Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa
File:                     3139302e39332e34362e302f32342d3234203d3e20323639383332.roa (raw, json)
Hash identifier:          Tb8pr51nOoDOPxhKmbzOETZEvxZTxAUzntdV2eJqjaI=
Subject key identifier:   4F:B3:1E:D8:3D:CC:A0:09:09:F5:D8:95:AF:53:9B:F5:4E:5A:27:E1
Certificate issuer:       /CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
Certificate serial:       6FCE7C170686BC67A046FA021529B8AA54470B7C
Authority key identifier: F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa
Signing time:             Tue 04 Feb 2025 18:38:16 +0000
ROA not before:           Tue 04 Feb 2025 18:33:16 +0000
ROA not after:            Tue 03 Feb 2026 18:38:16 +0000
asID:                     269832
IP address blocks:        190.93.46.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ce:7c:17:06:86:bc:67:a0:46:fa:02:15:29:b8:aa:54:47:0b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F609D193409C5F2F1E6706D930F45BE7B16F9E3F
        Validity
            Not Before: Feb  4 18:33:16 2025 GMT
            Not After : Feb  3 18:38:16 2026 GMT
        Subject: CN=4FB31ED83DCCA00909F5D895AF539BF54E5A27E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:ba:99:55:78:a0:89:eb:bb:7a:41:2c:b0:
                    a2:3f:b5:cf:b3:94:93:ad:d9:6f:7b:4d:cf:b3:2d:
                    e8:ab:ce:fa:17:a9:69:10:28:a8:a1:8a:61:0f:28:
                    5b:f1:e4:f6:40:b5:b6:77:e9:e9:a3:3c:22:a6:60:
                    16:72:14:38:49:63:d4:82:0a:93:45:c6:b6:f3:d5:
                    22:7f:13:c3:97:71:64:c5:94:5a:70:c6:92:80:9f:
                    93:11:56:03:b4:a1:96:ec:e1:4a:12:7b:6d:66:46:
                    e9:ee:94:f8:b9:77:9c:c2:b9:8a:63:dc:41:f9:8a:
                    61:40:ff:75:ec:a9:ca:68:94:9e:62:e8:f9:22:00:
                    82:df:7b:8f:f6:71:4f:37:12:3b:8a:4d:c3:d9:a2:
                    1d:b1:03:ab:6e:f5:17:03:01:76:ae:2a:90:a7:e4:
                    c6:fe:f6:03:63:e1:a6:72:7d:7e:5d:52:d9:80:bf:
                    2a:10:e6:e8:cc:09:ef:95:ae:22:9c:3f:22:43:23:
                    7b:cf:20:13:75:25:36:d1:ac:45:0f:e8:ca:8c:d5:
                    f3:82:91:00:c4:c8:51:bb:02:e9:be:bc:88:09:f2:
                    93:41:10:ce:90:79:0f:19:62:23:32:aa:fe:ed:f1:
                    d2:c1:b7:04:f2:eb:aa:18:5d:40:ab:30:f4:9d:6b:
                    24:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B3:1E:D8:3D:CC:A0:09:09:F5:D8:95:AF:53:9B:F5:4E:5A:27:E1
            X509v3 Authority Key Identifier:
                keyid:F6:09:D1:93:40:9C:5F:2F:1E:67:06:D9:30:F4:5B:E7:B1:6F:9E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F609D193409C5F2F1E6706D930F45BE7B16F9E3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3D40BB86DE2DB3D534704CC620B2D78690E7FEACBED0B1C409C764A81B34555/0/3139302e39332e34362e302f32342d3234203d3e20323639383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:bc:6d:d4:75:20:9c:82:e0:e9:c8:b8:1e:c4:de:f7:0f:7f:
