Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          tnHDBCgNh8I6uf4/HywkCreBbRKPU2cO2t6SsXWUbtQ=
Subject key identifier:   98:E0:42:E0:8C:29:57:6C:81:DC:12:2B:30:17:AE:F4:65:49:D6:89
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       12EDFD5ED0F3474364B07A1F5178E11712BABF25
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa
Signing time:             Mon 10 Mar 2025 19:25:00 +0000
ROA not before:           Mon 10 Mar 2025 19:20:00 +0000
ROA not after:            Mon 09 Mar 2026 19:25:00 +0000
asID:                     834
IP address blocks:        190.93.125.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:ed:fd:5e:d0:f3:47:43:64:b0:7a:1f:51:78:e1:17:12:ba:bf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 10 19:20:00 2025 GMT
            Not After : Mar  9 19:25:00 2026 GMT
        Subject: CN=98E042E08C29576C81DC122B3017AEF46549D689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3c:62:1a:23:c6:74:fb:fc:de:37:3f:ef:10:
                    3c:da:89:0d:b9:2d:75:bf:e0:1f:c8:a2:0d:2a:54:
                    9f:86:07:b5:f2:12:6b:0d:4c:f4:38:9a:68:c8:29:
                    ed:61:68:07:d4:36:71:c6:ab:a9:02:c7:16:da:7e:
                    10:0d:8d:58:3f:e2:ba:bd:70:30:e9:6e:d9:9c:88:
                    5a:3b:5d:ad:63:b4:6b:76:0d:8a:5a:ff:39:43:f7:
                    9d:c4:a4:05:e8:5a:f3:ab:66:48:3b:5d:eb:0f:7b:
                    37:43:6c:f1:fe:a3:2a:b3:26:0b:1b:f9:70:5a:03:
                    ea:1e:d7:21:00:bc:36:b0:26:df:59:69:12:40:c6:
                    96:24:0f:8c:7d:6c:12:90:2b:91:50:ad:ce:17:d0:
                    dc:53:84:6c:ca:af:04:ee:3f:67:68:17:ae:e8:8d:
                    d9:16:0f:36:d2:43:79:29:e1:5d:b1:ed:ca:65:03:
                    e8:2b:f2:1a:a9:7a:b5:19:f8:c9:19:ca:00:93:7b:
                    f6:6a:8a:17:cd:b3:e7:de:79:54:b7:d9:13:02:c9:
                    13:a6:99:76:2f:e6:1a:31:d2:8f:1d:da:7b:a3:6b:
                    b7:ba:d0:26:f5:eb:a7:a3:15:b7:5f:e0:d4:80:96:
                    77:83:10:f6:03:2b:b5:96:7d:f5:bb:90:70:e9:b5:
                    8b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E0:42:E0:8C:29:57:6C:81:DC:12:2B:30:17:AE:F4:65:49:D6:89
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e3132352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:cb:0d:17:f6:35:3c:87:46:9b:f1:23:73:ed:64:00:51:
         0f:bd:d7:9d:7b:61:2f:d2:2f:5c:11:45:84:f3:01:e9:24:8b:
         8d:c6:c3:dd:a5:5d:b1:5a:90:24:75:95:84:9c:86:f2:dc:dc:
         9b:38:14:75:59:79:db:7d:36:45:0c:4e:92:a3:d2:01:dc:f1:
         7a:3a:e6:cb:38:9c:08:be:31:13:44:ce:2a:65:8c:48:f4:e9:
         55:0b:40:34:60:eb:a4:41:62:0a:4f:f5:69:dc:86:cc:5e:96:
         0d:4c:18:fe:41:8f:2b:c9:f7:b8:16:a2:37:22:de:7e:a2:bf:
         40:5d:8b:40:de:30:a3:27:5d:68:6d:17:b6:36:e4:d1:03:54:
         0c:62:84:3e:bc:7b:1b:1a:2d:0a:02:16:bd:5d:55:ea:e8:6f:
         64:2f:55:c4:ca:00:55:16:38:bd:5a:b3:e2:d7:3c:0f:26:61:
         db:83:9f:6c:c5:22:7a:a9:cf:1d:a7:60:a0:d4:fd:d6:58:d2:
         6c:34:91:8e:f1:03:b1:cc:84:fc:81:1c:a1:01:d5:26:79:73:
         cd:4a:41:9d:1c:d2:40:03:a2:23:45:39:12:1f:32:0f:22:4f:
         2a:e0:b4:b1:83:0d:90:7b:a5:c8:04:68:64:57:5c:0d:fd:9c:
         ac:f0:48:94
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUEu39XtDzR0NksHofUXjhFxK6vyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAzMTAxOTIwMDBaFw0yNjAzMDkxOTI1MDBaMDMxMTAvBgNV
BAMTKDk4RTA0MkUwOEMyOTU3NkM4MURDMTIyQjMwMTdBRUY0NjU0OUQ2ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpPGIaI8Z0+/zeNz/vEDzaiQ25
LXW/4B/Iog0qVJ+GB7XyEmsNTPQ4mmjIKe1haAfUNnHGq6kCxxbafhANjVg/4rq9
cDDpbtmciFo7Xa1jtGt2DYpa/zlD953EpAXoWvOrZkg7XesPezdDbPH+oyqzJgsb
+XBaA+oe1yEAvDawJt9ZaRJAxpYkD4x9bBKQK5FQrc4X0NxThGzKrwTuP2doF67o
jdkWDzbSQ3kp4V2x7cplA+gr8hqperUZ+MkZygCTe/ZqihfNs+feeVS32RMCyROm
mXYv5hox0o8d2nuja7e60Cb166ejFbdf4NSAlneDEPYDK7WWffW7kHDptYtHAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUmOBC4IwpV2yB3BIrMBeu9GVJ1okwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzEzMjM1MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvl19MA0GCSqG
SIb3DQEBCwUAA4IBAQArrMsNF/Y1PIdGm/Ejc+1kAFEPvdede2Ev0i9cEUWE8wHp
JIuNxsPdpV2xWpAkdZWEnIby3NybOBR1WXnbfTZFDE6So9IB3PF6OubLOJwIvjET
RM4qZYxI9OlVC0A0YOukQWIKT/Vp3IbMXpYNTBj+QY8ryfe4FqI3It5+or9AXYtA
3jCjJ11obRe2NuTRA1QMYoQ+vHsbGi0KAha9XVXq6G9kL1XEygBVFji9WrPi1zwP
JmHbg59sxSJ6qc8dp2Cg1P3WWNJsNJGO8QOxzIT8gRyhAdUmeXPNSkGdHNJAA6Ij
RTkSHzIPIk8q4LSxgw2Qe6XIBGhkV1wN/Zys8EiU
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:56:55 2025 by rpki-client