Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e20333936393832.roa
File:                     3139302e3131322e3139332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          TBIL2s1YfqPZOlzNBu+EF60l4hz/YicA1WXg4IwTPJQ=
Subject key identifier:   3C:A4:64:F2:29:1B:D4:F1:C6:8D:1C:8B:31:AD:67:61:B7:2E:35:D5
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       4B66B93F2C284FFFF92F818CD56234066EB36EFB
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 07 Aug 2025 11:15:04 +0000
ROA not before:           Thu 07 Aug 2025 11:10:04 +0000
ROA not after:            Thu 06 Aug 2026 11:15:04 +0000
asID:                     396982
IP address blocks:        190.112.193.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:66:b9:3f:2c:28:4f:ff:f9:2f:81:8c:d5:62:34:06:6e:b3:6e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:10:04 2025 GMT
            Not After : Aug  6 11:15:04 2026 GMT
        Subject: CN=3CA464F2291BD4F1C68D1C8B31AD6761B72E35D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:89:60:4c:9a:f4:40:cf:13:6f:69:83:eb:2b:
                    7c:23:16:c6:0f:ed:00:7f:da:3b:77:7e:ce:66:ae:
                    26:1f:90:23:d6:f3:f3:f0:9a:ae:cc:f0:00:21:d1:
                    79:03:37:11:9c:a9:9e:74:00:62:e6:3c:24:10:08:
                    7d:f5:36:fc:83:14:e7:c5:22:36:4a:df:60:6c:79:
                    d1:14:95:5b:ad:6c:87:c0:c0:7f:0c:6a:ca:7c:87:
                    d5:1d:44:5c:92:84:fe:98:67:92:a3:55:93:d3:cd:
                    af:7b:12:d6:99:73:fa:7d:01:20:1b:4e:6c:25:1d:
                    2a:d7:7d:7b:7a:c9:27:b7:49:8d:35:cb:8f:96:94:
                    c9:7b:5d:ab:54:76:6b:91:7d:b7:93:3e:52:bc:e5:
                    8b:03:ab:88:8f:8c:f7:9a:8b:70:59:d2:f9:b3:d6:
                    5c:e9:a9:90:9e:d3:20:64:dc:52:d3:ac:2d:65:d8:
                    d0:ad:4e:b4:aa:65:20:90:24:8c:aa:cd:49:d0:bc:
                    2c:b6:5c:98:dc:2b:20:33:13:34:bd:f3:c1:77:3c:
                    81:3f:20:6d:6d:8f:26:74:ae:30:c2:8c:1a:d6:a0:
                    ee:b9:f0:08:09:65:f3:ed:02:38:4d:86:ba:99:be:
                    66:d4:94:24:f6:87:14:23:60:28:99:86:5a:a5:0f:
                    d4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:64:F2:29:1B:D4:F1:C6:8D:1C:8B:31:AD:67:61:B7:2E:35:D5
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139332e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:39:a8:ec:be:29:cf:df:52:f9:96:cb:b3:6b:7a:44:e0:91:
         66:1d:0e:1c:07:1c:be:3e:5d:12:49:d7:7d:44:9a:54:9e:87:
         66:0d:04:bf:26:e1:49:2e:1d:d7:b2:e9:89:c7:52:fe:b4:3a:
         b7:87:b8:95:7d:29:21:06:31:cb:6b:c5:4f:56:f4:5a:1c:f5:
         f6:23:cd:6b:37:7e:65:56:7b:e7:fc:5b:c1:69:d1:a3:b5:47:
         85:44:6a:1e:81:2e:f1:da:da:67:71:bc:df:21:f8:a8:e3:4b:
         1a:f8:cd:24:a4:3b:cf:47:49:d4:9d:41:29:d6:2a:d0:f2:a8:
         87:78:92:29:41:f2:a9:94:f7:02:90:d4:c6:16:04:fe:7c:a9:
         16:b4:9d:9e:98:8d:12:d6:8c:e3:8f:52:83:3b:87:f5:6f:c4:
         81:a4:24:f0:a5:1a:05:63:31:bc:d5:d8:49:58:4c:4f:fa:78:
         19:14:d4:03:6b:6a:0b:f1:15:1f:3b:f1:ed:19:9d:05:aa:e7:
         77:b8:2d:ae:3e:3a:a3:b5:9b:0c:6b:45:bb:bd:b3:79:79:dc:
         cb:38:17:a9:07:2b:ea:eb:80:98:ab:dc:ac:5f:67:8c:5a:d5:
         20:b3:7a:a3:56:40:8c:c6:6a:20:51:f5:35:ab:02:f6:d5:30:
         01:74:6f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:46 2025 by rpki-client