Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231352e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231352e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          mmtXmEMAMSin7Uq51iyl6w47jcZfLAtaI8TcyO/ua4E=
Subject key identifier:   42:15:A8:24:DC:D1:0D:AD:3E:51:BB:4E:C6:32:3A:7E:19:2C:56:BD
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       08B78266BD6F8BEEFDB75CEB03153666839EC2FE
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231352e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 04 Feb 2025 18:28:37 +0000
ROA not before:           Tue 04 Feb 2025 18:23:37 +0000
ROA not after:            Tue 03 Feb 2026 18:28:37 +0000
asID:                     52253
IP address blocks:        190.108.215.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b7:82:66:bd:6f:8b:ee:fd:b7:5c:eb:03:15:36:66:83:9e:c2:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Feb  4 18:23:37 2025 GMT
            Not After : Feb  3 18:28:37 2026 GMT
        Subject: CN=4215A824DCD10DAD3E51BB4EC6323A7E192C56BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cb:0e:9a:8c:e3:2e:37:39:58:ac:f2:32:fb:
                    f2:25:5b:dd:19:f5:ae:4d:74:8d:9a:f9:e4:ce:41:
                    e3:8c:c5:da:8b:d3:44:c2:f1:3d:8e:0c:ad:77:a1:
                    2f:64:8d:b2:83:bf:8d:19:11:6d:fd:ea:ef:01:48:
                    6b:bc:2c:2e:08:d9:4f:05:a4:f2:4f:2e:3c:4b:6a:
                    5e:11:6a:6b:3a:17:bd:df:0c:64:41:57:68:cc:73:
                    61:79:03:29:f2:ff:cb:69:92:ba:92:01:19:8f:d8:
                    c4:82:b2:7e:37:ff:19:16:b7:be:b3:dd:f7:dd:84:
                    30:92:ed:a7:c8:3a:7f:99:65:48:c4:d8:8d:27:24:
                    14:c1:64:40:b1:63:9f:09:a7:cb:34:dd:01:fd:2e:
                    00:93:92:2b:e9:9f:6c:74:92:63:6f:a6:cb:98:3f:
                    85:a6:4a:c2:bb:f4:82:ed:18:c8:c8:9f:42:4a:b8:
                    7f:36:5a:e0:9c:46:60:ee:05:53:e8:8f:10:b5:03:
                    b5:5e:d3:3b:c6:0c:79:66:7d:af:16:d7:2d:15:2b:
                    75:1b:8e:96:51:17:0c:f2:07:e9:0c:b5:03:dc:38:
                    b9:da:66:c7:8b:68:bb:bd:96:e9:2f:70:43:ff:ba:
                    54:3f:af:0c:55:8a:b4:82:85:02:cc:ea:db:5a:db:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:A8:24:DC:D1:0D:AD:3E:51:BB:4E:C6:32:3A:7E:19:2C:56:BD
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231352e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:cb:e5:52:d1:06:2c:03:03:01:25:f9:b5:a3:74:f1:39:38:
         86:f8:94:ec:dc:8e:a1:59:10:ca:42:2c:10:46:b4:bb:dc:e5:
         6a:21:14:b5:9e:7c:78:e7:a6:7d:a9:61:07:d6:ae:e9:c7:90:
