJeVRKFwwQgDat9
Gz+FiY51NgTCoFEusRrqmUpAAz1v+CYH3Tfrmq8dpypT4A+NMQDQw2EeQwc00n3u
GKMO9cyWi8pgd54eRXF4LPf0Ommwzeio4YKL7uY+ptcqm/oJzQ/PZ3kdzaB3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUX4dNQO0DO+kDPKyHhFzfE/r5T+wwHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMwMzYy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzO
MA0GCSqGSIb3DQEBCwUAA4IBAQBvxSZix8Z95ONTzbgCuyugnCjiWYz9oGyrNTQj
ceU5hsgjfiJD8+EFL5OXHPT+XuGdPLGgZdRBkKZZXGj/QmC5I+x3P1qrNvCXFP3M
4eY+S2jouLG9i9wX2FTQANgaC0vdyBD5HwaBZJusulPUaHtfgprMpbGKPyZB8k5Z
HVgIzApSpDcZeOi9SRuJKi2FpbKD2KrIwqqJ3tVNAd0gD/6yMGHTpA7TXzdjvuwp
dnlreawVKXxi4nvhZLh1f6p+NYldPpDqxRBCk0sBLD0qt/YUK4ywMiAnjFENgZcc
jhw6AEqLupkZ6bF6rTE5Y4kQLZzwulGi5Z923MI1WdgsvjfV
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:40 2025 by rpki-client