         98:91:72:50:1d:b5:19:66:64:c9:ff:f7:92:87:0c:98:83:21:
         47:3a:90:a2:57:a3:10:55:c4:f5:62:5b:f7:c5:f0:93:7c:25:
         02:99:2c:e0:47:bd:ff:5d:c3:c5:36:4d:0f:5f:25:6a:0e:6c:
         f9:ca:87:c4:0f:1f:e3:d6:dc:7d:d0:14:18:f2:60:3f:9b:0b:
         78:92:d2:f1:00:8d:44:37:46:9e:a7:32:9c:44:b8:c8:9a:1d:
         34:71:60:70:12:b5:42:2a:fd:7f:21:cc:15:40:03:91:79:16:
         36:f1:bc:9e:a1:5b:e0:77:b4:77:42:ca:36:3a:ba:1a:8e:fa:
         cc:a4:b3:6b:3c:17:fb:4d:98:61:27:af:5d:f8:ab:97:7b:5d:
         76:fd:68:bd:f9:94:ff:d3:d8:3e:03:c8:dd:9e:e7:a4:a0:36:
         fe:9d:47:1d:95:05:84:0e:74:5a:fc:a1:88:b8:7d:ed:88:6d:
         52:2a:44:b3:90:7c:9e:a7:7c:e0:8b:44:46:30:8d:d5:53:dc:
         42:c4:14:a8:3b:b5:f0:18:2a:4b:e8:1d:bd:54:19:68:4b:a1:
         97:02:89:9c:ca:d7:6b:96:2e:83:83:bb:4b:f1:4d:7a:f5:1c:
         59:7f:7d:73
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUb858FwaGvGegRvoCFSm4qlRHC3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjYwOUQxOTM0MDlDNUYyRjFFNjcwNkQ5MzBGNDVCRTdC
MTZGOUUzRjAeFw0yNTAyMDQxODMzMTZaFw0yNjAyMDMxODM4MTZaMDMxMTAvBgNV
BAMTKDRGQjMxRUQ4M0RDQ0EwMDkwOUY1RDg5NUFGNTM5QkY1NEU1QTI3RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1yrqZVXigieu7ekEssKI/tc+z
lJOt2W97Tc+zLeirzvoXqWkQKKihimEPKFvx5PZAtbZ36emjPCKmYBZyFDhJY9SC
CpNFxrbz1SJ/E8OXcWTFlFpwxpKAn5MRVgO0oZbs4UoSe21mRunulPi5d5zCuYpj
3EH5imFA/3XsqcpolJ5i6PkiAILfe4/2cU83EjuKTcPZoh2xA6tu9RcDAXauKpCn
5Mb+9gNj4aZyfX5dUtmAvyoQ5ujMCe+VriKcPyJDI3vPIBN1JTbRrEUP6MqM1fOC
kQDEyFG7Aum+vIgJ8pNBEM6QeQ8ZYiMyqv7t8dLBtwTy66oYXUCrMPSdayS1AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUT7Me2D3MoAkJ9diVr1Ob9U5aJ+EwHwYDVR0j
BBgwFoAU9gnRk0CcXy8eZwbZMPRb57Fvnj8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GM0Q0MEJCODZERTJEQjNENTM0NzA0Q0M2MjBCMkQ3ODY5
MEU3RkVBQ0JFRDBCMUM0MDlDNzY0QTgxQjM0NTU1LzAvRjYwOUQxOTM0MDlDNUYy
RjFFNjcwNkQ5MzBGNDVCRTdCMTZGOUUzRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNjA5RDE5MzQwOUM1RjJGMUU2
NzA2RDkzMEY0NUJFN0IxNkY5RTNGLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjNENDBCQjg2REUyREIzRDUzNDcwNENDNjIwQjJENzg2OTBFN0ZFQUNC
RUQwQjFDNDA5Qzc2NEE4MUIzNDU1NS8wLzMxMzkzMDJlMzkzMzJlMzQzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM4MzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5dLjAN
BgkqhkiG9w0BAQsFAAOCAQEAibxt1HUgnILg6ci4HsTe9w9/mJFyUB21GWZkyf/3
kocMmIMhRzqQolejEFXE9WJb98Xwk3wlApks4Ee9/13DxTZND18lag5s+cqHxA8f
49bcfdAUGPJgP5sLeJLS8QCNRDdGnqcynES4yJodNHFgcBK1Qir9fyHMFUADkXkW
NvG8nqFb4He0d0LKNjq6Go76zKSzazwX+02YYSevXfirl3tddv1ovfmU/9PYPgPI
3Z7npKA2/p1HHZUFhA50WvyhiLh97YhtUipEs5B8nqd84ItERjCN1VPcQsQUqDu1
8BgqS+gdvVQZaEuhlwKJnMrXa5Yug4O7S/FNevUcWX99cw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:57 2025 by rpki-client