Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e203134343435.roa
File:                     3139302e39332e39322e302f32342d3234203d3e203134343435.roa (raw, json)
Hash identifier:          61kGq370eKof8MTzx3RUHiu2duVPdJQwBpAvXW89mxc=
Subject key identifier:   B9:90:B9:D5:C1:B4:18:5D:C8:77:74:70:3F:43:59:54:3E:08:DB:61
Certificate issuer:       /CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
Certificate serial:       51F866D125101AFC3008EAB7D33816EDA15E6212
Authority key identifier: 2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e203134343435.roa
Signing time:             Thu 27 Feb 2025 15:11:04 +0000
ROA not before:           Thu 27 Feb 2025 15:06:04 +0000
ROA not after:            Thu 26 Feb 2026 15:11:04 +0000
asID:                     14445
IP address blocks:        190.93.92.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f8:66:d1:25:10:1a:fc:30:08:ea:b7:d3:38:16:ed:a1:5e:62:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26
        Validity
            Not Before: Feb 27 15:06:04 2025 GMT
            Not After : Feb 26 15:11:04 2026 GMT
        Subject: CN=B990B9D5C1B4185DC87774703F4359543E08DB61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f8:77:f3:98:2a:85:66:d0:0b:f3:1d:68:01:
                    09:31:b8:34:60:e5:30:e4:f1:1b:c5:27:37:eb:8a:
                    19:a0:8e:39:71:8c:8f:33:88:e8:72:90:6d:14:de:
                    d0:13:1f:06:5c:96:cb:71:4c:e8:72:29:0f:97:54:
                    1d:b2:8f:e1:fe:8c:bb:0e:28:8b:79:92:39:b3:bd:
                    b3:b3:ab:cb:0c:6d:c5:4f:e9:c3:75:7f:db:f3:5f:
                    5e:3e:89:68:f8:09:a3:cd:ab:4b:a6:4d:21:48:39:
                    44:9c:f5:08:b1:df:62:55:2d:6c:d5:6c:4a:03:11:
                    90:6a:c5:15:17:fe:3a:ca:82:34:91:5d:2c:fd:24:
                    a1:1b:d3:09:9e:5b:ec:33:19:0f:70:d6:29:1f:0a:
                    a5:ea:52:af:74:3c:ef:02:62:8b:b7:ac:66:93:09:
                    67:19:f6:e6:99:5b:44:c0:72:99:21:8e:81:e2:5a:
                    9e:82:43:ca:b7:a7:96:81:f7:a0:a6:bf:93:41:bd:
                    55:15:92:a2:30:03:60:05:33:82:6f:1d:5d:33:3e:
                    8b:4e:ae:ec:de:01:a2:43:7a:ca:0b:e1:ca:e6:61:
                    4e:4c:64:0e:14:12:2e:00:c4:c5:ba:30:95:6d:69:
                    66:cc:36:48:94:bf:84:a1:2c:71:ec:35:8b:70:bc:
                    8d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:90:B9:D5:C1:B4:18:5D:C8:77:74:70:3F:43:59:54:3E:08:DB:61
            X509v3 Authority Key Identifier:
                keyid:2E:73:74:FD:42:83:1B:DD:B6:28:6D:A8:B8:A1:D5:DB:AD:A5:9B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E7374FD42831BDDB6286DA8B8A1D5DBADA59B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64BE182DE4657F29B77D19D907210D65D5419A77C6402515C05340E28FDCE5C2/0/3139302e39332e39322e302f32342d3234203d3e203134343435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:51:57:08:db:39:7e:6d:b4:10:f8:7c:5c:ff:02:f7:d0:e4:
         10:38:a9:42:7d:4f:ac:0c:9f:0d:cc:2c:59:33:3f:87:70:11:
         b9:4b:4b:7b:aa:96:cd:8e:4a:f4:21:ea:93:7a:4e:0b:d1:39:
         63:d1:9e:c0:1e:34:ba:60:02:45:ea:56:f9:6c:01:0d:b3:65:
         1e:55:1e:7a:1d:83:b2:27:0c:15:a2:97:b7:9b:f3:20:1e:a2:
         35:f7:90:d0:19:85:f3:e8:02:3d:bc:d3:6e:5f:49:19:e8:61:
         4c:b2:33:ff:cb:e1:e6:1d:ba:d9:45:ee:b5:c0:dd:fa:e8:55:
         d4:51:4b:a7:7f:4a:ec:00:29:c2:7c:32:25:b6:a9:1e:a7:6e:
         7c:1e:b6:45:71:7e:e1:1a:d1:96:d9:3d:7c:49:d6:c0:de:5b:
         d4:a0:01:1e:8a:f5:fc:7a:9b:0d:83:39:4d:c7:b9:07:c9:b9:
         2b:a1:64:ad:a5:99:f2:1f:0d:6f:6b:4c:df:d8:64:38:b7:dc:
         19:36:20:62:04:9e:41:aa:74:e0:81:cc:d9:48:12:8f:91:e2:
         9f:56:c3:aa:a5:f9:48:86:a3:0a:8a:24:cb:b6:91:87:57:d4:
         e0:ee:2e:d4:e3:dc:12:db:c4:4d:47:9b:90:a8:65:8b:18:5b:
         e3:06:93:1a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUUfhm0SUQGvwwCOq30zgW7aFeYhIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkU3Mzc0RkQ0MjgzMUJEREI2Mjg2REE4QjhBMUQ1REJB
REE1OUIyNjAeFw0yNTAyMjcxNTA2MDRaFw0yNjAyMjYxNTExMDRaMDMxMTAvBgNV
BAMTKEI5OTBCOUQ1QzFCNDE4NURDODc3NzQ3MDNGNDM1OTU0M0UwOERCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+HfzmCqFZtAL8x1oAQkxuDRg
5TDk8RvFJzfrihmgjjlxjI8ziOhykG0U3tATHwZclstxTOhyKQ+XVB2yj+H+jLsO
KIt5kjmzvbOzq8sMbcVP6cN1f9vzX14+iWj4CaPNq0umTSFIOUSc9Qix32JVLWzV
bEoDEZBqxRUX/jrKgjSRXSz9JKEb0wmeW+wzGQ9w1ikfCqXqUq90PO8CYou3rGaT
CWcZ9uaZW0TAcpkhjoHiWp6CQ8q3p5aB96Cmv5NBvVUVkqIwA2AFM4JvHV0zPotO
ruzeAaJDesoL4crmYU5MZA4UEi4AxMW6MJVtaWbMNkiUv4ShLHHsNYtwvI2dAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUuZC51cG0GF3Id3RwP0NZVD4I22EwHwYDVR0j
BBgwFoAULnN0/UKDG922KG2ouKHV262lmyYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82NEJFMTgyREU0NjU3RjI5Qjc3RDE5RDkwNzIxMEQ2NUQ1
NDE5QTc3QzY0MDI1MTVDMDUzNDBFMjhGRENFNUMyLzAvMkU3Mzc0RkQ0MjgzMUJE
REI2Mjg2REE4QjhBMUQ1REJBREE1OUIyNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRTczNzRGRDQyODMxQkREQjYy
ODZEQThCOEExRDVEQkFEQTU5QjI2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjRCRTE4MkRFNDY1N0YyOUI3N0QxOUQ5MDcyMTBENjVENTQxOUE3N0M2
NDAyNTE1QzA1MzQwRTI4RkRDRTVDMi8wLzMxMzkzMDJlMzkzMzJlMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNDM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+XVwwDQYJ
KoZIhvcNAQELBQADggEBAFlRVwjbOX5ttBD4fFz/AvfQ5BA4qUJ9T6wMnw3MLFkz
P4dwEblLS3uqls2OSvQh6pN6TgvROWPRnsAeNLpgAkXqVvlsAQ2zZR5VHnodg7In
DBWil7eb8yAeojX3kNAZhfPoAj28025fSRnoYUyyM//L4eYdutlF7rXA3froVdRR
S6d/SuwAKcJ8MiW2qR6nbnwetkVxfuEa0ZbZPXxJ1sDeW9SgAR6K9fx6mw2DOU3H
uQfJuSuhZK2lmfIfDW9rTN/YZDi33Bk2IGIEnkGqdOCBzNlIEo+R4p9Ww6ql+UiG
owqKJMu2kYdX1ODuLtTj3BLbxE1Hm5CoZYsYW+MGkxo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:59:13 2025 by rpki-client