Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
File:                     3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa (raw, json)
Hash identifier:          Ef60NCje6wSkrzvjw+9X88qyID7wtodIbtp5G1HAZ0Q=
Subject key identifier:   C5:A8:59:65:7D:94:19:F8:C6:1A:CC:94:8E:A2:A4:F9:CE:DA:70:D4
Certificate issuer:       /CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
Certificate serial:       099D33913B11C83FB63A091C0A4682CE7B21D2F0
Authority key identifier: 3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa
Signing time:             Tue 04 Feb 2025 20:07:07 +0000
ROA not before:           Tue 04 Feb 2025 20:02:07 +0000
ROA not after:            Tue 03 Feb 2026 20:07:07 +0000
asID:                     398712
IP address blocks:        190.111.160.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9d:33:91:3b:11:c8:3f:b6:3a:09:1c:0a:46:82:ce:7b:21:d2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6
        Validity
            Not Before: Feb  4 20:02:07 2025 GMT
            Not After : Feb  3 20:07:07 2026 GMT
        Subject: CN=C5A859657D9419F8C61ACC948EA2A4F9CEDA70D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:55:35:dd:73:e1:4e:fe:5b:18:c7:fc:ee:09:
                    ec:2f:95:53:87:d6:41:1f:21:2c:6d:5b:93:60:b1:
                    70:bd:a7:f3:23:f6:3c:ec:04:1a:f3:ff:94:d3:74:
                    62:d7:49:87:88:dc:2b:53:60:8e:84:b0:5e:e1:d8:
                    9f:1d:b7:e4:09:71:cd:86:61:06:81:77:8d:71:d8:
                    95:ed:f2:50:ab:85:cc:24:e8:3e:fb:b8:23:ae:46:
                    d4:78:ea:7a:8c:0a:40:fe:91:de:1a:dc:bb:de:3b:
                    e2:6d:a7:48:7a:d2:00:b6:5c:f4:7b:7a:bd:c4:f6:
                    5e:89:d6:02:a9:35:67:16:a6:52:e3:14:07:21:ed:
                    30:c8:17:b9:8a:a1:71:d8:9d:7a:84:9d:0e:06:18:
                    7b:3e:0d:d3:53:a3:76:f5:a7:5b:34:ac:1b:3b:9b:
                    94:ec:54:78:5f:63:81:6b:01:96:9c:6d:86:d4:ab:
                    fc:d5:74:21:ab:44:e3:40:d3:c0:41:2b:14:59:2f:
                    86:d6:03:f9:e4:e7:74:a5:32:92:53:c6:cf:fd:1c:
                    09:c2:49:33:65:06:b3:92:57:c0:7e:7a:ea:55:ca:
                    29:be:70:1e:5c:15:62:0d:b0:b1:a9:b4:ca:54:fc:
                    4b:d7:14:94:bc:47:3c:72:fe:7b:22:97:ea:b9:57:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A8:59:65:7D:94:19:F8:C6:1A:CC:94:8E:A2:A4:F9:CE:DA:70:D4
            X509v3 Authority Key Identifier:
                keyid:3E:27:77:AB:92:EF:5A:C6:D5:02:E2:9F:09:2B:21:D6:B1:E9:D3:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3E2777AB92EF5AC6D502E29F092B21D6B1E9D3B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B1487DD11AA7BA31389AABDDEF2181B0CF0CBE8F015A5AB481A574D73DB6D6/0/3139302e3131312e3136302e302f32322d3232203d3e20333938373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:ce:3d:58:92:ea:2d:c0:8c:90:5e:5b:03:6a:a9:58:b5:30:
         36:57:43:16:28:b2:f9:6c:2d:4d:c6:74:8f:9c:f8:4a:0c:a6:
         59:c5:7e:22:b3:b3:5f:fc:fc:38:ff:9b:4c:6a:48:ef:ed:d2:
         d2:8b:72:d8:15:0b:74:ed:4d:83:f9:8d:bb:5d:02:21:b1:7b:
         c0:0c:07:90:d9:ef:5b:23:32:b6:bd:d7:20:1d:62:9d:49:5a:
         fa:7d:8a:24:c0:9c:c6:14:07:63:b5:e3:f2:38:f4:2c:4c:ab:
         1b:41:0e:10:ee:43:de:7b:fb:e2:51:34:fc:00:d6:cf:45:76:
         8d:7e:8b:21:02:41:6b:c8:62:81:59:3c:c3:ac:a2:10:fc:56:
         a5:fd:9e:7e:75:1b:ef:66:b6:f8:e1:f6:65:b7:8d:92:e1:6a:
         e0:ea:6a:f5:c1:7a:a1:40:19:5b:95:71:da:9e:ef:a2:73:b6:
         a0:bc:0b:a7:10:73:72:f7:39:c1:26:45:d6:12:df:2f:74:73:
         f0:e8:39:9f:77:42:3b:6e:60:37:ae:aa:02:fc:c2:94:08:c4:
         19:aa:6a:a1:3e:56:c4:f1:c7:78:96:46:00:23:89:40:75:95:
         04:8c:ad:85:d6:fd:65:18:d3:59:83:b5:cf:b1:97:c1:1e:14:
         86:5b:cd:be
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUCZ0zkTsRyD+2OgkcCkaCznsh0vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyNzc3QUI5MkVGNUFDNkQ1MDJFMjlGMDkyQjIxRDZC
MUU5RDNCNjAeFw0yNTAyMDQyMDAyMDdaFw0yNjAyMDMyMDA3MDdaMDMxMTAvBgNV
BAMTKEM1QTg1OTY1N0Q5NDE5RjhDNjFBQ0M5NDhFQTJBNEY5Q0VEQTcwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZVTXdc+FO/lsYx/zuCewvlVOH
1kEfISxtW5NgsXC9p/Mj9jzsBBrz/5TTdGLXSYeI3CtTYI6EsF7h2J8dt+QJcc2G
YQaBd41x2JXt8lCrhcwk6D77uCOuRtR46nqMCkD+kd4a3LveO+Jtp0h60gC2XPR7
er3E9l6J1gKpNWcWplLjFAch7TDIF7mKoXHYnXqEnQ4GGHs+DdNTo3b1p1s0rBs7
m5TsVHhfY4FrAZacbYbUq/zVdCGrRONA08BBKxRZL4bWA/nk53SlMpJTxs/9HAnC
STNlBrOSV8B+eupVyim+cB5cFWINsLGptMpU/EvXFJS8Rzxy/nsil+q5V5d/AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUxahZZX2UGfjGGsyUjqKk+c7acNQwHwYDVR0j
BBgwFoAUPid3q5LvWsbVAuKfCSsh1rHp07YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMkIxNDg3REQxMUFBN0JBMzEzODlBQUJEREVGMjE4MUIw
Q0YwQ0JFOEYwMTVBNUFCNDgxQTU3NEQ3M0RCNkQ2LzAvM0UyNzc3QUI5MkVGNUFD
NkQ1MDJFMjlGMDkyQjIxRDZCMUU5RDNCNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zRTI3NzdBQjkyRUY1QUM2RDUw
MkUyOUYwOTJCMjFENkIxRTlEM0I2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjJCMTQ4N0REMTFBQTdCQTMxMzg5QUFCRERFRjIxODFCMENGMENCRThG
MDE1QTVBQjQ4MUE1NzRENzNEQjZENi8wLzMxMzkzMDJlMzEzMTMxMmUzMTM2MzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMzM5MzgzNzMxMzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
b6AwDQYJKoZIhvcNAQELBQADggEBAFPOPViS6i3AjJBeWwNqqVi1MDZXQxYosvls
LU3GdI+c+EoMplnFfiKzs1/8/Dj/m0xqSO/t0tKLctgVC3TtTYP5jbtdAiGxe8AM
B5DZ71sjMra91yAdYp1JWvp9iiTAnMYUB2O14/I49CxMqxtBDhDuQ957++JRNPwA
1s9Fdo1+iyECQWvIYoFZPMOsohD8VqX9nn51G+9mtvjh9mW3jZLhauDqavXBeqFA
GVuVcdqe76JztqC8C6cQc3L3OcEmRdYS3y90c/DoOZ93QjtuYDeuqgL8wpQIxBmq
aqE+VsTxx3iWRgAjiUB1lQSMrYXW/WUY01mDtc+xl8EeFIZbzb4=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:16:28 2025 by rpki-client