Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f31392d3234203d3e203131303831.roa
File:                     3139302e342e3136302e302f31392d3234203d3e203131303831.roa (raw, json)
Hash identifier:          We/+lXkvYc/kY/gyuxiYj9DDlxnHZmUNSHE+tijsx+8=
Subject key identifier:   F6:C9:36:DE:7C:DB:FB:A7:6A:20:B1:27:0C:12:2E:D0:43:55:DD:3A
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       482AA83A1FE9CAA1843790C796B8C87F1CF57AD9
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f31392d3234203d3e203131303831.roa
Signing time:             Tue 04 Feb 2025 18:50:56 +0000
ROA not before:           Tue 04 Feb 2025 18:45:56 +0000
ROA not after:            Tue 03 Feb 2026 18:50:56 +0000
asID:                     11081
IP address blocks:        190.4.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2a:a8:3a:1f:e9:ca:a1:84:37:90:c7:96:b8:c8:7f:1c:f5:7a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Feb  4 18:45:56 2025 GMT
            Not After : Feb  3 18:50:56 2026 GMT
        Subject: CN=F6C936DE7CDBFBA76A20B1270C122ED04355DD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:c2:cf:8a:48:e3:3e:9d:22:c4:bc:cb:1a:
                    2d:ef:85:e2:39:ee:b3:88:89:0c:33:c5:eb:fa:88:
                    9f:5d:d6:0f:f6:a7:10:6c:43:ae:d8:a4:ea:d3:ca:
                    19:94:63:5e:33:3d:9b:4c:40:84:45:2d:c1:cb:2f:
                    22:ff:ee:04:8e:77:dd:51:04:dd:1e:e4:0b:03:e8:
                    a3:97:c9:dc:5e:0d:31:a7:e8:b4:6e:e8:1a:43:30:
                    89:30:ae:4d:69:bd:b1:2a:b8:ba:f9:72:b1:c8:9d:
                    29:cb:33:08:84:bc:ea:21:f8:29:4a:30:1d:40:36:
                    db:97:fa:03:fb:39:db:2c:59:26:be:eb:30:94:23:
                    9e:5b:96:a8:38:5c:56:bb:bd:37:cf:ac:28:7b:46:
                    1a:25:92:89:43:29:81:f8:84:10:0e:89:b6:9c:82:
                    fe:bf:9f:b5:88:42:01:10:0b:06:9a:23:6c:7b:0f:
                    6e:09:49:32:89:40:3a:b6:dc:05:5d:66:e6:46:08:
                    b8:7b:62:16:ae:d5:e3:01:6b:2a:f4:20:2b:24:1d:
                    e0:59:4e:a2:0e:d7:5d:1c:17:b6:e0:0a:54:21:1b:
                    a0:f2:79:67:e8:b6:fc:db:e4:ed:27:1b:e8:ae:2a:
                    0b:0e:07:b3:bd:c6:3c:97:46:c7:f7:1a:8b:69:1e:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C9:36:DE:7C:DB:FB:A7:6A:20:B1:27:0C:12:2E:D0:43:55:DD:3A
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3136302e302f31392d3234203d3e203131303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:b2:6e:8b:80:e6:99:f1:5f:82:d7:3f:e6:ff:56:78:a4:
         85:00:ed:1a:93:05:a2:3d:ef:9b:3d:c7:ff:f7:2c:50:4f:43:
         02:cf:37:47:fe:f8:49:a0:f1:ba:da:90:8a:58:5d:a7:85:a6:
         6b:88:8e:87:4b:9f:f6:49:71:23:11:b4:bb:c4:60:49:4c:c9:
         e9:93:91:c3:44:72:c8:06:33:ee:4b:98:3a:13:7d:18:22:36:
         77:94:24:98:01:af:39:ab:56:98:6d:83:3f:d2:bf:f6:78:b6:
         73:be:74:31:94:fd:09:61:22:9f:47:4e:d9:ac:a7:a2:f5:47:
         9c:f6:14:a6:90:f5:45:5e:42:02:e5:c4:d0:1f:34:ae:70:e0:
         68:af:9c:d3:d5:4a:a2:cf:57:e5:d7:53:c5:12:c5:b1:ae:b3:
         8e:4a:d8:fd:5f:57:33:0f:d6:4a:95:88:c9:a4:d4:f2:be:7f:
         5f:7a:b5:a1:a6:ae:35:90:db:d8:62:b4:6d:c0:34:0c:94:35:
         8d:85:93:56:67:51:bb:bc:d9:21:56:32:67:e6:b1:00:d7:f2:
         d3:e0:cc:58:15:be:46:ae:00:5d:e3:fc:83:57:d4:fd:9d:80:
         a0:66:c7:2f:10:ee:fc:5e:f5:ac:bd:29:e2:0e:4c:65:15:ab:
         50:82:2e:9d
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUSCqoOh/pyqGEN5DHlrjIfxz1etkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3RDYzREFFNjFDMzIxMTkwOUM4OURFQkQ0NjNCMjZG
ODczRTQ0QjAeFw0yNTAyMDQxODQ1NTZaFw0yNjAyMDMxODUwNTZaMDMxMTAvBgNV
BAMTKEY2QzkzNkRFN0NEQkZCQTc2QTIwQjEyNzBDMTIyRUQwNDM1NUREM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqlcLPikjjPp0ixLzLGi3vheI5
7rOIiQwzxev6iJ9d1g/2pxBsQ67YpOrTyhmUY14zPZtMQIRFLcHLLyL/7gSOd91R
BN0e5AsD6KOXydxeDTGn6LRu6BpDMIkwrk1pvbEquLr5crHInSnLMwiEvOoh+ClK
MB1ANtuX+gP7OdssWSa+6zCUI55blqg4XFa7vTfPrCh7RholkolDKYH4hBAOibac
gv6/n7WIQgEQCwaaI2x7D24JSTKJQDq23AVdZuZGCLh7Yhau1eMBayr0ICskHeBZ
TqIO110cF7bgClQhG6DyeWfotvzb5O0nG+iuKgsOB7O9xjyXRsf3GotpHmBZAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU9sk23nzb+6dqILEnDBIu0ENV3TowHwYDVR0j
BBgwFoAUI31j2uYcMhGQnInevUY7Jvhz5EswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZDRUNDM0Q1NzBEM0RGRTc4QTJFRUMxQ0FGNkYwN0U4
QUQxRkQzQTM1OUNENkZBODczNUMxQTg4MEEwNUU5LzAvMjM3RDYzREFFNjFDMzIx
MTkwOUM4OURFQkQ0NjNCMjZGODczRTQ0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMzdENjNEQUU2MUMzMjExOTA5
Qzg5REVCRDQ2M0IyNkY4NzNFNDRCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGQ0VDQzNENTcwRDNERkU3OEEyRUVDMUNBRjZGMDdFOEFEMUZEM0Ez
NTlDRDZGQTg3MzVDMUE4ODBBMDVFOS8wLzMxMzkzMDJlMzQyZTMxMzYzMDJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzEzMDM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+BKAwDQYJ
KoZIhvcNAQELBQADggEBACELsm6LgOaZ8V+C1z/m/1Z4pIUA7RqTBaI975s9x//3
LFBPQwLPN0f++Emg8brakIpYXaeFpmuIjodLn/ZJcSMRtLvEYElMyemTkcNEcsgG
M+5LmDoTfRgiNneUJJgBrzmrVphtgz/Sv/Z4tnO+dDGU/QlhIp9HTtmsp6L1R5z2
FKaQ9UVeQgLlxNAfNK5w4GivnNPVSqLPV+XXU8USxbGus45K2P1fVzMP1kqViMmk
1PK+f196taGmrjWQ29hitG3ANAyUNY2Fk1ZnUbu82SFWMmfmsQDX8tPgzFgVvkau
AF3j/INX1P2dgKBmxy8Q7vxe9ay9KeIOTGUVq1CCLp0=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:42 2025 by rpki-client