Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203132303636.roa
File:                     3139302e39342e33322e302f31392d3234203d3e203132303636.roa (raw, json)
Hash identifier:          Wp/cgZ2+pW4pazWKP2vsl4RHVkela/5Xi/Q25wJTR1Q=
Subject key identifier:   4F:B0:4C:1B:D8:A1:24:A3:E7:36:0B:51:98:66:32:E7:9A:7D:F1:F1
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       73A0F7CA596904A40AE4964811EB6A8D6CEB96B7
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203132303636.roa
Signing time:             Tue 04 Feb 2025 18:46:59 +0000
ROA not before:           Tue 04 Feb 2025 18:41:59 +0000
ROA not after:            Tue 03 Feb 2026 18:46:59 +0000
asID:                     12066
IP address blocks:        190.94.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:a0:f7:ca:59:69:04:a4:0a:e4:96:48:11:eb:6a:8d:6c:eb:96:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Feb  4 18:41:59 2025 GMT
            Not After : Feb  3 18:46:59 2026 GMT
        Subject: CN=4FB04C1BD8A124A3E7360B51986632E79A7DF1F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:f8:92:95:77:a1:59:d1:68:45:eb:50:d4:
                    87:7a:98:fd:09:fa:5e:5b:2d:d1:c5:9b:93:1f:1a:
                    15:1d:18:95:d5:12:81:b4:c0:3f:60:dd:47:a2:30:
                    4f:b1:4b:b9:f7:5f:5f:e4:14:79:ab:f6:97:23:db:
                    0b:f4:ff:ea:7d:fc:53:59:db:d0:1f:b5:57:74:e5:
                    c5:0f:79:c4:c0:2c:7c:a0:c5:8f:03:08:95:01:f4:
                    fa:82:b4:e1:c9:67:3c:4c:d5:f9:f3:25:a7:b6:bf:
                    88:6f:78:0b:b0:fc:12:b8:08:a9:6a:da:d0:6d:41:
                    6e:a4:b4:3e:fd:1f:4f:c2:9a:d5:be:2a:6e:75:87:
                    c0:8b:f2:27:0b:23:58:77:19:e1:e1:53:12:a9:a2:
                    21:44:f6:85:2a:15:c4:3b:40:c3:fc:84:9e:d7:c4:
                    94:33:32:b0:23:ff:8a:7b:ab:8d:7e:fb:8e:01:09:
                    a0:cd:d3:9e:d5:c5:c7:97:ce:a4:64:6c:f1:73:e6:
                    4e:4f:4a:36:b4:03:0a:53:64:f6:32:51:38:ae:de:
                    79:c0:ba:7d:93:0e:cd:06:bf:82:40:95:47:40:73:
                    15:8b:f9:5b:3f:1f:1d:3d:b6:5b:83:9f:bf:04:10:
                    45:40:cc:a5:d5:c6:00:3b:71:52:c1:62:28:e9:78:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:4C:1B:D8:A1:24:A3:E7:36:0B:51:98:66:32:E7:9A:7D:F1:F1
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3139302e39342e33322e302f31392d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:9e:e6:9c:a6:94:86:35:2d:07:e2:46:2d:c1:09:6a:dd:
         87:43:64:6a:e8:33:23:e3:c8:13:03:d2:fa:e3:bc:ca:9b:9c:
         a5:4a:1e:29:2e:b1:ad:db:be:84:70:3d:36:22:82:b0:7a:25:
         db:ca:e0:ea:67:f0:3d:fe:0f:a9:62:60:7f:c4:13:a9:f7:76:
         cd:81:46:6b:c5:a9:72:ac:cb:56:8d:ce:1b:bc:5c:76:04:af:
         2b:62:41:c0:ea:32:00:d4:d3:cc:3f:52:db:c2:df:3b:cc:91:
         8d:d6:5a:2b:0b:61:0a:10:75:e6:fa:9b:4f:bb:c8:97:13:9e:
         e9:fa:7c:dd:19:b6:b2:3d:d8:99:1c:fe:3f:6d:db:3f:c5:17:
         8b:5f:9c:a8:a0:aa:48:62:f3:21:83:4e:74:5f:a2:ed:36:fc:
         e3:6d:dd:9d:fc:d1:ee:8e:be:c0:82:4b:16:4c:6c:37:8f:c6:
         c9:61:b1:0a:30:1b:7a:75:52:a9:8b:99:c3:5e:a7:69:99:11:
         76:01:36:b0:df:3c:51:23:c0:03:5d:68:58:f7:98:06:00:d0:
         50:4c:21:3f:12:ed:d4:36:6d:3f:c5:97:e5:42:70:f3:48:ea:
         b7:dc:75:74:80:46:63:5b:10:73:a2:9f:68:fb:ca:13:ac:6c:
         da:67:5f:d3
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUc6D3yllpBKQK5JZIEetqjWzrlrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk2MTJFNUNCNzFERDQ3QzAyMTlGNDA0N0Y0NEFGNDMy
NjBBRTY5QjAeFw0yNTAyMDQxODQxNTlaFw0yNjAyMDMxODQ2NTlaMDMxMTAvBgNV
BAMTKDRGQjA0QzFCRDhBMTI0QTNFNzM2MEI1MTk4NjYzMkU3OUE3REYxRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgx/iSlXehWdFoRetQ1Id6mP0J
+l5bLdHFm5MfGhUdGJXVEoG0wD9g3UeiME+xS7n3X1/kFHmr9pcj2wv0/+p9/FNZ
29AftVd05cUPecTALHygxY8DCJUB9PqCtOHJZzxM1fnzJae2v4hveAuw/BK4CKlq
2tBtQW6ktD79H0/CmtW+Km51h8CL8icLI1h3GeHhUxKpoiFE9oUqFcQ7QMP8hJ7X
xJQzMrAj/4p7q41++44BCaDN057VxceXzqRkbPFz5k5PSja0AwpTZPYyUTiu3nnA
un2TDs0Gv4JAlUdAcxWL+Vs/Hx09tluDn78EEEVAzKXVxgA7cVLBYijpeBV9AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUT7BMG9ihJKPnNgtRmGYy55p98fEwHwYDVR0j
BBgwFoAUCWEuXLcd1HwCGfQEf0SvQyYK5pswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DMEU3QTkxMzZGMURBRDI2NEUwNEI2NzM2QkZBRkE3MjNC
QkYzNEQ2MTVCRjcxMkU5ODkxNkYxREVEQzg2MDM1LzAvMDk2MTJFNUNCNzFERDQ3
QzAyMTlGNDA0N0Y0NEFGNDMyNjBBRTY5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wOTYxMkU1Q0I3MURENDdDMDIx
OUY0MDQ3RjQ0QUY0MzI2MEFFNjlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzBFN0E5MTM2RjFEQUQyNjRFMDRCNjczNkJGQUZBNzIzQkJGMzRENjE1
QkY3MTJFOTg5MTZGMURFREM4NjAzNS8wLzMxMzkzMDJlMzkzNDJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzIzMDM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+XiAwDQYJ
KoZIhvcNAQELBQADggEBAILtnuacppSGNS0H4kYtwQlq3YdDZGroMyPjyBMD0vrj
vMqbnKVKHikusa3bvoRwPTYigrB6JdvK4Opn8D3+D6liYH/EE6n3ds2BRmvFqXKs
y1aNzhu8XHYErytiQcDqMgDU08w/UtvC3zvMkY3WWisLYQoQdeb6m0+7yJcTnun6
fN0ZtrI92Jkc/j9t2z/FF4tfnKigqkhi8yGDTnRfou02/ONt3Z380e6OvsCCSxZM
bDePxslhsQowG3p1UqmLmcNep2mZEXYBNrDfPFEjwANdaFj3mAYA0FBMIT8S7dQ2
bT/Fl+VCcPNI6rfcdXSARmNbEHOin2j7yhOsbNpnX9M=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:03 2025 by rpki-client