Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa
File:                     3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa (raw, json)
Hash identifier:          nqMSSZn+YcXer40UDkaBmzyOagfAlT6N7bf+6HCPuHY=
Subject key identifier:   95:C8:30:15:3A:1D:37:E6:B7:68:CC:4C:77:82:30:EF:90:BB:1C:40
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       5C1C5BCD10B1FAFA07F8DB1E78638AFC090D79A0
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:22 +0000
ROA not before:           Tue 04 Feb 2025 18:17:22 +0000
ROA not after:            Tue 03 Feb 2026 18:22:22 +0000
asID:                     22368
IP address blocks:        190.184.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1c:5b:cd:10:b1:fa:fa:07:f8:db:1e:78:63:8a:fc:09:0d:79:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:22 2025 GMT
            Not After : Feb  3 18:22:22 2026 GMT
        Subject: CN=95C830153A1D37E6B768CC4C778230EF90BB1C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1d:92:3f:61:68:54:47:43:6c:d1:62:93:3f:
                    8f:c6:c6:43:32:1d:88:9a:ad:fd:9e:b7:57:b2:d4:
                    4e:48:f6:dc:a1:6c:58:fd:c8:e6:b8:09:13:23:80:
                    a2:32:ba:ef:fc:59:6f:60:3b:f7:67:e4:df:32:1e:
                    e1:ec:cf:50:b4:d4:1d:43:9f:86:6b:17:5e:61:fd:
                    c5:31:8f:b8:a2:21:83:20:1e:bb:28:da:a4:a8:11:
                    a9:6f:82:20:d4:bf:d0:8a:9f:a9:2e:42:fc:03:b4:
                    2d:f2:5c:f6:ab:73:e4:f8:70:0b:6b:19:c3:cd:db:
                    e9:05:c0:2f:48:0d:f0:36:99:8c:ae:13:71:7f:dd:
                    0d:a5:6b:e5:ac:28:24:d6:6b:fc:c7:6b:a7:24:aa:
                    ab:a3:b1:39:bc:2d:97:ec:c6:75:8f:f7:a8:58:99:
                    c8:58:6d:67:2d:83:aa:c8:1b:cc:5a:0b:b5:0a:69:
                    6a:80:aa:9a:55:11:bf:ad:b9:20:6a:83:cd:91:da:
                    53:9a:81:6d:49:95:40:68:9d:b5:15:67:80:b3:1c:
                    a7:c0:e2:ed:52:71:6f:63:16:1a:55:d4:70:8b:ba:
                    d3:2a:62:6d:03:e3:56:3e:6b:45:0d:e0:14:39:a7:
                    88:48:5d:87:80:b1:76:1f:64:06:e1:47:39:60:eb:
                    60:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C8:30:15:3A:1D:37:E6:B7:68:CC:4C:77:82:30:EF:90:BB:1C:40
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3139302e3138342e3132382e302f31382d3234203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:20:ea:13:d9:40:cd:6f:8c:6c:88:bd:f0:95:0f:77:f3:51:
         09:ef:bb:22:6e:8a:a4:cd:69:35:73:0f:3a:a8:9c:c5:ce:70:
         97:b2:26:25:79:7b:42:86:d4:d1:72:2a:6e:79:d5:cd:21:cf:
         58:8c:96:f6:6b:78:64:bc:62:af:29:8a:f8:6a:88:86:fb:bb:
         d3:7d:8f:fb:49:49:c7:32:da:7a:d2:fd:66:a8:dd:73:2f:9a:
         4a:8a:8b:22:a9:40:d4:8d:35:78:08:2a:f9:3c:ea:b3:ac:fe:
         e3:d8:85:72:ab:1b:bf:6f:04:06:ff:19:51:14:e6:dc:3c:0e:
         04:dc:8d:e6:ec:76:f0:2e:9c:df:ab:5f:03:b4:fd:3a:1b:03:
         27:a5:e5:8b:02:60:90:7f:4f:6d:6f:42:42:89:9d:d2:89:11:
         a7:fe:be:10:c6:3b:b7:2b:dd:b3:4f:e9:b0:8c:d2:3a:da:44:
         e0:c7:f5:a0:e1:70:b3:d7:de:73:af:c5:13:43:d1:6d:4e:90:
         77:83:ac:ab:1b:46:3d:c5:58:03:69:f2:0f:5a:38:d9:77:3b:
         50:f4:7c:1b:84:93:43:ac:f2:8e:a4:d0:24:91:f9:5e:97:84:
         f2:54:68:66:67:fa:f7:29:a1:31:3b:c6:98:61:3e:64:c3:c0:
         7f:b8:0a:2a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUXBxbzRCx+voH+NseeGOK/AkNeaAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNTAyMDQxODE3MjJaFw0yNjAyMDMxODIyMjJaMDMxMTAvBgNV
BAMTKDk1QzgzMDE1M0ExRDM3RTZCNzY4Q0M0Qzc3ODIzMEVGOTBCQjFDNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSHZI/YWhUR0Ns0WKTP4/GxkMy
HYiarf2et1ey1E5I9tyhbFj9yOa4CRMjgKIyuu/8WW9gO/dn5N8yHuHsz1C01B1D
n4ZrF15h/cUxj7iiIYMgHrso2qSoEalvgiDUv9CKn6kuQvwDtC3yXParc+T4cAtr
GcPN2+kFwC9IDfA2mYyuE3F/3Q2la+WsKCTWa/zHa6ckqqujsTm8LZfsxnWP96hY
mchYbWctg6rIG8xaC7UKaWqAqppVEb+tuSBqg82R2lOagW1JlUBonbUVZ4CzHKfA
4u1ScW9jFhpV1HCLutMqYm0D41Y+a0UN4BQ5p4hIXYeAsXYfZAbhRzlg62DnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUlcgwFTodN+a3aMxMd4Iw75C7HEAwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMxMzkzMDJlMzEzODM0MmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvriA
MA0GCSqGSIb3DQEBCwUAA4IBAQAQIOoT2UDNb4xsiL3wlQ9381EJ77siboqkzWk1
cw86qJzFznCXsiYleXtChtTRcipuedXNIc9YjJb2a3hkvGKvKYr4aoiG+7vTfY/7
SUnHMtp60v1mqN1zL5pKiosiqUDUjTV4CCr5POqzrP7j2IVyqxu/bwQG/xlRFObc
PA4E3I3m7HbwLpzfq18DtP06GwMnpeWLAmCQf09tb0JCiZ3SiRGn/r4Qxju3K92z
T+mwjNI62kTgx/Wg4XCz195zr8UTQ9FtTpB3g6yrG0Y9xVgDafIPWjjZdztQ9Hwb
hJNDrPKOpNAkkflel4TyVGhmZ/r3KaExO8aYYT5kw8B/uAoq
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:28 2025 by rpki-client