Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130322e302f32342d3234203d3e20323731393335.roa
File:                     3139302e39332e3130322e302f32342d3234203d3e20323731393335.roa (raw, json)
Hash identifier:          GffDC4SB6QWp6elJpgdM7/oWmw6W06mdOCosxG6VNv0=
Subject key identifier:   9A:39:9A:79:F4:97:2B:A1:56:6C:4C:F9:51:5B:74:84:F2:51:5E:CA
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       5BBF3225591538A01F413063294ED82CE21A5402
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130322e302f32342d3234203d3e20323731393335.roa
Signing time:             Mon 16 Dec 2024 11:40:01 +0000
ROA not before:           Mon 16 Dec 2024 11:35:01 +0000
ROA not after:            Mon 15 Dec 2025 11:40:01 +0000
asID:                     271935
IP address blocks:        190.93.102.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bf:32:25:59:15:38:a0:1f:41:30:63:29:4e:d8:2c:e2:1a:54:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Dec 16 11:35:01 2024 GMT
            Not After : Dec 15 11:40:01 2025 GMT
        Subject: CN=9A399A79F4972BA1566C4CF9515B7484F2515ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:1a:b6:36:fb:93:f1:36:dd:6b:02:a3:f8:
                    7c:8d:0d:b3:a9:2f:99:b5:7c:b9:96:9b:8a:c1:1f:
                    a9:7f:c4:f2:54:18:b8:9f:33:bd:e0:d8:64:20:e6:
                    a8:3d:8d:5b:2e:1e:22:f7:e2:14:9e:19:c8:b7:7e:
                    d6:1a:e1:61:41:23:79:38:2c:56:1f:c2:ea:eb:67:
                    ae:99:e9:2b:ab:ee:1a:f1:82:75:91:96:b2:38:e0:
                    ad:02:d4:8e:3b:21:fd:b5:28:52:2b:fb:7e:e0:39:
                    f9:af:3e:cb:9f:71:0b:6c:be:1d:74:af:eb:25:70:
                    cf:5a:c8:38:03:4a:62:9b:e1:65:4e:50:b6:88:c3:
                    0c:5d:ac:99:a5:45:ca:cc:61:11:e3:af:23:44:ae:
                    4b:f6:ce:5f:41:41:fd:09:27:c2:de:29:42:bc:20:
                    38:fc:58:6b:7e:b4:a7:a2:76:30:67:27:59:d7:af:
                    0f:c6:1d:1f:78:12:42:c1:cd:ec:65:ef:d1:34:b0:
                    45:47:20:cf:6b:65:56:07:6c:6a:33:00:00:d5:b1:
                    12:dd:f2:07:7a:bc:a3:68:76:8e:50:67:ed:cd:f3:
                    c8:86:1e:82:58:63:9c:77:aa:cf:1b:ad:10:93:d3:
                    c9:d3:74:31:bc:dc:6d:ee:d4:8d:0d:b2:f6:4a:b5:
                    3f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:9A:79:F4:97:2B:A1:56:6C:4C:F9:51:5B:74:84:F2:51:5E:CA
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130322e302f32342d3234203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:66:41:5a:7b:fb:b7:f9:ea:c6:a6:81:94:0d:44:45:02:31:
         95:6a:40:17:90:1e:07:a6:69:a1:d2:41:43:2b:4d:10:0c:df:
         b8:ee:bf:9b:82:fa:6c:28:ba:59:96:84:a7:db:8c:d5:6a:53:
         c5:8e:c0:9f:70:22:53:c4:3e:38:b2:f9:64:29:53:d1:1f:aa:
         71:9d:99:ac:50:1d:55:87:8f:a8:41:e2:59:2b:f7:73:ce:b6:
         40:7b:5e:96:41:6e:00:42:5d:56:a1:17:77:c9:a3:cc:a8:7d:
         a5:a8:3f:80:42:f9:6b:ac:4b:9e:a7:cd:e0:aa:7b:5a:d0:c9:
         54:6c:a7:15:4c:cd:bc:3d:14:d9:3e:b4:6f:85:47:a4:0a:e9:
         8f:0d:47:9e:67:af:4d:e4:fd:8c:7f:a6:ee:c5:f4:f9:85:4c:
         67:b3:62:8b:ed:67:d2:7e:9a:84:e6:d2:d3:4f:2e:eb:f6:53:
         67:09:75:16:f1:7d:9e:17:1f:b0:a5:aa:e8:de:8d:9e:37:dc:
         34:f4:fb:3e:cf:b9:77:a0:89:fe:99:64:0f:17:6f:9b:39:c9:
         6f:a7:64:23:10:64:d7:79:b2:5e:cb:01:03:9b:e0:7d:43:ff:
         5a:ae:81:fd:22:ef:36:64:51:c7:57:72:06:8e:7d:53:ae:12:
         a2:e1:79:be
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUW78yJVkVOKAfQTBjKU7YLOIaVAIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNDEyMTYxMTM1MDFaFw0yNTEyMTUxMTQwMDFaMDMxMTAvBgNV
BAMTKDlBMzk5QTc5RjQ5NzJCQTE1NjZDNENGOTUxNUI3NDg0RjI1MTVFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnPRq2NvuT8TbdawKj+HyNDbOp
L5m1fLmWm4rBH6l/xPJUGLifM73g2GQg5qg9jVsuHiL34hSeGci3ftYa4WFBI3k4
LFYfwurrZ66Z6Sur7hrxgnWRlrI44K0C1I47If21KFIr+37gOfmvPsufcQtsvh10
r+slcM9ayDgDSmKb4WVOULaIwwxdrJmlRcrMYRHjryNErkv2zl9BQf0JJ8LeKUK8
IDj8WGt+tKeidjBnJ1nXrw/GHR94EkLBzexl79E0sEVHIM9rZVYHbGozAADVsRLd
8gd6vKNodo5QZ+3N88iGHoJYY5x3qs8brRCT08nTdDG83G3u1I0NsvZKtT+XAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmjmaefSXK6FWbEz5UVt0hPJRXsowHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMDMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMzM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl1m
MA0GCSqGSIb3DQEBCwUAA4IBAQA0ZkFae/u3+erGpoGUDURFAjGVakAXkB4Hpmmh
0kFDK00QDN+47r+bgvpsKLpZloSn24zValPFjsCfcCJTxD44svlkKVPRH6pxnZms
UB1Vh4+oQeJZK/dzzrZAe16WQW4AQl1WoRd3yaPMqH2lqD+AQvlrrEuep83gqnta
0MlUbKcVTM28PRTZPrRvhUekCumPDUeeZ69N5P2Mf6buxfT5hUxns2KL7WfSfpqE
5tLTTy7r9lNnCXUW8X2eFx+wparo3o2eN9w09Ps+z7l3oIn+mWQPF2+bOclvp2Qj
EGTXebJeywEDm+B9Q/9aroH9Iu82ZFHHV3IGjn1TrhKi4Xm+
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:23 2025 by rpki-client