Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa
File:                     3139302e39332e37392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          XBXzkAFfrV38INADn9Y8GydxOCLU3WRywVeZCIKqlyA=
Subject key identifier:   54:2F:E3:DF:6F:75:3E:06:6C:B4:4C:0B:86:CB:69:36:EE:0E:09:61
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       475605095D6A628B7F042DD239276CCDF41F9161
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa
Signing time:             Mon 24 Mar 2025 18:35:00 +0000
ROA not before:           Mon 24 Mar 2025 18:30:00 +0000
ROA not after:            Mon 23 Mar 2026 18:35:00 +0000
asID:                     834
IP address blocks:        190.93.79.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:56:05:09:5d:6a:62:8b:7f:04:2d:d2:39:27:6c:cd:f4:1f:91:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Mar 24 18:30:00 2025 GMT
            Not After : Mar 23 18:35:00 2026 GMT
        Subject: CN=542FE3DF6F753E066CB44C0B86CB6936EE0E0961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1e:12:9d:58:85:27:e7:05:0b:d2:be:84:3c:
                    e4:06:81:02:21:21:b0:99:e5:06:a6:d8:8c:83:f8:
                    85:7a:56:35:c5:db:44:17:9c:c4:91:cc:c5:44:b9:
                    ca:3e:50:87:b4:d5:3c:70:05:e7:6f:4d:41:5f:60:
                    9e:24:10:ba:1f:02:dd:ec:9b:2b:81:de:cd:1e:96:
                    41:98:a9:cf:36:8b:20:89:45:06:79:59:78:08:c3:
                    12:2e:d2:98:28:67:f4:4c:69:4e:1d:84:11:b3:06:
                    91:58:ac:f8:9f:c6:81:ab:d4:97:26:39:7d:40:b3:
                    e1:32:f1:db:c4:2c:92:2a:6e:65:be:6e:26:75:c4:
                    78:d5:d0:77:d7:68:40:9c:04:57:94:de:73:4c:b3:
                    4a:f5:f7:ed:eb:ae:86:98:28:c4:03:a0:93:07:1f:
                    f1:ef:e8:c3:2a:23:19:f7:f5:ec:cf:81:da:24:18:
                    5b:6d:f7:c4:e8:ce:68:68:98:b7:ca:d7:41:90:99:
                    bf:c5:16:ac:a4:2b:f4:6c:83:bb:13:10:12:1f:3d:
                    f0:d1:f8:a2:f7:38:89:6a:b0:0c:43:3d:42:68:ba:
                    e3:8d:4a:50:53:ab:d9:5d:eb:a0:f2:df:6d:31:ac:
                    78:4c:c5:33:cf:0f:dd:4a:12:7a:4f:cd:1e:67:0a:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2F:E3:DF:6F:75:3E:06:6C:B4:4C:0B:86:CB:69:36:EE:0E:09:61
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e37392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:12:d9:ff:5b:6b:ee:36:89:8f:c1:f9:a7:07:1c:13:34:97:
         98:64:03:b3:ec:f3:66:24:30:9f:5b:82:70:49:b0:c5:f9:91:
         c8:b4:a0:56:49:30:ec:ad:a8:35:dc:ca:6f:aa:79:33:1d:d5:
         e6:eb:4c:49:c6:6b:d8:78:4c:4d:41:1e:1f:9f:70:61:cf:1f:
         a9:94:0a:55:c2:6f:e8:92:51:6f:25:79:ac:df:d4:af:f1:5c:
         b6:6a:bc:87:10:9f:ac:5b:38:b7:f7:5a:3f:e0:7f:98:c2:78:
         78:3b:55:09:8e:50:d1:5f:7e:4b:2d:68:36:ed:e1:d5:c2:13:
         58:92:d5:91:3a:fb:f7:d5:bd:15:fb:97:d7:3a:5d:4c:21:7f:
         6d:59:8a:3c:3a:e7:b3:5e:35:4d:62:06:03:63:3a:45:1e:bd:
         35:c0:1b:32:49:1f:62:8e:8d:7e:cf:8f:10:ad:ac:32:00:cd:
         f2:5c:ab:59:fe:48:da:b2:af:c5:ea:8a:a4:3c:8d:db:37:c3:
         e0:10:f2:3f:50:6a:3b:cc:b1:4c:71:de:3c:4e:16:4c:0c:e6:
         d9:1a:81:fd:3b:be:60:ef:07:78:c4:05:65:94:0e:a6:ce:ef:
         0d:ba:84:5d:02:71:70:3a:88:92:c1:ad:1d:08:9a:71:58:34:
         01:b4:e2:7f
-----BEGIN CERTIFICATE-----
MIIFuDCCBKCgAwIBAgIUR1YFCV1qYot/BC3SOSdszfQfkWEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAzMjQxODMwMDBaFw0yNjAzMjMxODM1MDBaMDMxMTAvBgNV
BAMTKDU0MkZFM0RGNkY3NTNFMDY2Q0I0NEMwQjg2Q0I2OTM2RUUwRTA5NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHhKdWIUn5wUL0r6EPOQGgQIh
IbCZ5Qam2IyD+IV6VjXF20QXnMSRzMVEuco+UIe01TxwBedvTUFfYJ4kELofAt3s
myuB3s0elkGYqc82iyCJRQZ5WXgIwxIu0pgoZ/RMaU4dhBGzBpFYrPifxoGr1Jcm
OX1As+Ey8dvELJIqbmW+biZ1xHjV0HfXaECcBFeU3nNMs0r19+3rroaYKMQDoJMH
H/Hv6MMqIxn39ezPgdokGFtt98TozmhomLfK10GQmb/FFqykK/Rsg7sTEBIfPfDR
+KL3OIlqsAxDPUJouuONSlBTq9ld66Dy320xrHhMxTPPD91KEnpPzR5nCmQ1AgMB
AAGjggLCMIICvjAdBgNVHQ4EFgQUVC/j3291PgZstEwLhstpNu4OCWEwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzczOTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dTzANBgkqhkiG
9w0BAQsFAAOCAQEARRLZ/1tr7jaJj8H5pwccEzSXmGQDs+zzZiQwn1uCcEmwxfmR
yLSgVkkw7K2oNdzKb6p5Mx3V5utMScZr2HhMTUEeH59wYc8fqZQKVcJv6JJRbyV5
rN/Ur/Fctmq8hxCfrFs4t/daP+B/mMJ4eDtVCY5Q0V9+Sy1oNu3h1cITWJLVkTr7
99W9FfuX1zpdTCF/bVmKPDrns141TWIGA2M6RR69NcAbMkkfYo6Nfs+PEK2sMgDN
8lyrWf5I2rKvxeqKpDyN2zfD4BDyP1BqO8yxTHHePE4WTAzm2RqB/Tu+YO8HeMQF
ZZQOps7vDbqEXQJxcDqIksGtHQiacVg0AbTifw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:01:31 2025 by rpki-client