Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e20333936393832.roa
File:                     3139302e3131322e3139322e302f32322d3232203d3e20333936393832.roa (raw, json)
Hash identifier:          eOJ/RfNaf8EQ4Ow2X1AyzmlRhQxqf2PwGolAyLt5roU=
Subject key identifier:   DE:C2:80:47:F7:AF:9C:8F:B1:FC:3C:48:A0:13:51:AC:DF:CF:79:C5
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       668ECA86A3EA66CE0D032E34A8AA2CECE646A4D5
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e20333936393832.roa
Signing time:             Thu 07 Aug 2025 11:15:02 +0000
ROA not before:           Thu 07 Aug 2025 11:10:02 +0000
ROA not after:            Thu 06 Aug 2026 11:15:02 +0000
asID:                     396982
IP address blocks:        190.112.192.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8e:ca:86:a3:ea:66:ce:0d:03:2e:34:a8:aa:2c:ec:e6:46:a4:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:10:02 2025 GMT
            Not After : Aug  6 11:15:02 2026 GMT
        Subject: CN=DEC28047F7AF9C8FB1FC3C48A01351ACDFCF79C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0e:9c:af:e3:71:fb:44:41:d3:84:46:d9:71:
                    df:3a:85:2a:82:db:32:cc:3f:8a:0a:8d:66:26:d1:
                    b4:47:4c:9b:d6:f7:6f:c9:de:0a:87:73:f5:2e:1e:
                    6c:e1:a3:4a:8d:6c:ae:6b:07:98:7f:8e:50:72:60:
                    2f:a5:24:d4:1f:65:10:4e:b4:18:80:4b:4d:c3:e6:
                    3d:ca:3e:1d:e5:83:67:32:1a:19:80:3a:a0:ff:cc:
                    dc:27:bd:31:75:4a:f3:5b:51:6c:ea:be:86:db:5e:
                    58:f5:0c:a4:6c:e6:76:b5:9c:00:26:36:20:0d:c6:
                    83:63:8a:b8:00:b1:01:1f:86:54:15:0c:3d:dd:df:
                    ef:d2:0e:57:16:b6:9d:08:3c:ca:23:9b:b6:bc:c3:
                    16:3d:b2:14:d0:09:35:5d:ac:70:17:9e:a9:26:56:
                    e3:76:81:c6:a7:91:af:83:dc:e9:b1:c3:03:ad:a3:
                    35:f5:28:fb:8a:29:04:3d:07:23:73:03:b8:68:d7:
                    18:f4:fe:28:c9:ac:a3:07:74:a7:17:b5:61:cf:a6:
                    64:f3:d8:2a:a9:2a:f3:27:ae:55:4f:a2:cf:34:f6:
                    49:43:f2:26:d9:22:00:ec:6d:11:6f:50:69:1c:49:
                    6b:56:c6:94:f8:f9:96:64:8a:c9:c0:59:ed:a2:88:
                    61:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C2:80:47:F7:AF:9C:8F:B1:FC:3C:48:A0:13:51:AC:DF:CF:79:C5
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32322d3232203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:7c:6c:d2:1f:d3:eb:d9:ce:0a:ff:6d:49:46:70:f6:3b:
         13:38:ce:f3:4f:35:6f:a3:ae:6e:fd:de:04:d3:72:9b:d1:33:
         4c:a0:88:07:d0:13:d0:a0:43:67:9e:87:a1:d6:38:90:83:99:
         65:d7:47:25:eb:8e:28:03:d7:2a:07:e7:1c:c6:f8:af:6b:ca:
         74:3c:f9:79:58:af:fd:63:dc:f6:9f:b9:1d:f1:23:33:4f:18:
         15:ed:d1:0c:d5:d7:05:ec:df:71:88:d1:9e:58:2c:1e:a3:74:
         d4:d3:2d:2e:63:c2:91:4e:fd:2c:81:d3:e6:55:2f:29:be:8c:
         f9:0b:e8:a1:80:0e:e6:ef:03:41:a7:b9:e5:02:75:b3:52:a3:
         52:c5:24:f1:64:4c:c5:d5:17:e4:17:66:25:a7:a1:2a:36:e1:
         2b:2a:f4:4c:c9:35:04:4f:bb:20:8f:12:31:a2:29:d3:59:ad:
         1f:72:f8:e6:98:dc:13:fe:e5:f7:07:d6:c8:fe:0e:40:12:be:
         fb:55:07:3d:1d:28:8e:32:9a:f6:a1:82:b7:40:d8:28:01:7d:
         c9:40:60:24:f4:60:64:1e:9e:92:e5:d0:10:30:5d:85:8a:d7:
         1c:be:a1:bc:b2:d8:42:df:32:48:26:8e:ba:48:3b:be:d8:c9:
         83:54:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:07:52 2025 by rpki-client