Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa
File:                     3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa (raw, json)
Hash identifier:          SargUrU8w5/fwqZi4flaG7yZFcoMQQy+hlaluAslBgY=
Subject key identifier:   20:0E:29:A1:47:79:96:AE:7D:69:DD:92:60:EC:DF:1D:0D:6C:99:2D
Certificate issuer:       /CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
Certificate serial:       75115E4FB44112EB1133EA8A545D778CC820C50B
Authority key identifier: 8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa
Signing time:             Tue 04 Feb 2025 18:25:45 +0000
ROA not before:           Tue 04 Feb 2025 18:20:45 +0000
ROA not after:            Tue 03 Feb 2026 18:25:45 +0000
asID:                     23243
IP address blocks:        190.106.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:11:5e:4f:b4:41:12:eb:11:33:ea:8a:54:5d:77:8c:c8:20:c5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1499D12067F2BEA1287B63425EA3B70FCAFFC1
        Validity
            Not Before: Feb  4 18:20:45 2025 GMT
            Not After : Feb  3 18:25:45 2026 GMT
        Subject: CN=200E29A1477996AE7D69DD9260ECDF1D0D6C992D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:a3:19:61:41:b3:f3:af:ed:69:5c:d6:d3:
                    64:34:ad:e1:1f:c6:5c:f1:00:0a:35:21:51:82:88:
                    d2:0c:cb:ed:9e:25:d6:bf:e6:09:23:58:59:fb:ca:
                    69:2c:aa:80:02:b6:0b:30:09:0b:f4:1d:7f:00:e9:
                    78:9d:5f:06:df:54:62:c7:57:21:2e:50:73:fb:15:
                    7d:53:db:1a:46:ad:6b:d9:95:35:5b:26:f2:a7:2e:
                    ac:c7:cd:5a:ab:10:bf:f6:0b:91:e9:28:7a:c8:c9:
                    e3:4f:58:9f:2d:7e:d8:ca:8f:c2:4d:a5:a6:d3:9d:
                    d3:a4:f9:d7:be:36:bb:ef:1b:c9:33:2b:c3:f1:51:
                    7c:bd:c9:68:3c:de:9f:7f:40:50:0b:de:b6:9b:e9:
                    8a:d1:45:e1:cd:7f:65:9d:31:f4:2d:27:27:59:30:
                    ef:8c:e8:e6:85:00:5e:87:9f:1b:8b:2b:cf:1c:6c:
                    b6:4c:1b:83:2a:69:6d:70:d7:dc:e0:a7:0a:bd:ce:
                    08:a1:d2:4d:f5:92:45:db:22:11:80:03:a9:94:93:
                    23:2f:89:d5:c0:fe:bc:6a:23:19:25:31:ce:de:d7:
                    ba:de:f9:f1:35:57:29:b2:e9:26:d3:9f:73:0a:e3:
                    1a:89:fc:23:c5:2f:b4:9d:6c:2a:9a:bb:45:15:9e:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0E:29:A1:47:79:96:AE:7D:69:DD:92:60:EC:DF:1D:0D:6C:99:2D
            X509v3 Authority Key Identifier:
                keyid:8E:14:99:D1:20:67:F2:BE:A1:28:7B:63:42:5E:A3:B7:0F:CA:FF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8E1499D12067F2BEA1287B63425EA3B70FCAFFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/757D6598483B0D1E52E22DFE67B37F03EAE18A33AECC6EC1BC364861B1B214CB/0/3139302e3130362e3139362e302f32322d3234203d3e203233323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:85:15:43:10:94:56:26:85:de:fe:42:6a:84:13:78:17:f7:
         e3:f4:f2:dc:d5:88:d2:79:4a:9a:1c:7b:18:67:d2:db:a5:31:
         6d:7f:e4:29:99:26:c6:59:08:71:0a:30:39:84:41:20:13:74:
         6f:28:bd:e9:12:3e:61:a4:d9:f8:cc:85:0a:43:d5:c2:a9:af:
         5e:ed:29:c5:1e:86:46:a0:bd:d4:7e:7d:ff:1f:7b:d7:a1:27:
         2d:f1:87:f3:f8:69:7d:2c:fe:c8:be:19:cb:34:95:64:aa:19:
         2b:2b:a5:4d:7d:f9:20:43:38:27:88:ec:d5:10:a1:b0:07:d6:
         39:94:b0:b8:34:f7:77:94:b7:b8:89:e7:b3:87:c8:23:48:26:
         dc:c4:62:93:8e:b4:57:7c:c1:3e:4e:d2:9a:7b:f2:13:24:09:
         c8:bb:c4:46:66:2e:18:b9:5a:5c:e9:ee:40:4e:23:91:76:7b:
         3c:8d:65:ac:0f:88:33:8a:a6:2d:6e:89:5d:dd:7d:f6:9b:ba:
         b9:a2:ee:c2:a3:f0:bc:01:e9:05:40:1d:6e:11:6d:aa:ac:03:
         60:0e:77:82:e9:19:c0:d6:64:39:f6:69:97:42:1c:09:54:43:
         28:6d:94:9e:f9:a0:58:d6:ad:71:db:63:ce:e8:ed:cc:bc:3b:
         e3:08:d8:89
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdRFeT7RBEusRM+qKVF13jMggxQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEUxNDk5RDEyMDY3RjJCRUExMjg3QjYzNDI1RUEzQjcw
RkNBRkZDMTAeFw0yNTAyMDQxODIwNDVaFw0yNjAyMDMxODI1NDVaMDMxMTAvBgNV
BAMTKDIwMEUyOUExNDc3OTk2QUU3RDY5REQ5MjYwRUNERjFEMEQ2Qzk5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOv6MZYUGz86/taVzW02Q0reEf
xlzxAAo1IVGCiNIMy+2eJda/5gkjWFn7ymksqoACtgswCQv0HX8A6XidXwbfVGLH
VyEuUHP7FX1T2xpGrWvZlTVbJvKnLqzHzVqrEL/2C5HpKHrIyeNPWJ8tftjKj8JN
pabTndOk+de+NrvvG8kzK8PxUXy9yWg83p9/QFAL3rab6YrRReHNf2WdMfQtJydZ
MO+M6OaFAF6HnxuLK88cbLZMG4MqaW1w19zgpwq9zgih0k31kkXbIhGAA6mUkyMv
idXA/rxqIxklMc7e17re+fE1Vymy6SbTn3MK4xqJ/CPFL7SdbCqau0UVniElAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUIA4poUd5lq59ad2SYOzfHQ1smS0wHwYDVR0j
BBgwFoAUjhSZ0SBn8r6hKHtjQl6jtw/K/8EwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTdENjU5ODQ4M0IwRDFFNTJFMjJERkU2N0IzN0YwM0VB
RTE4QTMzQUVDQzZFQzFCQzM2NDg2MUIxQjIxNENCLzAvOEUxNDk5RDEyMDY3RjJC
RUExMjg3QjYzNDI1RUEzQjcwRkNBRkZDMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RTE0OTlEMTIwNjdGMkJFQTEy
ODdCNjM0MjVFQTNCNzBGQ0FGRkMxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzU3RDY1OTg0ODNCMEQxRTUyRTIyREZFNjdCMzdGMDNFQUUxOEEzM0FF
Q0M2RUMxQkMzNjQ4NjFCMUIyMTRDQi8wLzMxMzkzMDJlMzEzMDM2MmUzMTM5MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMzMzIzNDMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvmrE
MA0GCSqGSIb3DQEBCwUAA4IBAQAOhRVDEJRWJoXe/kJqhBN4F/fj9PLc1YjSeUqa
HHsYZ9LbpTFtf+QpmSbGWQhxCjA5hEEgE3RvKL3pEj5hpNn4zIUKQ9XCqa9e7SnF
HoZGoL3Ufn3/H3vXoSct8Yfz+Gl9LP7IvhnLNJVkqhkrK6VNffkgQzgniOzVEKGw
B9Y5lLC4NPd3lLe4ieezh8gjSCbcxGKTjrRXfME+TtKae/ITJAnIu8RGZi4YuVpc
6e5ATiORdns8jWWsD4gziqYtbold3X32m7q5ou7Co/C8AekFQB1uEW2qrANgDneC
6RnA1mQ59mmXQhwJVEMobZSe+aBY1q1x22PO6O3MvDvjCNiJ
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:40 2025 by rpki-client