Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e302e302f31362d3234203d3e2036353638.roa
File:                     3139302e3132392e302e302f31362d3234203d3e2036353638.roa (raw, json)
Hash identifier:          3jjeW6FryOPn/WRFhDup/IzP3lXypYtdIWVH3R7RCBM=
Subject key identifier:   D2:90:2E:BA:DB:CD:CC:51:09:99:E0:3F:C3:9B:1F:41:3D:56:AC:25
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       594912A5F16235F114BF9C23E9F960091283F115
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e302e302f31362d3234203d3e2036353638.roa
Signing time:             Tue 04 Feb 2025 18:45:23 +0000
ROA not before:           Tue 04 Feb 2025 18:40:23 +0000
ROA not after:            Tue 03 Feb 2026 18:45:23 +0000
asID:                     6568
IP address blocks:        190.129.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:49:12:a5:f1:62:35:f1:14:bf:9c:23:e9:f9:60:09:12:83:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: Feb  4 18:40:23 2025 GMT
            Not After : Feb  3 18:45:23 2026 GMT
        Subject: CN=D2902EBADBCDCC510999E03FC39B1F413D56AC25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:10:1e:0d:fa:d1:64:ca:48:4f:f4:9f:d4:b9:
                    47:90:3b:fb:91:de:9e:4b:19:21:37:55:2f:6f:24:
                    f8:f5:4b:9b:20:ac:9d:c7:ea:ff:e4:29:5b:a2:3c:
                    79:b0:ba:83:7f:0f:30:48:f3:69:b6:5e:46:b2:3a:
                    aa:a6:31:a1:90:de:72:75:00:78:9b:b4:eb:da:bc:
                    1c:b8:2b:05:71:d3:41:e5:2e:5c:bf:5a:00:07:78:
                    e7:fb:37:b9:f6:27:68:fd:84:b5:8d:5e:35:90:66:
                    3f:df:fb:29:43:c2:d5:02:d3:af:d1:7c:eb:1b:81:
                    46:00:5f:6c:ef:1f:c3:f4:b4:32:34:17:64:f6:77:
                    16:c5:94:7a:ac:da:08:ca:69:cd:20:ea:23:59:cd:
                    fe:12:0e:69:bb:7a:28:7b:40:0f:53:79:8e:32:93:
                    8f:7d:42:0f:17:76:1d:c6:88:ef:32:2c:94:66:e9:
                    3f:aa:21:06:cd:ea:3d:c7:4c:95:b4:ef:d3:3f:07:
                    3b:84:0d:b2:7e:65:74:20:25:22:a3:ac:4a:d3:3b:
                    3a:00:72:aa:99:8e:72:c9:9e:eb:fe:93:50:18:c4:
                    45:fc:55:5c:55:8e:76:ee:3d:35:db:66:f0:e4:3a:
                    33:87:0b:64:16:78:14:fd:4e:d5:df:88:fd:e1:f6:
                    57:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:90:2E:BA:DB:CD:CC:51:09:99:E0:3F:C3:9B:1F:41:3D:56:AC:25
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3139302e3132392e302e302f31362d3234203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:a8:f7:f6:90:99:f4:dd:c9:12:f7:f2:c1:38:80:5c:25:cf:
         23:ab:28:31:5a:32:bd:60:9f:5c:09:5f:3b:98:57:76:8a:ab:
