Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa
File:                     AS64099.roa (raw, json)
Hash identifier:          7WwKp9jicKsl1/peEvzYTgQRP05w6ihx/39EIGHCYM4=
Subject key identifier:   59:80:7D:DB:6E:A5:93:1E:50:CF:59:E8:7F:9A:D9:53:6E:E2:6D:E2
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       06C4E1B906B806D99047454294C255E9029A0878
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa
Signing time:             Tue 04 Feb 2025 20:07:00 +0000
ROA not before:           Tue 04 Feb 2025 20:02:00 +0000
ROA not after:            Tue 03 Feb 2026 20:07:00 +0000
asID:                     64099
IP address blocks:        190.228.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c4:e1:b9:06:b8:06:d9:90:47:45:42:94:c2:55:e9:02:9a:08:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Feb  4 20:02:00 2025 GMT
            Not After : Feb  3 20:07:00 2026 GMT
        Subject: CN=59807DDB6EA5931E50CF59E87F9AD9536EE26DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:12:68:9a:3d:0f:7c:30:65:12:79:5b:01:
                    17:52:41:17:7e:72:9e:76:9a:e4:fc:04:67:fd:04:
                    6c:49:a7:b4:6f:34:53:f3:84:ca:5c:de:15:5b:74:
                    68:c4:43:d6:c8:4d:e8:4a:ce:02:7b:b6:cb:de:28:
                    2c:12:42:a3:72:15:5c:62:92:3a:34:97:cf:59:ea:
                    6e:06:d2:e3:87:72:cb:3c:2f:b8:84:eb:2d:0d:1e:
                    26:5b:64:b1:94:c9:04:b9:20:96:a0:4b:10:37:68:
                    0a:22:41:0a:40:4a:9f:39:12:e1:af:2c:60:99:67:
                    27:c0:c6:b6:06:1f:7a:ee:ed:46:e7:0e:b5:a1:ea:
                    61:0d:d3:e1:0e:d6:0b:3e:52:d9:7b:74:e2:98:de:
                    b3:1c:5f:15:14:f2:95:2b:08:8f:fd:dd:aa:08:83:
                    0c:76:01:50:bd:3f:61:37:ee:b8:51:57:1d:4b:29:
                    fd:a1:f4:23:a5:4e:f5:12:e0:08:59:22:59:59:88:
                    4e:ca:da:83:19:29:d8:37:35:cf:5b:b3:b3:c1:df:
                    ed:5c:f4:1a:6d:55:27:5e:1a:b7:0d:dd:48:48:d6:
                    78:0a:8b:9d:aa:01:7b:63:c6:41:d1:ea:91:8c:42:
                    89:41:ec:76:df:35:b6:24:21:b4:b8:04:b9:6d:12:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:80:7D:DB:6E:A5:93:1E:50:CF:59:E8:7F:9A:D9:53:6E:E2:6D:E2
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS64099.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:93:9b:30:a9:14:2a:4d:ce:c7:4a:23:3c:02:dc:c2:2d:
         71:50:31:65:f9:bc:39:73:9d:a5:c7:10:93:93:80:75:7d:6e:
         28:00:6e:37:2e:91:7d:4b:62:04:8e:e8:cf:8c:96:6c:5c:94:
         c6:12:c7:b3:2c:b8:99:5b:c3:f3:39:e4:32:02:ff:2d:93:4a:
         90:c5:b8:c7:42:ec:30:8e:4b:9d:ec:bc:a8:b1:43:c1:a6:82:
         21:be:19:5d:e2:a5:1d:23:97:46:35:9e:47:ea:a6:eb:ac:de:
         ad:04:bc:7f:6d:0d:14:7c:f2:ff:19:b9:e2:ef:fe:79:87:37:
         93:a3:44:5f:b8:40:8f:79:f2:7a:d3:04:9f:66:51:4d:07:1b:
         41:d3:f7:30:23:cd:62:62:a7:7e:cb:09:1d:a1:c7:42:5f:0a:
         d6:70:56:a8:18:db:7a:fd:a0:ed:1a:d8:81:97:86:68:08:41:
         48:3b:d5:64:a3:61:e1:65:23:6e:41:4d:2e:d0:e0:44:64:0a:
         4c:d3:a4:e6:b2:bd:45:e7:04:55:20:30:ec:3c:34:e0:84:bc:
         b9:36:ba:e3:b5:8a:7a:8c:54:26:6c:96:fa:bb:c6:54:74:03:
         b2:1b:16:c2:99:3d:46:7a:11:57:60:ed:70:cf:d0:fd:77:1f:
         27:50:ad:8c
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIUBsThuQa4BtmQR0VClMJV6QKaCHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjc0RDY4RjA2QkIxRjJFRDA5NEYwM0I1MkZFRDc1NjVG
NzgyNUQ5OTAeFw0yNTAyMDQyMDAyMDBaFw0yNjAyMDMyMDA3MDBaMDMxMTAvBgNV
BAMTKDU5ODA3RERCNkVBNTkzMUU1MENGNTlFODdGOUFEOTUzNkVFMjZERTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnBJomj0PfDBlEnlbARdSQRd+
cp52muT8BGf9BGxJp7RvNFPzhMpc3hVbdGjEQ9bITehKzgJ7tsveKCwSQqNyFVxi
kjo0l89Z6m4G0uOHcss8L7iE6y0NHiZbZLGUyQS5IJagSxA3aAoiQQpASp85EuGv
LGCZZyfAxrYGH3ru7UbnDrWh6mEN0+EO1gs+Utl7dOKY3rMcXxUU8pUrCI/93aoI
gwx2AVC9P2E37rhRVx1LKf2h9COlTvUS4AhZIllZiE7K2oMZKdg3Nc9bs7PB3+1c
9BptVSdeGrcN3UhI1ngKi52qAXtjxkHR6pGMQolB7HbfNbYkIbS4BLltEhsnAgMB
AAGjggKYMIIClDAdBgNVHQ4EFgQUWYB9226lkx5Qz1nof5rZU27ibeIwHwYDVR0j
BBgwFoAUJ01o8Gux8u0JTwO1L+11ZfeCXZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZF
MzY3QkEwQ0M4M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvMjc0RDY4RjA2QkIxRjJF
RDA5NEYwM0I1MkZFRDc1NjVGNzgyNUQ5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNzRENjhGMDZCQjFGMkVEMDk0
RjAzQjUyRkVENzU2NUY3ODI1RDk5LmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy85RUU5QjFFMDgzMTY3N0VEOTM4MDNBRjBCOEVENkI5NUZFMzY3QkEwQ0M4
M0NFRDRCMEFFRjYxN0UxRjAzMTUwLzAvQVM2NDA5OS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL7kqTAN
BgkqhkiG9w0BAQsFAAOCAQEAGc+TmzCpFCpNzsdKIzwC3MItcVAxZfm8OXOdpccQ
k5OAdX1uKABuNy6RfUtiBI7oz4yWbFyUxhLHsyy4mVvD8znkMgL/LZNKkMW4x0Ls
MI5Lney8qLFDwaaCIb4ZXeKlHSOXRjWeR+qm66zerQS8f20NFHzy/xm54u/+eYc3
k6NEX7hAj3nyetMEn2ZRTQcbQdP3MCPNYmKnfssJHaHHQl8K1nBWqBjbev2g7RrY
gZeGaAhBSDvVZKNh4WUjbkFNLtDgRGQKTNOk5rK9RecEVSAw7Dw04IS8uTa647WK
eoxUJmyW+rvGVHQDshsWwpk9RnoRV2DtcM/Q/XcfJ1CtjA==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:54 2025 by rpki-client