Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa
File:                     3139302e3231312e37362e302f32322d3232203d3e203532333238.roa (raw, json)
Hash identifier:          IF5XizDvQ8mO4fm00OutdBODkbViXrXva+WXCypkrF0=
Subject key identifier:   9F:16:21:9B:93:8C:B1:C3:6E:41:47:5B:AB:55:BD:94:0B:03:D9:8A
Certificate issuer:       /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial:       2FD26DE03EF6AEF725A771B29932275C93467A39
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa
Signing time:             Tue 04 Feb 2025 18:16:29 +0000
ROA not before:           Tue 04 Feb 2025 18:11:29 +0000
ROA not after:            Tue 03 Feb 2026 18:16:29 +0000
asID:                     52328
IP address blocks:        190.211.76.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d2:6d:e0:3e:f6:ae:f7:25:a7:71:b2:99:32:27:5c:93:46:7a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
        Validity
            Not Before: Feb  4 18:11:29 2025 GMT
            Not After : Feb  3 18:16:29 2026 GMT
        Subject: CN=9F16219B938CB1C36E41475BAB55BD940B03D98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:57:00:60:b9:bd:67:5a:b5:98:c9:0a:cb:e2:
                    21:66:7a:e8:32:97:af:ba:35:1c:1c:57:68:06:9e:
                    f1:74:80:3d:51:da:c5:57:39:d7:bf:45:37:c9:27:
                    a1:bd:1e:5e:0b:76:38:bf:fd:ff:25:58:7d:15:79:
                    b6:b6:b6:64:09:75:87:bd:6f:14:23:17:8b:81:c8:
                    27:1d:43:93:c6:48:d3:e7:79:17:20:a1:c6:b0:bf:
                    4c:73:10:7e:33:1f:7c:0a:cf:80:95:0c:a0:69:6a:
                    4d:7a:0d:26:63:c5:d8:cb:64:ef:29:ff:f3:cf:74:
                    11:73:bd:a6:c2:10:be:3e:9e:f2:c7:58:f8:79:d0:
                    2c:78:ec:ee:d2:c3:3e:27:0a:e8:ab:7b:ae:7e:68:
                    40:87:0e:13:99:f4:87:a8:87:a2:92:05:65:e1:7d:
                    af:b8:c6:30:9d:4d:6d:d2:dc:9b:a7:66:32:c0:8b:
                    3d:fe:0f:99:6e:43:b2:ff:fd:8f:2e:76:85:56:6b:
                    2b:e2:a3:14:9b:86:0c:78:1a:28:e4:24:ea:9c:f7:
                    f3:54:d8:11:0e:20:b2:6d:78:ec:ed:c2:57:29:1a:
                    84:e4:7a:36:4d:ef:1d:dd:17:8b:7c:19:58:b4:da:
                    7d:4c:ff:e2:ef:aa:51:fc:18:41:54:7f:28:60:8e:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:21:9B:93:8C:B1:C3:6E:41:47:5B:AB:55:BD:94:0B:03:D9:8A
            X509v3 Authority Key Identifier:
                keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3139302e3231312e37362e302f32322d3232203d3e203532333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:c2:32:ae:93:f6:62:68:eb:9e:4e:a1:ce:09:90:5b:74:
         ca:62:98:d3:bc:cf:9c:33:30:e3:b7:96:8f:38:15:16:fd:37:
