Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3233203d3e203230343733.roa
File:                     3139302e3131322e3139322e302f32332d3233203d3e203230343733.roa (raw, json)
Hash identifier:          FE4m/Wiau1fPdH2Nr+YVR9t4XMgLIhKtmiVbkkOLqxs=
Subject key identifier:   A6:1D:B9:46:05:65:B0:88:F1:A1:0E:6F:A4:70:B3:57:7B:12:B7:42
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       1C5252481FE92D5F8A92C2246BD9940DC4756CC7
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3233203d3e203230343733.roa
Signing time:             Tue 29 Jul 2025 15:25:01 +0000
ROA not before:           Tue 29 Jul 2025 15:20:01 +0000
ROA not after:            Tue 28 Jul 2026 15:25:01 +0000
asID:                     20473
IP address blocks:        190.112.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:52:52:48:1f:e9:2d:5f:8a:92:c2:24:6b:d9:94:0d:c4:75:6c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Jul 29 15:20:01 2025 GMT
            Not After : Jul 28 15:25:01 2026 GMT
        Subject: CN=A61DB9460565B088F1A10E6FA470B3577B12B742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:c1:01:5e:8e:a4:56:24:3c:79:ba:11:8a:
                    ed:4b:ad:cf:12:e9:bc:2c:cd:ce:16:b1:59:6a:e5:
                    72:ab:f9:46:51:da:1d:3b:1a:3f:56:1f:27:3d:2e:
                    06:47:2d:11:b0:03:de:e2:3f:e5:7b:c9:69:12:a0:
                    9f:09:b7:ec:e2:dd:47:7c:5c:e3:a0:37:cb:75:9c:
                    78:a3:5d:7c:f7:7b:22:90:20:e2:74:d0:48:0a:cc:
                    c6:8b:f3:91:e6:29:65:74:af:b1:1f:5f:37:0c:99:
                    1b:99:f1:f6:19:86:e6:4c:cf:82:71:1a:3b:47:a7:
                    7f:bb:eb:62:2f:7a:38:0f:d8:d9:67:8c:75:2a:ab:
                    2b:d7:c6:98:2c:80:71:9a:2c:5e:e4:9d:0e:53:e1:
                    55:b3:70:2d:21:47:ef:ad:cb:17:72:13:85:70:55:
                    dd:07:56:2c:6b:34:68:c4:c0:55:ca:1a:56:ad:5d:
                    55:6e:f3:53:12:ae:8a:4a:27:89:2f:9b:c7:37:4c:
                    1f:ce:e4:90:51:cb:63:c5:a0:2f:27:63:65:87:61:
                    79:ae:77:bd:2b:9a:69:34:01:b4:d0:8a:a4:88:56:
                    67:15:96:9d:f5:c6:4d:cd:d3:f8:21:16:3a:96:b7:
                    61:1d:f6:3e:c2:10:1d:bd:d6:3a:44:9b:f8:18:04:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:B9:46:05:65:B0:88:F1:A1:0E:6F:A4:70:B3:57:7B:12:B7:42
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139322e302f32332d3233203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:4c:c4:c5:7e:19:0f:79:88:6d:87:3b:5b:63:9c:4e:c1:9d:
         67:bd:9e:fb:4c:d8:53:b7:77:91:74:07:df:03:07:df:a2:57:
         43:63:84:cb:0c:82:52:00:f8:7b:cf:32:26:2d:68:c7:52:50:
         70:f4:76:0d:92:ee:44:be:c6:9b:ee:c9:fb:08:51:30:1b:e6:
         3c:98:cb:49:22:8d:1d:10:af:bf:cf:42:84:6d:0b:44:bc:87:
         bf:86:0e:ef:77:04:cc:5e:a2:b5:51:8f:08:b2:06:0f:bd:77:
         05:90:00:f3:98:a8:c9:7d:a0:af:d9:37:82:76:98:58:93:cb:
         76:cd:95:06:06:b9:85:f2:69:ef:3a:0e:08:3a:31:48:f1:e5:
         2f:63:ec:7a:5c:00:b6:f0:89:06:a2:32:e0:ba:df:80:35:bc:
         c5:03:d1:5b:a0:e7:c1:45:d7:fa:db:3c:ab:e3:58:e9:39:fb:
         93:3e:cb:d6:b9:ec:11:58:f4:a7:19:85:52:8d:00:e6:1f:b5:
         f0:02:4b:5b:fa:41:a5:a4:cd:22:14:f8:8e:88:03:ef:52:53:
         9b:41:04:92:d4:40:53:22:ab:ef:57:5f:0b:e5:fe:b6:2f:b4:
         6b:67:34:fd:d2:b8:11:59:2b:34:08:25:46:55:35:2b:3b:df:
         b0:e8:c0:92
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHFJSSB/pLV+KksIka9mUDcR1bMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA3MjkxNTIwMDFaFw0yNjA3MjgxNTI1MDFaMDMxMTAvBgNV
BAMTKEE2MURCOTQ2MDU2NUIwODhGMUExMEU2RkE0NzBCMzU3N0IxMkI3NDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeIcEBXo6kViQ8eboRiu1Lrc8S
6bwszc4WsVlq5XKr+UZR2h07Gj9WHyc9LgZHLRGwA97iP+V7yWkSoJ8Jt+zi3Ud8
XOOgN8t1nHijXXz3eyKQIOJ00EgKzMaL85HmKWV0r7EfXzcMmRuZ8fYZhuZMz4Jx
GjtHp3+762IvejgP2NlnjHUqqyvXxpgsgHGaLF7knQ5T4VWzcC0hR++tyxdyE4Vw
Vd0HVixrNGjEwFXKGlatXVVu81MSropKJ4kvm8c3TB/O5JBRy2PFoC8nY2WHYXmu
d70rmmk0AbTQiqSIVmcVlp31xk3N0/ghFjqWt2Ed9j7CEB291jpEm/gYBH8BAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUph25RgVlsIjxoQ5vpHCzV3sSt0IwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzIy
ZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvnDA
MA0GCSqGSIb3DQEBCwUAA4IBAQBpTMTFfhkPeYhthztbY5xOwZ1nvZ77TNhTt3eR
dAffAwffoldDY4TLDIJSAPh7zzImLWjHUlBw9HYNku5Evsab7sn7CFEwG+Y8mMtJ
Io0dEK+/z0KEbQtEvIe/hg7vdwTMXqK1UY8IsgYPvXcFkADzmKjJfaCv2TeCdphY
k8t2zZUGBrmF8mnvOg4IOjFI8eUvY+x6XAC28IkGojLgut+ANbzFA9FboOfBRdf6
2zyr41jpOfuTPsvWuewRWPSnGYVSjQDmH7XwAktb+kGlpM0iFPiOiAPvUlObQQSS
1EBTIqvvV18L5f62L7RrZzT90rgRWSs0CCVGVTUrO9+w6MCS
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:38:19 2025 by rpki-client