         1c:b0:4d:29:60:7c:56:f1:d3:c3:f6:bc:de:fc:a8:cb:d5:5e:
         4d:b1:7a:29:65:93:97:74:77:6d:9c:cc:1f:33:b6:40:c3:02:
         a5:29:04:92:af:6f:bc:9b:9a:6d:a8:4a:d0:3f:8a:29:41:e5:
         c8:57:65:65:5e:27:3a:22:7f:b2:87:c5:1d:09:81:e5:c4:aa:
         43:bc:42:37:fc:f1:0a:d0:44:21:c1:28:72:26:1b:af:bb:b0:
         7f:13:a6:c2:c6:0f:bc:48:a8:be:41:09:e4:51:b9:40:d5:c4:
         87:fc:28:02:08:20:09:cf:42:a3:90:1d:96:90:f1:32:f1:31:
         fd:22:57:b9:80:5b:e3:9e:67:7c:79:20:b7:69:bd:a1:e1:48:
         3c:46:a4:14:d0:ed:04:2d:ec:66:3b:9f:3e:75:8a:3a:7c:1b:
         6d:69:b5:d1:d9:bb:c4:d4:70:7c:4f:03:9a:5d:42:9a:83:cd:
         7d:16:b6:95:88:a5:95:28:a4:bb:6e:a4:f9:b3:7a:1c:1d:e8:
         30:a3:be:7c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUCLeCZr1vi+79t1zrAxU2ZoOewv4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDMwQjhDQzFFQzMwREM2RUYzQkY1OTM2OURBQTZGODVD
MDIyQkMxNDAeFw0yNTAyMDQxODIzMzdaFw0yNjAyMDMxODI4MzdaMDMxMTAvBgNV
BAMTKDQyMTVBODI0RENEMTBEQUQzRTUxQkI0RUM2MzIzQTdFMTkyQzU2QkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZyw6ajOMuNzlYrPIy+/IlW90Z
9a5NdI2a+eTOQeOMxdqL00TC8T2ODK13oS9kjbKDv40ZEW396u8BSGu8LC4I2U8F
pPJPLjxLal4Rams6F73fDGRBV2jMc2F5Ayny/8tpkrqSARmP2MSCsn43/xkWt76z
3ffdhDCS7afIOn+ZZUjE2I0nJBTBZECxY58Jp8s03QH9LgCTkivpn2x0kmNvpsuY
P4WmSsK79ILtGMjIn0JKuH82WuCcRmDuBVPojxC1A7Ve0zvGDHlmfa8W1y0VK3Ub
jpZRFwzyB+kMtQPcOLnaZseLaLu9lukvcEP/ulQ/rwxVirSChQLM6tta27pXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQhWoJNzRDa0+UbtOxjI6fhksVr0wHwYDVR0j
BBgwFoAUQwuMweww3G7zv1k2napvhcAivBQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MzZGRjZEOEQ4RUM2M0UxNkIyRkVDNDQxMUI2ODVFODlD
ODMxQzRFMTkyNEMwRDE2QTVCRjFEOUZGRDk2NUVFLzAvNDMwQjhDQzFFQzMwREM2
RUYzQkY1OTM2OURBQTZGODVDMDIyQkMxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80MzBCOENDMUVDMzBEQzZFRjNC
RjU5MzY5REFBNkY4NUMwMjJCQzE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjM2RkY2RDhEOEVDNjNFMTZCMkZFQzQ0MTFCNjg1RTg5QzgzMUM0RTE5
MjRDMEQxNkE1QkYxRDlGRkQ5NjVFRS8wLzMxMzkzMDJlMzEzMDM4MmUzMjMxMzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzIzNTMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvmzX
MA0GCSqGSIb3DQEBCwUAA4IBAQB5y+VS0QYsAwMBJfm1o3TxOTiG+JTs3I6hWRDK
QiwQRrS73OVqIRS1nnx456Z9qWEH1q7px5AcsE0pYHxW8dPD9rze/KjL1V5NsXop
ZZOXdHdtnMwfM7ZAwwKlKQSSr2+8m5ptqErQP4opQeXIV2VlXic6In+yh8UdCYHl
xKpDvEI3/PEK0EQhwShyJhuvu7B/E6bCxg+8SKi+QQnkUblA1cSH/CgCCCAJz0Kj
kB2WkPEy8TH9Ile5gFvjnmd8eSC3ab2h4Ug8RqQU0O0ELexmO58+dYo6fBttabXR
2bvE1HB8TwOaXUKag819FraViKWVKKS7bqT5s3ocHegwo758
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:35 2025 by rpki-client