Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e36342e302f31392d3233203d3e203230323939.roa
File:                     3139302e35332e36342e302f31392d3233203d3e203230323939.roa (raw, json)
Hash identifier:          y1ncVwtJY4ssRd/ii13Nk5sneNPOT/JEEaHnxsdCSMI=
Subject key identifier:   FE:64:8A:91:5D:D2:3D:38:47:EF:BE:63:A3:3D:8F:05:93:4D:AB:69
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       331BAA4D65ECEB4C7EDA12196E2CC4CD5D15712C
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e36342e302f31392d3233203d3e203230323939.roa
Signing time:             Tue 04 Feb 2025 18:48:57 +0000
ROA not before:           Tue 04 Feb 2025 18:43:57 +0000
ROA not after:            Tue 03 Feb 2026 18:48:57 +0000
asID:                     20299
IP address blocks:        190.53.64.0/19 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:1b:aa:4d:65:ec:eb:4c:7e:da:12:19:6e:2c:c4:cd:5d:15:71:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Feb  4 18:43:57 2025 GMT
            Not After : Feb  3 18:48:57 2026 GMT
        Subject: CN=FE648A915DD23D3847EFBE63A33D8F05934DAB69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:a1:ae:a9:fd:9d:7c:00:0f:e0:99:f7:7d:
                    2d:75:c8:08:7b:dd:fd:2b:ae:c4:c0:44:80:02:cb:
                    38:0f:5e:b1:2b:90:55:3c:06:88:22:4d:49:8e:2d:
                    c4:bb:ea:e6:40:96:e0:a0:da:89:6b:11:b5:a8:9d:
                    e6:86:9b:0c:5b:08:95:6e:72:fb:1c:97:b8:4f:13:
                    1c:66:98:64:14:e7:12:86:b3:a5:c1:8a:c0:6d:ee:
                    18:be:f6:7c:b8:1d:40:6e:cb:be:76:9f:e9:e5:7c:
                    85:fd:bd:cb:67:0b:7c:1d:7e:ab:ab:0f:b8:5f:67:
                    c8:93:30:79:fd:28:db:9a:66:f5:a8:34:ac:0b:31:
                    06:f7:2a:93:fd:fb:f2:59:20:1b:c9:a4:7c:e0:64:
                    a0:0d:6d:9d:90:27:70:6d:b4:e6:b6:fe:55:bd:7c:
                    b0:ff:67:42:fc:f6:aa:8b:2f:de:34:6a:f8:4a:51:
                    7b:6d:1b:6a:bc:6c:b5:b9:01:4e:5f:ca:74:6d:1c:
                    c3:ec:c4:da:18:e2:d4:db:e2:50:19:b2:8d:b9:f4:
                    4c:a0:da:81:12:fa:c7:80:49:da:44:e6:22:59:71:
                    8d:4a:44:3e:fe:9d:c2:ef:96:bc:5b:61:cd:27:5c:
                    14:b2:db:63:34:51:42:3d:64:43:1d:10:e8:ec:ac:
                    53:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:64:8A:91:5D:D2:3D:38:47:EF:BE:63:A3:3D:8F:05:93:4D:AB:69
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e36342e302f31392d3233203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:1c:c5:e2:8f:75:46:b1:86:35:c3:07:bc:27:70:48:dd:3e:
         5b:8e:9d:5d:ad:42:b1:58:27:40:f2:4a:14:49:cc:21:0f:7c:
         df:49:59:70:54:ef:34:68:de:c0:ea:79:a5:da:05:61:c7:f2:
         01:5b:f0:69:2b:99:31:d7:cb:b2:0a:b6:b9:5b:fa:f9:38:12:
         5a:46:32:2a:33:54:dc:1b:0e:54:83:dc:c0:2e:86:39:82:82:
         1b:eb:48:24:2e:5f:fb:b1:ca:fa:6a:d4:b0:c4:77:b4:e1:e8:
         3e:db:4d:45:26:94:9b:cf:06:64:c7:36:a9:ef:e1:ec:35:3c:
         10:43:c6:4c:4d:ea:9e:34:2e:b3:5e:97:b0:74:45:51:71:46:
         35:ef:e0:b8:b9:aa:3b:f3:c7:79:ee:f1:a6:d1:62:90:69:10:
         87:7f:f4:0a:40:b9:10:23:0c:81:30:c1:eb:62:d3:4a:16:56:
         44:22:00:f6:2f:99:74:19:73:d4:10:cd:71:99:6b:55:6c:ce:
         0e:ab:c9:98:ea:59:38:75:9a:4d:db:01:f9:b6:9e:10:6d:e5:
         3b:2e:2a:0b:7f:99:c0:75:82:a4:e2:8b:fa:b5:65:9d:9f:ae:
         02:41:6f:99:88:0a:3c:08:ad:e9:84:8f:72:0a:9e:7c:a6:e9:
         4e:71:e0:b8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMxuqTWXs60x+2hIZbizEzV0VcSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVFNTA4OEY2RDgxMEQ5RjMwNUQyM0E0QzU5M0E1RThG
MzBGNTI5RjAeFw0yNTAyMDQxODQzNTdaFw0yNjAyMDMxODQ4NTdaMDMxMTAvBgNV
BAMTKEZFNjQ4QTkxNUREMjNEMzg0N0VGQkU2M0EzM0Q4RjA1OTM0REFCNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjX6Guqf2dfAAP4Jn3fS11yAh7
3f0rrsTARIACyzgPXrErkFU8BogiTUmOLcS76uZAluCg2olrEbWoneaGmwxbCJVu
cvscl7hPExxmmGQU5xKGs6XBisBt7hi+9ny4HUBuy752n+nlfIX9vctnC3wdfqur
D7hfZ8iTMHn9KNuaZvWoNKwLMQb3KpP9+/JZIBvJpHzgZKANbZ2QJ3BttOa2/lW9
fLD/Z0L89qqLL940avhKUXttG2q8bLW5AU5fynRtHMPsxNoY4tTb4lAZso259Eyg
2oES+seASdpE5iJZcY1KRD7+ncLvlrxbYc0nXBSy22M0UUI9ZEMdEOjsrFPzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU/mSKkV3SPThH775joz2PBZNNq2kwHwYDVR0j
BBgwFoAU5eUIj22BDZ8wXSOkxZOl6PMPUp8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMUZFMThBMkFDQTNDNzFCOUYxRjZCOUYxQkJGNUEzODU0
M0E1MjdGQTZDNzQ3NTMzQ0VDRjExRTY0RTBENkIzLzAvRTVFNTA4OEY2RDgxMEQ5
RjMwNUQyM0E0QzU5M0E1RThGMzBGNTI5Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUU1MDg4RjZEODEwRDlGMzA1
RDIzQTRDNTkzQTVFOEYzMEY1MjlGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTFGRTE4QTJBQ0EzQzcxQjlGMUY2QjlGMUJCRjVBMzg1NDNBNTI3RkE2
Qzc0NzUzM0NFQ0YxMUU2NEUwRDZCMy8wLzMxMzkzMDJlMzUzMzJlMzYzNDJlMzAy
ZjMxMzkyZDMyMzMyMDNkM2UyMDMyMzAzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+NUAwDQYJ
KoZIhvcNAQELBQADggEBAEIcxeKPdUaxhjXDB7wncEjdPluOnV2tQrFYJ0DyShRJ
zCEPfN9JWXBU7zRo3sDqeaXaBWHH8gFb8GkrmTHXy7IKtrlb+vk4ElpGMiozVNwb
DlSD3MAuhjmCghvrSCQuX/uxyvpq1LDEd7Th6D7bTUUmlJvPBmTHNqnv4ew1PBBD
xkxN6p40LrNel7B0RVFxRjXv4Li5qjvzx3nu8abRYpBpEId/9ApAuRAjDIEwweti
00oWVkQiAPYvmXQZc9QQzXGZa1Vszg6ryZjqWTh1mk3bAfm2nhBt5TsuKgt/mcB1
gqTii/q1ZZ2frgJBb5mICjwIremEj3IKnnym6U5x4Lg=
-----END CERTIFICATE-----
Generated at Sun Apr 6 22:07:40 2025 by rpki-client