Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e33322e302f32302d3231203d3e203232333638.roa
File:                     3139302e31332e33322e302f32302d3231203d3e203232333638.roa (raw, json)
Hash identifier:          NUOLhupkjLnwqY2nQFZDOA3jxJ2R7KiwzYt3hY3CntM=
Subject key identifier:   60:2C:C3:9A:50:D3:A4:76:9C:49:00:60:73:C6:2B:24:E7:95:E3:BD
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       2F7751F7B222FCA933DA0531A24D1FFA4119A977
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e33322e302f32302d3231203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:15 +0000
ROA not before:           Tue 04 Feb 2025 18:17:15 +0000
ROA not after:            Tue 03 Feb 2026 18:22:15 +0000
asID:                     22368
IP address blocks:        190.13.32.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:77:51:f7:b2:22:fc:a9:33:da:05:31:a2:4d:1f:fa:41:19:a9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:15 2025 GMT
            Not After : Feb  3 18:22:15 2026 GMT
        Subject: CN=602CC39A50D3A4769C49006073C62B24E795E3BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:79:39:72:71:3c:7f:9d:7b:e5:a0:e3:cf:48:
                    97:2c:2b:b7:14:6c:d2:fd:d4:5c:18:5a:d9:37:7d:
                    3b:d0:73:9b:48:d0:cb:69:46:4f:b8:40:fd:70:d8:
                    fd:f1:d1:fa:39:6d:bd:b4:27:f7:fb:ae:ed:1e:98:
                    e5:d8:24:2a:47:ae:af:b4:4c:ad:ff:d2:33:9c:ec:
                    79:a1:04:3d:36:b3:b0:43:9a:af:d9:42:c6:04:9e:
                    92:f7:69:2b:24:c9:35:83:11:67:31:0f:2e:fa:80:
                    21:0d:f5:a9:f7:94:eb:dc:62:9c:96:8b:4c:be:ef:
                    72:cd:18:da:3d:36:c0:31:37:60:27:ec:ad:4c:08:
                    d5:1f:c2:23:42:e4:f9:c1:e9:93:d2:66:71:3a:bc:
                    0c:61:50:07:c5:d2:62:3c:fe:bc:34:ea:32:ef:43:
                    c7:7a:26:ec:f7:c8:14:dc:a0:ca:ee:e8:77:35:0a:
                    f6:6f:9e:72:76:d7:b5:6f:15:aa:b8:b6:80:b2:6a:
                    75:b6:a3:a2:70:2b:b2:71:bc:bd:02:f9:9e:5c:58:
                    79:f0:ff:67:e3:d7:8c:30:8c:af:69:d6:bb:72:b4:
                    00:de:5f:33:71:0c:19:63:6f:e7:35:69:68:86:49:
                    fe:9f:10:02:ad:f8:e0:2d:d1:88:85:8a:e9:fc:8c:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:C3:9A:50:D3:A4:76:9C:49:00:60:73:C6:2B:24:E7:95:E3:BD
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e31332e33322e302f32302d3231203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:49:08:4f:da:68:26:b3:fc:50:11:47:44:ce:08:35:d9:bb:
         06:2f:e0:85:ca:e7:df:14:f7:92:85:c9:1b:9c:47:fa:e5:a2:
         6c:91:e6:75:e6:c4:0e:aa:6e:f0:d0:9e:04:07:b2:be:f1:f1:
         05:e4:c7:83:8a:5b:3c:93:34:01:0a:a6:8f:3f:46:d8:f7:f6:
         c1:9b:ba:cb:be:a3:37:88:39:71:42:be:7f:7b:8d:b2:84:9e:
         df:2d:e9:ba:3c:3f:2a:38:6c:29:84:09:df:7b:36:9c:3d:f0:
         a2:26:ce:7a:d5:df:34:68:47:3c:d8:54:f3:77:6f:c2:33:c4:
         58:bc:ed:c7:cd:e7:82:96:18:75:01:ac:03:ee:04:ed:f5:d8:
         e4:20:ae:90:1b:2a:4a:a1:3c:be:28:e8:55:3a:47:8d:d3:d4:
         d2:b7:59:f7:cd:56:f1:1b:cd:71:3a:fa:3c:3b:24:ed:4b:a3:
         42:03:be:f5:92:5c:d8:16:16:ca:b5:3c:8b:55:b1:34:36:ef:
         e2:35:60:f7:b5:59:73:f3:38:d5:45:3b:fd:8b:87:9e:a6:7c:
         be:2a:10:8d:eb:30:9a:48:a7:74:4f:3d:e9:14:b0:4d:d1:d0:
         02:cc:6a:15:c4:08:46:c9:af:c1:16:c2:3b:eb:e2:73:cd:ed:
         bf:23:19:c8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUL3dR97Ii/Kkz2gUxok0f+kEZqXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTAyMDQxODE3MTVaFw0yNjAyMDMxODIyMTVaMDMxMTAvBgNV
BAMTKDYwMkNDMzlBNTBEM0E0NzY5QzQ5MDA2MDczQzYyQjI0RTc5NUUzQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUeTlycTx/nXvloOPPSJcsK7cU
bNL91FwYWtk3fTvQc5tI0MtpRk+4QP1w2P3x0fo5bb20J/f7ru0emOXYJCpHrq+0
TK3/0jOc7HmhBD02s7BDmq/ZQsYEnpL3aSskyTWDEWcxDy76gCEN9an3lOvcYpyW
i0y+73LNGNo9NsAxN2An7K1MCNUfwiNC5PnB6ZPSZnE6vAxhUAfF0mI8/rw06jLv
Q8d6Juz3yBTcoMru6Hc1CvZvnnJ217VvFaq4toCyanW2o6JwK7JxvL0C+Z5cWHnw
/2fj14wwjK9p1rtytADeXzNxDBljb+c1aWiGSf6fEAKt+OAt0YiFiun8jIpPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYCzDmlDTpHacSQBgc8YrJOeV470wHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzEzMzJlMzMzMjJlMzAy
ZjMyMzAyZDMyMzEyMDNkM2UyMDMyMzIzMzM2Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+DSAwDQYJ
KoZIhvcNAQELBQADggEBADFJCE/aaCaz/FARR0TOCDXZuwYv4IXK598U95KFyRuc
R/rlomyR5nXmxA6qbvDQngQHsr7x8QXkx4OKWzyTNAEKpo8/Rtj39sGbusu+ozeI
OXFCvn97jbKEnt8t6bo8Pyo4bCmECd97Npw98KImznrV3zRoRzzYVPN3b8IzxFi8
7cfN54KWGHUBrAPuBO312OQgrpAbKkqhPL4o6FU6R43T1NK3WffNVvEbzXE6+jw7
JO1Lo0IDvvWSXNgWFsq1PItVsTQ27+I1YPe1WXPzONVFO/2Lh56mfL4qEI3rMJpI
p3RPPekUsE3R0ALMahXECEbJr8EWwjvr4nPN7b8jGcg=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:42 2025 by rpki-client