Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa
File:                     3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa (raw, json)
Hash identifier:          sCY5g5r5VX/V6MxBKWI24kV823/sGe/MDZ1zK7vOgXQ=
Subject key identifier:   88:8F:C3:11:5B:72:2F:78:E9:52:21:8E:03:43:57:08:4E:E5:91:0B
Certificate issuer:       /CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
Certificate serial:       608F4D61086B0CCEB1523CC5A0BA6F99B6E8A040
Authority key identifier: C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa
Signing time:             Tue 04 Feb 2025 18:03:43 +0000
ROA not before:           Tue 04 Feb 2025 17:58:43 +0000
ROA not after:            Tue 03 Feb 2026 18:03:43 +0000
asID:                     265823
IP address blocks:        192.141.92.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8f:4d:61:08:6b:0c:ce:b1:52:3c:c5:a0:ba:6f:99:b6:e8:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8AC2548546E760ED8D66D65505D4BF733452EB3
        Validity
            Not Before: Feb  4 17:58:43 2025 GMT
            Not After : Feb  3 18:03:43 2026 GMT
        Subject: CN=888FC3115B722F78E952218E034357084EE5910B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:ee:bb:64:43:b4:c9:02:dc:8d:88:f2:f9:
                    de:b4:da:02:7d:0c:25:83:a8:4a:b9:67:32:81:44:
                    8c:7b:41:2c:8a:fa:e8:d5:ba:db:54:28:73:49:6c:
                    44:5f:08:25:33:01:ec:8d:02:74:14:03:28:70:f5:
                    59:46:20:8b:70:57:f3:a5:38:da:f3:68:b8:28:71:
                    2d:43:9d:05:a6:05:ba:36:5a:e5:eb:d4:fb:17:3c:
                    36:56:13:ef:8b:80:5a:c9:fd:85:0f:16:19:9a:cd:
                    90:b0:37:bc:8b:dc:7d:e6:23:8c:3a:4e:55:fe:b0:
                    8e:16:21:54:b9:be:06:ee:a4:0f:c2:83:d6:91:bd:
                    12:2d:5b:50:88:d6:f2:27:5e:73:b9:88:0d:98:da:
                    8b:1a:b6:5f:d4:05:52:4f:c2:97:44:4b:ff:28:7f:
                    4d:e2:91:0b:00:07:e8:f6:6d:ee:03:3b:61:7a:85:
                    a5:cc:2a:1f:91:22:be:30:6f:03:8a:c3:18:53:c8:
                    01:82:1c:36:98:33:97:40:d4:19:91:81:3a:98:06:
                    a7:4a:3c:6e:dc:f4:53:f8:5e:6e:dc:61:fd:c6:b2:
                    77:a2:73:bb:51:ca:ce:39:a9:0e:9e:ed:00:0f:65:
                    92:ac:01:a1:32:6a:d7:8e:a3:dc:a2:3d:42:6f:99:
                    a3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8F:C3:11:5B:72:2F:78:E9:52:21:8E:03:43:57:08:4E:E5:91:0B
            X509v3 Authority Key Identifier:
                keyid:C8:AC:25:48:54:6E:76:0E:D8:D6:6D:65:50:5D:4B:F7:33:45:2E:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C8AC2548546E760ED8D66D65505D4BF733452EB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA54B0DCCB354D35176C980AC15C657052DDA43A7E0C33B1027BF47D2B11E79/0/3139322e3134312e39322e302f32322d3234203d3e20323635383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:27:02:bd:19:81:2c:93:87:34:9c:1d:dc:c8:b9:01:83:ac:
         83:13:01:53:fd:b2:45:ac:d9:c9:f8:42:2b:2c:a7:d5:c4:22:
         44:a1:bd:45:df:3b:ff:28:93:f0:96:d2:24:c1:5a:39:e2:3e:
         6b:ee:6d:f4:5d:da:3d:1e:ef:57:3a:ba:9e:8e:e0:2d:e6:b7:
         45:6c:99:7e:ae:83:71:d1:91:f7:97:c6:d7:47:ed:4a:ef:38:
         8a:82:2a:c3:d0:41:15:28:c4:59:ab:27:47:68:ca:31:0c:e8:
         fc:83:5a:ad:2d:a3:9e:14:61:7b:b9:b8:a6:e6:69:b2:6e:dd:
         42:69:58:a6:ba:5f:ce:38:ee:af:d2:e3:45:63:e6:c6:cd:9b:
         b0:02:72:7c:47:b5:87:b4:4a:eb:d1:75:db:fa:3e:ee:3b:6f:
         cb:bd:5c:d0:27:b3:24:f1:19:72:b1:f8:82:a4:23:b8:8c:6b:
         8c:13:c7:47:ef:4f:bd:13:5d:77:36:f0:d3:40:72:66:9b:0f:
         8a:5a:5d:01:55:9b:fc:84:ee:cd:1e:b1:51:47:0e:d8:d9:93:
         4b:aa:36:71:58:3f:2a:8a:5d:85:71:3e:f5:6a:dc:45:36:81:
         cd:24:01:40:f1:a3:6b:55:e0:c5:9c:6c:ee:1f:39:96:76:70:
         ba:2a:f0:34
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYI9NYQhrDM6xUjzFoLpvmbbooEAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhBQzI1NDg1NDZFNzYwRUQ4RDY2RDY1NTA1RDRCRjcz
MzQ1MkVCMzAeFw0yNTAyMDQxNzU4NDNaFw0yNjAyMDMxODAzNDNaMDMxMTAvBgNV
BAMTKDg4OEZDMzExNUI3MjJGNzhFOTUyMjE4RTAzNDM1NzA4NEVFNTkxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ce67ZEO0yQLcjYjy+d602gJ9
DCWDqEq5ZzKBRIx7QSyK+ujVuttUKHNJbERfCCUzAeyNAnQUAyhw9VlGIItwV/Ol
ONrzaLgocS1DnQWmBbo2WuXr1PsXPDZWE++LgFrJ/YUPFhmazZCwN7yL3H3mI4w6
TlX+sI4WIVS5vgbupA/Cg9aRvRItW1CI1vInXnO5iA2Y2osatl/UBVJPwpdES/8o
f03ikQsAB+j2be4DO2F6haXMKh+RIr4wbwOKwxhTyAGCHDaYM5dA1BmRgTqYBqdK
PG7c9FP4Xm7cYf3Gsneic7tRys45qQ6e7QAPZZKsAaEyateOo9yiPUJvmaN9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUiI/DEVtyL3jpUiGOA0NXCE7lkQswHwYDVR0j
BBgwFoAUyKwlSFRudg7Y1m1lUF1L9zNFLrMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQUE1NEIwRENDQjM1NEQzNTE3NkM5ODBBQzE1QzY1NzA1
MkREQTQzQTdFMEMzM0IxMDI3QkY0N0QyQjExRTc5LzAvQzhBQzI1NDg1NDZFNzYw
RUQ4RDY2RDY1NTA1RDRCRjczMzQ1MkVCMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DOEFDMjU0ODU0NkU3NjBFRDhE
NjZENjU1MDVENEJGNzMzNDUyRUIzLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREFBNTRCMERDQ0IzNTREMzUxNzZDOTgwQUMxNUM2NTcwNTJEREE0M0E3
RTBDMzNCMTAyN0JGNDdEMkIxMUU3OS8wLzMxMzkzMjJlMzEzNDMxMmUzOTMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzgzMjMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwI1c
MA0GCSqGSIb3DQEBCwUAA4IBAQAJJwK9GYEsk4c0nB3cyLkBg6yDEwFT/bJFrNnJ
+EIrLKfVxCJEob1F3zv/KJPwltIkwVo54j5r7m30Xdo9Hu9XOrqejuAt5rdFbJl+
roNx0ZH3l8bXR+1K7ziKgirD0EEVKMRZqydHaMoxDOj8g1qtLaOeFGF7ubim5mmy
bt1CaVimul/OOO6v0uNFY+bGzZuwAnJ8R7WHtErr0XXb+j7uO2/LvVzQJ7Mk8Rly
sfiCpCO4jGuME8dH70+9E113NvDTQHJmmw+KWl0BVZv8hO7NHrFRRw7Y2ZNLqjZx
WD8qil2FcT71atxFNoHNJAFA8aNrVeDFnGzuHzmWdnC6KvA0
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:08 2025 by rpki-client