         fd:2c:c5:52:9e:ec:4f:1c:ea:a4:a0:36:e5:ca:f9:34:2a:3b:
         7e:0a:aa:05:55:46:d8:ad:07:e2:d1:57:4c:4d:1e:67:8c:9c:
         0d:d1:e8:3b:8e:40:30:79:e1:36:04:91:02:fb:61:a2:82:e2:
         fc:e8:cf:8f:00:70:6d:55:21:bd:80:08:7c:74:95:df:bd:31:
         46:27:0c:a6:aa:d1:86:95:3c:df:2d:5f:02:1e:c7:ab:9d:4c:
         43:44:d1:3c:60:cd:99:d5:05:ae:ed:e4:1f:88:aa:44:71:15:
         64:a3:c4:81:a4:51:ed:6d:ae:a2:a9:cc:eb:2c:70:31:67:f2:
         c5:11:e7:c9:8e:a1:ea:d1:4e:68:a5:83:71:f6:3b:3f:d3:62:
         d6:26:23:69:5d:d9:24:5b:f6:db:5d:ff:30:40:c5:73:ef:bd:
         c9:dc:60:5d:e6:47:99:ce:32:29:a8:7f:bf:d3:05:1b:20:31:
         16:3f:7b:03:03:a7:88:27:c0:ff:9d:be:8c:45:9b:38:63:21:
         59:9e:a9:20:76:b5:8c:6f:f2:2e:4a:26:59:e9:b2:22:17:f4:
         5d:1d:95:10
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWUkSpfFiNfEUv5wj6flgCRKD8RUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3Q0VDOUYxQzQwNjA3NTU0MjJGRTc1NjYxQ0JDMzcx
ODUxNTU3ODAeFw0yNTAyMDQxODQwMjNaFw0yNjAyMDMxODQ1MjNaMDMxMTAvBgNV
BAMTKEQyOTAyRUJBREJDRENDNTEwOTk5RTAzRkMzOUIxRjQxM0Q1NkFDMjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EB4N+tFkykhP9J/UuUeQO/uR
3p5LGSE3VS9vJPj1S5sgrJ3H6v/kKVuiPHmwuoN/DzBI82m2XkayOqqmMaGQ3nJ1
AHibtOvavBy4KwVx00HlLly/WgAHeOf7N7n2J2j9hLWNXjWQZj/f+ylDwtUC06/R
fOsbgUYAX2zvH8P0tDI0F2T2dxbFlHqs2gjKac0g6iNZzf4SDmm7eih7QA9TeY4y
k499Qg8Xdh3GiO8yLJRm6T+qIQbN6j3HTJW079M/BzuEDbJ+ZXQgJSKjrErTOzoA
cqqZjnLJnuv+k1AYxEX8VVxVjnbuPTXbZvDkOjOHC2QWeBT9TtXfiP3h9lc9AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQU0pAuutvNzFEJmeA/w5sfQT1WrCUwHwYDVR0j
BBgwFoAUZ3zsnxxAYHVUIv51Zhy8NxhRVXgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GRTIzRTIxNkRGMzIyOTA1ODM3MDIxMDY4QkNBMzBDNTVD
Qjk1RkRDOTBDMjFCOURERjgzQUMxMTIzMTg2RDI5LzAvNjc3Q0VDOUYxQzQwNjA3
NTU0MjJGRTc1NjYxQ0JDMzcxODUxNTU3OC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NzdDRUM5RjFDNDA2MDc1NTQy
MkZFNzU2NjFDQkMzNzE4NTE1NTc4LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRkUyM0UyMTZERjMyMjkwNTgzNzAyMTA2OEJDQTMwQzU1Q0I5NUZEQzkw
QzIxQjlEREY4M0FDMTEyMzE4NkQyOS8wLzMxMzkzMDJlMzEzMjM5MmUzMDJlMzAy
ZjMxMzYyZDMyMzQyMDNkM2UyMDM2MzUzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvoEwDQYJKoZI
hvcNAQELBQADggEBAGWo9/aQmfTdyRL38sE4gFwlzyOrKDFaMr1gn1wJXzuYV3aK
q/0sxVKe7E8c6qSgNuXK+TQqO34KqgVVRtitB+LRV0xNHmeMnA3R6DuOQDB54TYE
kQL7YaKC4vzoz48AcG1VIb2ACHx0ld+9MUYnDKaq0YaVPN8tXwIex6udTENE0Txg
zZnVBa7t5B+IqkRxFWSjxIGkUe1trqKpzOsscDFn8sUR58mOoerRTmilg3H2Oz/T
YtYmI2ld2SRb9ttd/zBAxXPvvcncYF3mR5nOMimof7/TBRsgMRY/ewMDp4gnwP+d
voxFmzhjIVmeqSB2tYxv8i5KJlnpsiIX9F0dlRA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:29 2025 by rpki-client