Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3133302e302f32342d3234203d3e20323632353839.roa
File:                     3139302e3132312e3133302e302f32342d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          aHhum5sru03vE5uxZG/LYDnMeKDaGmFNzFEhdoapT50=
Subject key identifier:   2D:CF:1E:37:4D:D5:8C:EF:7E:DA:7F:E2:F1:28:AF:11:3C:86:F4:0D
Certificate issuer:       /CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
Certificate serial:       3395D437383F6D20494C2BF52CF5DDEC09C9B4FE
Authority key identifier: B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3133302e302f32342d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 19:56:57 +0000
ROA not before:           Tue 04 Feb 2025 19:51:57 +0000
ROA not after:            Tue 03 Feb 2026 19:56:57 +0000
asID:                     262589
IP address blocks:        190.121.130.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:95:d4:37:38:3f:6d:20:49:4c:2b:f5:2c:f5:dd:ec:09:c9:b4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C
        Validity
            Not Before: Feb  4 19:51:57 2025 GMT
            Not After : Feb  3 19:56:57 2026 GMT
        Subject: CN=2DCF1E374DD58CEF7EDA7FE2F128AF113C86F40D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:41:9e:b0:47:07:b7:c4:1e:66:7f:14:aa:d3:
                    f7:69:d1:b5:e4:67:88:24:4c:d6:4f:79:18:ca:df:
                    a9:05:1e:98:07:70:64:90:37:4c:2d:f6:4c:b8:c0:
                    a6:aa:cc:ca:8b:64:a2:a7:21:51:6e:bc:17:04:31:
                    97:59:bb:c3:c2:38:dd:86:7e:f9:59:82:a6:43:a4:
                    1a:84:a0:0a:da:8d:d4:95:3d:09:02:ad:ab:8b:06:
                    b9:d8:43:cd:64:81:91:af:09:1c:14:24:ad:e6:34:
                    be:2f:a0:ef:e3:ee:30:e5:5b:d5:7d:e4:b6:74:49:
                    12:c8:17:24:f8:fb:68:99:8b:f2:17:02:db:24:d2:
                    03:05:67:e6:72:43:9d:33:ba:f2:45:86:34:8c:2b:
                    e9:70:47:25:65:ec:ae:e0:55:c1:ca:61:bb:40:f0:
                    92:f7:d9:41:29:93:bc:1e:1f:85:63:0b:2a:7b:f4:
                    6e:13:e1:55:d3:64:85:d5:16:0b:a4:99:9b:ea:a2:
                    27:0f:78:5e:ea:63:bd:5f:55:71:fa:92:2a:f8:b6:
                    e4:37:8c:31:cc:dd:be:bb:f3:96:9b:40:3b:ad:e5:
                    82:90:56:36:62:75:7c:4f:f2:b0:60:03:ca:59:8e:
                    84:fb:09:d3:d5:cc:6f:5f:21:39:45:f7:33:62:ea:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:1E:37:4D:D5:8C:EF:7E:DA:7F:E2:F1:28:AF:11:3C:86:F4:0D
            X509v3 Authority Key Identifier:
                keyid:B5:ED:DA:57:DB:A2:5B:BD:40:52:D6:AE:0D:EC:F7:40:EA:27:B5:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B5EDDA57DBA25BBD4052D6AE0DECF740EA27B57C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A25E89F4F69E20A98D165507397EBBC5063527E2190D90A37E39F6982AC91AD7/0/3139302e3132312e3133302e302f32342d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:17:fe:03:bf:71:55:80:3a:70:13:a8:3c:e3:46:1a:65:
         ae:6b:3e:91:0f:0e:4a:cb:81:d1:19:2a:92:7d:8a:d4:e3:8b:
         1e:0a:a3:3f:4c:87:44:4f:33:bf:16:f6:51:32:ac:00:ce:bc:
         05:85:28:c4:41:da:bb:cd:89:af:41:6f:1e:c5:61:cf:cb:d9:
         51:70:8c:a5:b9:b9:60:3b:6a:7f:16:8e:8a:0b:a4:14:d3:26:
         41:d9:7b:8d:15:c9:9a:c0:e8:16:fc:a4:10:00:5c:68:d2:a4:
         62:a8:73:d0:91:ee:35:a0:e0:b2:0a:b1:97:fc:45:d2:ef:66:
         42:9f:d6:8a:5d:ca:41:24:ef:f6:50:e9:2b:6d:76:20:3f:5e:
         21:ea:c3:63:cc:10:58:87:57:90:70:c0:02:7c:82:cc:9a:4f:
         18:57:06:74:d1:a2:5b:97:05:72:50:51:ed:c2:0a:53:3d:37:
         76:76:9c:2f:63:41:bd:f2:d2:f6:78:0f:32:8f:ee:cb:1a:dc:
         c3:77:2b:65:bf:8b:fb:65:7f:a1:4c:ba:40:2a:68:9b:88:f1:
         2a:a5:17:cc:9d:44:58:d0:04:88:f3:91:6f:cc:8e:ab:7f:df:
         c2:fc:8d:79:22:15:f9:7b:e5:c0:7b:ea:02:59:7a:94:96:3a:
         a8:6d:c6:67
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUM5XUNzg/bSBJTCv1LPXd7AnJtP4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVFRERBNTdEQkEyNUJCRDQwNTJENkFFMERFQ0Y3NDBF
QTI3QjU3QzAeFw0yNTAyMDQxOTUxNTdaFw0yNjAyMDMxOTU2NTdaMDMxMTAvBgNV
BAMTKDJEQ0YxRTM3NERENThDRUY3RURBN0ZFMkYxMjhBRjExM0M4NkY0MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcQZ6wRwe3xB5mfxSq0/dp0bXk
Z4gkTNZPeRjK36kFHpgHcGSQN0wt9ky4wKaqzMqLZKKnIVFuvBcEMZdZu8PCON2G
fvlZgqZDpBqEoArajdSVPQkCrauLBrnYQ81kgZGvCRwUJK3mNL4voO/j7jDlW9V9
5LZ0SRLIFyT4+2iZi/IXAtsk0gMFZ+ZyQ50zuvJFhjSMK+lwRyVl7K7gVcHKYbtA
8JL32UEpk7weH4VjCyp79G4T4VXTZIXVFgukmZvqoicPeF7qY71fVXH6kir4tuQ3
jDHM3b6785abQDut5YKQVjZidXxP8rBgA8pZjoT7CdPVzG9fITlF9zNi6ph7AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQULc8eN03VjO9+2n/i8SivETyG9A0wHwYDVR0j
BBgwFoAUte3aV9uiW71AUtauDez3QOontXwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMjVFODlGNEY2OUUyMEE5OEQxNjU1MDczOTdFQkJDNTA2
MzUyN0UyMTkwRDkwQTM3RTM5RjY5ODJBQzkxQUQ3LzAvQjVFRERBNTdEQkEyNUJC
RDQwNTJENkFFMERFQ0Y3NDBFQTI3QjU3Qy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNUVEREE1N0RCQTI1QkJENDA1
MkQ2QUUwREVDRjc0MEVBMjdCNTdDLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTI1RTg5RjRGNjlFMjBBOThEMTY1NTA3Mzk3RUJCQzUwNjM1MjdFMjE5
MEQ5MEEzN0UzOUY2OTgyQUM5MUFENy8wLzMxMzkzMDJlMzEzMjMxMmUzMTMzMzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC+
eYIwDQYJKoZIhvcNAQELBQADggEBABW8F/4Dv3FVgDpwE6g840YaZa5rPpEPDkrL
gdEZKpJ9itTjix4Koz9Mh0RPM78W9lEyrADOvAWFKMRB2rvNia9Bbx7FYc/L2VFw
jKW5uWA7an8WjooLpBTTJkHZe40VyZrA6Bb8pBAAXGjSpGKoc9CR7jWg4LIKsZf8
RdLvZkKf1opdykEk7/ZQ6SttdiA/XiHqw2PMEFiHV5BwwAJ8gsyaTxhXBnTRoluX
BXJQUe3CClM9N3Z2nC9jQb3y0vZ4DzKP7ssa3MN3K2W/i/tlf6FMukAqaJuI8Sql
F8ydRFjQBIjzkW/Mjqt/38L8jXkiFfl75cB76gJZepSWOqhtxmc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:13:31 2025 by rpki-client