Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203133353835.roa
File:                     3139302e31312e3132382e302f31392d3234203d3e203133353835.roa (raw, json)
Hash identifier:          tPZO4xd7MD/HqJVW7WSlqQgKAJgdkoNegO87pK0j5wE=
Subject key identifier:   85:91:32:C1:29:E5:0A:72:3A:2B:A6:99:B6:1A:4C:98:CA:46:67:7B
Certificate issuer:       /CN=194BC878A0116733917FAE71A98D799CA4442D66
Certificate serial:       46C55EDD6A3BA14B90B743B16E6E947C2CC79BBE
Authority key identifier: 19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203133353835.roa
Signing time:             Tue 04 Feb 2025 20:03:01 +0000
ROA not before:           Tue 04 Feb 2025 19:58:01 +0000
ROA not after:            Tue 03 Feb 2026 20:03:01 +0000
asID:                     13585
IP address blocks:        190.11.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:5e:dd:6a:3b:a1:4b:90:b7:43:b1:6e:6e:94:7c:2c:c7:9b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=194BC878A0116733917FAE71A98D799CA4442D66
        Validity
            Not Before: Feb  4 19:58:01 2025 GMT
            Not After : Feb  3 20:03:01 2026 GMT
        Subject: CN=859132C129E50A723A2BA699B61A4C98CA46677B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a8:87:c3:87:43:d0:d3:4c:fc:e0:b7:16:9f:
                    7e:45:7d:e1:67:d5:1f:6b:16:87:2b:65:ed:1b:03:
                    c4:62:41:89:30:cc:6f:7e:53:29:99:9d:75:73:a2:
                    6f:01:0e:4f:8d:74:3e:9f:56:87:fd:b0:f0:a8:c1:
                    39:17:7d:63:d3:f4:ac:b5:98:b2:8a:be:d7:75:b5:
                    60:5c:f4:87:af:d1:fb:3f:c2:45:c8:cd:85:7a:bf:
                    c3:ab:5a:42:11:d7:03:61:52:25:af:7c:49:2d:47:
                    bb:bb:16:e2:f4:f4:f0:c2:c7:4f:98:15:59:7a:0f:
                    2f:24:6b:62:4f:82:83:b5:c9:d8:b9:cd:49:d5:4e:
                    6f:8f:f2:ac:78:d0:b5:23:07:93:3e:60:b4:d7:58:
                    eb:78:40:3e:30:90:f5:bb:09:64:66:8d:a5:46:e9:
                    9f:e8:f0:79:3e:12:f3:3b:3c:f1:66:af:31:63:af:
                    20:6f:f0:cd:5f:6f:9e:1f:b1:5a:64:a5:ae:70:30:
                    5c:f9:16:5f:73:e9:1d:12:dc:25:4b:7b:30:b8:cf:
                    a7:eb:4e:7f:8c:89:eb:aa:01:89:04:98:37:c2:ac:
                    08:ec:f5:db:cb:fb:bd:cb:45:16:92:08:a5:53:d6:
                    3e:00:a6:ad:76:01:32:2d:f5:50:ea:b9:36:85:99:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:32:C1:29:E5:0A:72:3A:2B:A6:99:B6:1A:4C:98:CA:46:67:7B
            X509v3 Authority Key Identifier:
                keyid:19:4B:C8:78:A0:11:67:33:91:7F:AE:71:A9:8D:79:9C:A4:44:2D:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/194BC878A0116733917FAE71A98D799CA4442D66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/194BC878A0116733917FAE71A98D799CA4442D66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D42C9F6202E6B2E0B0D720921558E8C63AE6D370533585662F2D6943F909BB7C/0/3139302e31312e3132382e302f31392d3234203d3e203133353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c2:bd:a2:15:47:c3:7c:c0:03:f7:ec:56:ce:e8:4c:b0:4a:81:
         0b:76:55:1a:26:6b:76:b4:0b:ee:82:05:27:ff:c0:a2:1d:5f:
         8e:0a:17:2a:1f:f8:5c:5a:c0:3f:3d:a4:fd:e0:b1:3b:2c:63:
         a2:33:13:82:e1:19:28:8f:2c:a1:bf:7d:b5:07:fd:06:76:ff:
         f0:78:12:6c:6d:b0:df:2f:e1:54:e8:56:f7:d9:b8:ae:78:bb:
         83:ca:46:94:90:fb:09:70:28:ba:b0:6b:f4:cd:d9:b4:82:34:
         ff:68:e4:90:1a:40:c7:43:ae:45:ca:2a:70:78:5c:77:1a:28:
         ae:07:2e:74:cb:88:0b:6c:9c:6b:02:2a:23:0f:b4:00:c2:39:
         f3:8b:82:3b:53:1a:81:c8:8c:dd:dd:0d:9e:44:96:23:35:ef:
         b6:f3:fe:02:a6:b9:c4:7f:46:43:f4:ff:d9:36:51:0d:f4:c4:
         db:11:de:14:11:68:6a:27:3e:dd:fe:7a:f2:4b:fb:d4:86:ee:
         07:1c:4f:10:05:95:26:2e:e1:1c:9a:1f:f1:d7:b1:e1:bb:9e:
         0b:00:83:b9:2c:ec:ef:fb:e8:5b:05:04:74:bd:bc:43:63:cd:
         37:39:e9:a0:49:c2:75:a0:11:f3:4c:de:7b:f8:fc:56:fd:89:
         70:f0:45:14
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURsVe3Wo7oUuQt0Oxbm6UfCzHm74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0QkM4NzhBMDExNjczMzkxN0ZBRTcxQTk4RDc5OUNB
NDQ0MkQ2NjAeFw0yNTAyMDQxOTU4MDFaFw0yNjAyMDMyMDAzMDFaMDMxMTAvBgNV
BAMTKDg1OTEzMkMxMjlFNTBBNzIzQTJCQTY5OUI2MUE0Qzk4Q0E0NjY3N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqIfDh0PQ00z84LcWn35FfeFn
1R9rFocrZe0bA8RiQYkwzG9+UymZnXVzom8BDk+NdD6fVof9sPCowTkXfWPT9Ky1
mLKKvtd1tWBc9Iev0fs/wkXIzYV6v8OrWkIR1wNhUiWvfEktR7u7FuL09PDCx0+Y
FVl6Dy8ka2JPgoO1ydi5zUnVTm+P8qx40LUjB5M+YLTXWOt4QD4wkPW7CWRmjaVG
6Z/o8Hk+EvM7PPFmrzFjryBv8M1fb54fsVpkpa5wMFz5Fl9z6R0S3CVLezC4z6fr
Tn+MieuqAYkEmDfCrAjs9dvL+73LRRaSCKVT1j4Apq12ATIt9VDquTaFmYeVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUhZEywSnlCnI6K6aZthpMmMpGZ3swHwYDVR0j
BBgwFoAUGUvIeKARZzORf65xqY15nKRELWYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENDJDOUY2MjAyRTZCMkUwQjBENzIwOTIxNTU4RThDNjNB
RTZEMzcwNTMzNTg1NjYyRjJENjk0M0Y5MDlCQjdDLzAvMTk0QkM4NzhBMDExNjcz
MzkxN0ZBRTcxQTk4RDc5OUNBNDQ0MkQ2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xOTRCQzg3OEEwMTE2NzMzOTE3
RkFFNzFBOThENzk5Q0E0NDQyRDY2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDQyQzlGNjIwMkU2QjJFMEIwRDcyMDkyMTU1OEU4QzYzQUU2RDM3MDUz
MzU4NTY2MkYyRDY5NDNGOTA5QkI3Qy8wLzMxMzkzMDJlMzEzMTJlMzEzMjM4MmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzEzMzM1MzgzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBb4LgDAN
BgkqhkiG9w0BAQsFAAOCAQEAwr2iFUfDfMAD9+xWzuhMsEqBC3ZVGiZrdrQL7oIF
J//Aoh1fjgoXKh/4XFrAPz2k/eCxOyxjojMTguEZKI8sob99tQf9Bnb/8HgSbG2w
3y/hVOhW99m4rni7g8pGlJD7CXAourBr9M3ZtII0/2jkkBpAx0OuRcoqcHhcdxoo
rgcudMuIC2ycawIqIw+0AMI584uCO1MagciM3d0NnkSWIzXvtvP+Aqa5xH9GQ/T/
2TZRDfTE2xHeFBFoaic+3f568kv71IbuBxxPEAWVJi7hHJof8dex4bueCwCDuSzs
7/voWwUEdL28Q2PNNznpoEnCdaAR80zee/j8Vv2JcPBFFA==
-----END CERTIFICATE-----