Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3234203d3e20383334.roa
File:                     3139302e39332e3130362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          JatsxwR5sOWP30cOTO69+d40GwtKg79vG5AZMZM/Aa0=
Subject key identifier:   A5:8F:68:28:7B:D0:95:8A:A5:EC:01:7D:EE:B2:FE:D7:F4:7B:BD:44
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       282AFAF6339A7D359A1214C1DE448EB8D9AF9298
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3234203d3e20383334.roa
Signing time:             Fri 10 Jan 2025 12:20:00 +0000
ROA not before:           Fri 10 Jan 2025 12:15:00 +0000
ROA not after:            Fri 09 Jan 2026 12:20:00 +0000
asID:                     834
IP address blocks:        190.93.106.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2a:fa:f6:33:9a:7d:35:9a:12:14:c1:de:44:8e:b8:d9:af:92:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan 10 12:15:00 2025 GMT
            Not After : Jan  9 12:20:00 2026 GMT
        Subject: CN=A58F68287BD0958AA5EC017DEEB2FED7F47BBD44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:66:99:a3:e6:7b:18:9f:83:03:b3:2e:ef:a6:
                    db:51:ec:63:da:fc:73:d3:70:fc:d7:43:f6:07:3d:
                    25:52:5e:93:50:70:64:d1:7d:bd:ad:75:fb:c0:7e:
                    23:2d:46:3a:94:90:3f:31:72:3c:17:b5:59:9d:91:
                    a4:46:55:1e:4d:e0:a1:a7:1d:94:b9:1a:cd:24:d9:
                    25:8d:d5:b9:12:dc:eb:55:6a:83:8c:21:30:27:45:
                    62:dc:d1:74:e9:8e:6b:6b:00:15:7a:b9:86:06:07:
                    06:65:30:d0:5e:d3:c7:c6:39:c7:b0:5d:92:eb:b7:
                    fa:0a:e6:bf:e3:ba:10:59:f7:42:02:60:5a:88:1d:
                    91:0a:e9:ae:a5:ea:51:e2:36:0b:c9:59:41:45:03:
                    03:2d:2d:26:ec:ec:a5:55:50:a7:08:61:7f:98:2a:
                    3c:d5:38:f5:9c:00:01:6d:0b:19:1b:5f:a5:c3:73:
                    31:a5:ac:f9:d5:e5:1b:a2:34:70:cb:d8:71:bd:82:
                    c5:81:de:e2:5a:de:cd:5e:19:41:28:3a:91:5d:00:
                    e8:ec:79:39:98:f4:92:76:35:dc:e9:61:a5:7a:d0:
                    56:8c:81:01:34:75:8c:07:cd:80:c0:8c:0c:8f:16:
                    ee:4d:d3:d1:ac:a1:5d:c1:d5:71:c1:e3:26:5c:0e:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:68:28:7B:D0:95:8A:A5:EC:01:7D:EE:B2:FE:D7:F4:7B:BD:44
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3130362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:e2:32:be:b2:3e:d1:7a:c4:46:28:dc:fc:81:ed:1e:e9:30:
         16:5a:8e:b1:3d:26:1b:6a:da:d4:fd:85:12:8e:78:29:56:96:
         86:22:f6:5f:e3:17:e3:18:2e:33:13:da:9e:ff:28:a9:4f:d2:
         32:01:b9:b2:78:1c:d5:4a:6f:3a:85:1c:c8:96:99:47:7b:66:
         ec:27:f1:49:8c:d8:0f:1f:94:9a:7c:44:3f:31:7b:2c:de:54:
         7a:29:d1:ab:88:9f:b2:bb:de:51:0f:ad:11:21:93:31:bc:17:
         5e:c4:f1:a4:96:22:19:c0:0d:b7:4d:3a:56:c1:d9:ac:2d:ea:
         12:9c:d9:8a:fe:8b:cc:64:97:5d:dd:82:63:32:f4:90:3e:3d:
         c4:24:ce:fa:14:ec:81:8f:01:ff:c9:c3:99:50:8f:08:7a:78:
         51:42:3a:9b:cc:26:90:1a:2a:67:9c:01:ad:d0:72:46:cb:39:
         33:e9:e9:07:91:a3:04:bb:4c:57:c6:2c:d8:9c:2c:fd:1f:c7:
         04:73:4c:14:b9:7b:cc:40:ae:da:ae:c3:78:a9:ae:43:25:7f:
         97:eb:1d:09:b3:54:3c:24:17:fd:02:6d:4c:5f:0d:22:31:84:
         c1:50:8c:4a:07:f1:f2:a6:5c:56:03:f9:84:07:2c:d6:76:96:
         8c:78:72:b3
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUKCr69jOafTWaEhTB3kSOuNmvkpgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAxMTAxMjE1MDBaFw0yNjAxMDkxMjIwMDBaMDMxMTAvBgNV
BAMTKEE1OEY2ODI4N0JEMDk1OEFBNUVDMDE3REVFQjJGRUQ3RjQ3QkJENDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOZpmj5nsYn4MDsy7vpttR7GPa
/HPTcPzXQ/YHPSVSXpNQcGTRfb2tdfvAfiMtRjqUkD8xcjwXtVmdkaRGVR5N4KGn
HZS5Gs0k2SWN1bkS3OtVaoOMITAnRWLc0XTpjmtrABV6uYYGBwZlMNBe08fGOcew
XZLrt/oK5r/juhBZ90ICYFqIHZEK6a6l6lHiNgvJWUFFAwMtLSbs7KVVUKcIYX+Y
KjzVOPWcAAFtCxkbX6XDczGlrPnV5RuiNHDL2HG9gsWB3uJa3s1eGUEoOpFdAOjs
eTmY9JJ2NdzpYaV60FaMgQE0dYwHzYDAjAyPFu5N09GsoV3B1XHB4yZcDoqRAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUpY9oKHvQlYql7AF97rL+1/R7vUQwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMDM2MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvl1qMA0GCSqG
SIb3DQEBCwUAA4IBAQBe4jK+sj7ResRGKNz8ge0e6TAWWo6xPSYbatrU/YUSjngp
VpaGIvZf4xfjGC4zE9qe/yipT9IyAbmyeBzVSm86hRzIlplHe2bsJ/FJjNgPH5Sa
fEQ/MXss3lR6KdGriJ+yu95RD60RIZMxvBdexPGkliIZwA23TTpWwdmsLeoSnNmK
/ovMZJdd3YJjMvSQPj3EJM76FOyBjwH/ycOZUI8IenhRQjqbzCaQGipnnAGt0HJG
yzkz6ekHkaMEu0xXxizYnCz9H8cEc0wUuXvMQK7arsN4qa5DJX+X6x0Js1Q8JBf9
Am1MXw0iMYTBUIxKB/HyplxWA/mEByzWdpaMeHKz
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:41 2025 by rpki-client