         30:81:6e:e4:b5:02:02:46:e8:1f:0a:74:1e:bc:13:9f:81:ae:
         d8:04:f6:91:f0:c7:12:80:f6:ea:4a:60:e5:96:b1:bd:20:59:
         8c:a3:d9:5f:ab:9c:ff:97:20:2b:a6:8d:19:45:c2:12:a4:17:
         1a:bb:11:d6:84:b9:3f:c7:bf:7d:12:b1:ef:f5:12:dc:8a:89:
         4a:ff:9a:61:79:14:60:8d:4d:fc:44:bd:4f:97:38:82:35:bd:
         8c:fd:e4:1c:2c:60:87:e7:99:bb:5c:33:6c:29:a1:ee:d1:30:
         8f:5f:68:c8:55:b7:1d:00:b4:23:96:a5:8b:0c:dc:b2:bc:75:
         c2:4a:9d:c2:1f:99:64:2c:cc:9c:56:9b:31:fb:76:24:02:91:
         5d:39:49:4c:b8:9b:90:df:97:fe:52:74:c4:81:b5:0e:60:0a:
         07:d8:c4:ee:cf:bd:6d:f2:da:ab:f6:2b:6a:86:3e:69:66:a1:
         5c:fd:f3:c0:fc:e4:54:14:f5:d2:f0:4c:3f:ab:4d:00:fb:39:
         6b:b4:68:96:4d:19:f0:55:1c:4e:d4:24:44:17:7f:11:94:1b:
         14:52:fc:c3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUL9Jt4D72rvclp3GymTInXJNGejkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDNCRUUyQkMzREJGNDFFNTU5NDA4OTkxMjhFRUExQTM4
REQwNzc4RjAeFw0yNTAyMDQxODExMjlaFw0yNjAyMDMxODE2MjlaMDMxMTAvBgNV
BAMTKDlGMTYyMTlCOTM4Q0IxQzM2RTQxNDc1QkFCNTVCRDk0MEIwM0Q5OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVwBgub1nWrWYyQrL4iFmeugy
l6+6NRwcV2gGnvF0gD1R2sVXOde/RTfJJ6G9Hl4Ldji//f8lWH0Veba2tmQJdYe9
bxQjF4uByCcdQ5PGSNPneRcgocawv0xzEH4zH3wKz4CVDKBpak16DSZjxdjLZO8p
//PPdBFzvabCEL4+nvLHWPh50Cx47O7Swz4nCuire65+aECHDhOZ9Ieoh6KSBWXh
fa+4xjCdTW3S3JunZjLAiz3+D5luQ7L//Y8udoVWayvioxSbhgx4GijkJOqc9/NU
2BEOILJteOztwlcpGoTkejZN7x3dF4t8GVi02n1M/+LvqlH8GEFUfyhgjqX/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnxYhm5OMscNuQUdbq1W9lAsD2YowHwYDVR0j
BBgwFoAU077ivD2/QeVZQImRKO6ho43Qd48wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0ZDRURCOUY2RTJDNDZBM0Y4MkIxNEQ1MEFFOEYzMzRB
QzY0Mjg3MTMxRjFGRjQ3NUFCNjRFQjdGOTZFMTBELzAvRDNCRUUyQkMzREJGNDFF
NTU5NDA4OTkxMjhFRUExQTM4REQwNzc4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EM0JFRTJCQzNEQkY0MUU1NTk0
MDg5OTEyOEVFQTFBMzhERDA3NzhGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNGQ0VEQjlGNkUyQzQ2QTNGODJCMTRENTBBRThGMzM0QUM2NDI4NzEz
MUYxRkY0NzVBQjY0RUI3Rjk2RTEwRC8wLzMxMzkzMDJlMzIzMTMxMmUzNzM2MmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzMjMzMzIzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAr7TTDAN
BgkqhkiG9w0BAQsFAAOCAQEACZvCMq6T9mJo655Ooc4JkFt0ymKY07zPnDMw47eW
jzgVFv03MIFu5LUCAkboHwp0HrwTn4Gu2AT2kfDHEoD26kpg5ZaxvSBZjKPZX6uc
/5cgK6aNGUXCEqQXGrsR1oS5P8e/fRKx7/US3IqJSv+aYXkUYI1N/ES9T5c4gjW9
jP3kHCxgh+eZu1wzbCmh7tEwj19oyFW3HQC0I5aliwzcsrx1wkqdwh+ZZCzMnFab
Mft2JAKRXTlJTLibkN+X/lJ0xIG1DmAKB9jE7s+9bfLaq/YraoY+aWahXP3zwPzk
VBT10vBMP6tNAPs5a7Rolk0Z8FUcTtQkRBd/EZQbFFL8ww==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:45 2025 by rpki-client