Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20383334.roa
File:                     3139302e39332e3131322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          D7xi+jowNmGRXW6su+myWL64Sgregfj60h0vmpPgau4=
Subject key identifier:   C4:76:38:13:30:C4:17:44:A0:33:D4:07:CA:64:48:83:9C:70:AE:E5
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       19F8AF7ED94FA1F2734BBB46E6364A499ED6C4D0
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20383334.roa
Signing time:             Mon 20 Jan 2025 11:25:00 +0000
ROA not before:           Mon 20 Jan 2025 11:20:00 +0000
ROA not after:            Mon 19 Jan 2026 11:25:00 +0000
asID:                     834
IP address blocks:        190.93.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:f8:af:7e:d9:4f:a1:f2:73:4b:bb:46:e6:36:4a:49:9e:d6:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Jan 20 11:20:00 2025 GMT
            Not After : Jan 19 11:25:00 2026 GMT
        Subject: CN=C476381330C41744A033D407CA6448839C70AEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:de:61:18:10:0d:9e:a9:7c:ba:0e:29:cb:d3:
                    88:ed:01:9f:54:52:8c:43:d1:6d:04:a3:8c:57:c9:
                    e6:f6:77:dc:ff:25:81:a2:98:02:46:e3:80:22:73:
                    82:ea:8b:37:72:18:d8:01:7d:59:5e:91:9e:d6:5a:
                    be:ad:8f:83:74:28:84:8d:40:da:0d:3c:8c:fe:34:
                    e0:e5:e9:77:8c:7d:0f:ec:b4:a8:d6:40:68:31:b7:
                    da:34:f5:f0:84:47:5c:28:98:31:ad:d8:78:4b:f9:
                    c0:50:0b:5b:c4:97:a5:4a:3f:6c:c5:fa:4e:c9:25:
                    0b:d1:46:65:8a:79:6a:79:c1:b2:d4:ab:43:1a:e2:
                    ac:2b:2b:28:b0:07:f2:3c:c3:ad:d1:b5:0d:cc:21:
                    4e:57:cc:06:75:f9:0a:34:c1:c1:b7:18:b2:df:51:
                    bd:a5:64:2e:67:0f:0e:10:21:e6:ee:80:86:ad:a7:
                    04:18:7e:23:a6:80:b9:32:05:aa:e8:10:e1:04:6e:
                    d5:14:03:7a:ee:38:4f:37:09:ae:d8:12:b2:7d:9a:
                    69:3c:00:45:73:81:a2:12:b4:80:35:dd:c9:19:25:
                    1b:4a:25:52:62:f6:6e:ad:18:eb:35:dc:99:d9:96:
                    97:76:18:6c:00:63:d4:a9:44:f0:be:b3:7e:31:88:
                    e6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:76:38:13:30:C4:17:44:A0:33:D4:07:CA:64:48:83:9C:70:AE:E5
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3131322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:17:61:31:b6:66:f6:bb:5d:4e:6c:72:97:b3:b4:ff:56:58:
         d1:a6:cc:a4:3e:37:cf:79:ca:c7:b8:50:64:4e:ba:62:5b:b2:
         1a:43:02:17:72:1d:1e:8e:70:d8:7b:ff:c3:6c:73:b6:f3:46:
         d3:85:32:fe:16:3c:76:6b:16:8c:fd:84:2c:fe:01:8d:78:4b:
         f2:23:5d:ae:6e:d1:e5:20:6b:a3:87:bd:0f:17:7f:4d:24:98:
         96:98:45:9e:2f:8a:72:f1:66:ac:f9:ca:e3:cb:23:c3:45:8e:
         d5:bf:12:0f:85:9b:c6:d3:5a:a1:7b:20:38:97:9f:80:f3:e7:
         4b:8d:2f:f2:1d:81:54:0a:61:6c:56:8b:b9:f8:b8:62:03:5b:
         56:3b:ce:c6:68:cf:cc:be:d8:2e:79:00:15:84:2f:2f:0b:83:
         c9:dd:f6:76:91:5e:6e:ba:3b:fe:0e:36:2a:23:36:72:a2:2c:
         56:ed:65:23:5f:26:4f:c2:99:eb:e9:61:ff:07:a0:37:fb:1b:
         68:29:8d:53:1f:a0:91:54:4a:8e:fa:0c:d3:29:56:db:33:24:
         00:96:a9:59:62:78:9b:f8:e2:69:37:1c:64:dc:f4:01:2c:4d:
         49:34:d1:64:56:11:11:c9:10:95:c1:db:46:8b:16:0a:b5:5c:
         f7:1f:d0:87
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUGfivftlPofJzS7tG5jZKSZ7WxNAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAxMjAxMTIwMDBaFw0yNjAxMTkxMTI1MDBaMDMxMTAvBgNV
BAMTKEM0NzYzODEzMzBDNDE3NDRBMDMzRDQwN0NBNjQ0ODgzOUM3MEFFRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63mEYEA2eqXy6DinL04jtAZ9U
UoxD0W0Eo4xXyeb2d9z/JYGimAJG44Aic4LqizdyGNgBfVlekZ7WWr6tj4N0KISN
QNoNPIz+NODl6XeMfQ/stKjWQGgxt9o09fCER1womDGt2HhL+cBQC1vEl6VKP2zF
+k7JJQvRRmWKeWp5wbLUq0Ma4qwrKyiwB/I8w63RtQ3MIU5XzAZ1+Qo0wcG3GLLf
Ub2lZC5nDw4QIebugIatpwQYfiOmgLkyBaroEOEEbtUUA3ruOE83Ca7YErJ9mmk8
AEVzgaIStIA13ckZJRtKJVJi9m6tGOs13JnZlpd2GGwAY9SpRPC+s34xiOZPAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUxHY4EzDEF0SgM9QHymRIg5xwruUwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvl1wMA0GCSqG
SIb3DQEBCwUAA4IBAQCrF2Extmb2u11ObHKXs7T/VljRpsykPjfPecrHuFBkTrpi
W7IaQwIXch0ejnDYe//DbHO280bThTL+Fjx2axaM/YQs/gGNeEvyI12ubtHlIGuj
h70PF39NJJiWmEWeL4py8Was+crjyyPDRY7VvxIPhZvG01qheyA4l5+A8+dLjS/y
HYFUCmFsVou5+LhiA1tWO87GaM/MvtgueQAVhC8vC4PJ3fZ2kV5uujv+DjYqIzZy
oixW7WUjXyZPwpnr6WH/B6A3+xtoKY1TH6CRVEqO+gzTKVbbMyQAlqlZYnib+OJp
Nxxk3PQBLE1JNNFkVhERyRCVwdtGixYKtVz3H9CH
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:38 2025 by rpki-client