Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3139342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          UkajYoF7Ex5EbcNR5T+XdgGg/t6zSDkMhqanPhgOJ64=
Subject key identifier:   FE:F0:E4:06:37:3E:26:DE:2B:43:52:F7:B2:1E:16:AE:5C:69:D8:04
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       22CF194C077F3E84330D41EDA32A083A49BF7CB8
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 07 Aug 2025 11:10:01 +0000
ROA not before:           Thu 07 Aug 2025 11:05:01 +0000
ROA not after:            Thu 06 Aug 2026 11:10:01 +0000
asID:                     16509
IP address blocks:        190.112.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:cf:19:4c:07:7f:3e:84:33:0d:41:ed:a3:2a:08:3a:49:bf:7c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:05:01 2025 GMT
            Not After : Aug  6 11:10:01 2026 GMT
        Subject: CN=FEF0E406373E26DE2B4352F7B21E16AE5C69D804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:99:03:b8:1c:f0:b7:56:02:e5:fc:f0:41:
                    c9:0f:5d:5f:bf:40:f7:41:8a:72:1a:dc:08:21:60:
                    0a:de:e2:cf:d6:10:d3:a8:0c:09:aa:0e:ab:2e:23:
                    f5:98:5a:db:ea:f7:a3:b3:ee:b0:25:df:1d:34:52:
                    2b:b8:24:dc:dc:f1:42:13:de:82:c9:d5:b0:1f:46:
                    2b:09:36:05:b5:9e:0d:8e:6e:93:e9:a6:d0:9f:61:
                    ca:77:65:f5:31:c0:bb:72:c1:56:57:3c:92:dd:94:
                    e2:19:17:69:b9:ac:65:f0:e0:20:8f:6c:88:2e:f1:
                    c6:48:e3:50:4c:fc:c9:94:e0:16:f4:4f:7d:45:36:
                    74:02:87:14:5e:1a:4c:db:b1:ec:04:c4:7e:a6:6a:
                    e6:b6:c6:1d:6a:48:52:ee:d1:38:c9:9d:00:71:6d:
                    7b:dc:3e:b6:71:af:ef:19:ec:df:05:bc:b7:79:22:
                    27:45:09:c9:bd:ee:74:c5:ad:8e:aa:ac:ed:5b:1c:
                    96:ee:cc:6f:17:c1:77:36:df:ae:99:61:d7:cf:67:
                    07:85:d6:cb:0f:da:65:59:6e:c5:58:0e:fa:b6:dc:
                    f3:24:3a:2e:2a:d5:ae:f7:83:7d:07:5a:69:70:29:
                    a4:c4:03:1a:e1:f8:ea:15:77:22:96:cc:27:53:c2:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F0:E4:06:37:3E:26:DE:2B:43:52:F7:B2:1E:16:AE:5C:69:D8:04
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:b1:d9:5c:f1:6c:5b:ac:b0:e5:d2:89:8d:93:aa:2c:76:31:
         58:9d:66:52:c8:91:e6:32:ae:e8:81:ee:3f:f0:23:19:a3:31:
         10:88:51:f1:87:17:67:60:82:a9:b3:2e:45:40:62:b5:6d:29:
         66:37:b4:44:9f:50:5f:13:a1:98:90:3a:39:02:99:f7:36:6c:
         14:53:f1:d3:06:51:0c:3c:c0:05:9f:00:2d:64:29:80:79:85:
         25:20:83:78:f1:66:01:cc:d8:0f:f7:0a:30:e6:4e:17:d8:2b:
         9c:7b:e0:8a:11:bc:69:7d:ae:5e:50:6d:4a:72:85:b6:07:db:
         5d:c6:0c:9a:64:9b:7d:84:da:ed:54:8c:06:36:d1:b4:fb:f3:
         e8:e9:31:b3:6a:27:c7:f2:e2:b1:b5:43:0c:76:9d:79:ea:e9:
         d8:9e:7a:26:af:1a:74:c0:1f:3f:9c:17:b2:88:51:60:e8:e1:
         0e:af:0d:e3:be:f6:52:7a:7a:9b:54:3f:bd:54:81:67:d0:19:
         f3:4f:45:ae:07:2a:4d:a4:e0:51:85:ea:7e:e6:26:ab:9d:57:
         84:d1:3b:d3:dc:6b:43:ad:8c:e9:df:20:9d:89:5a:a0:b7:52:
         48:d8:9a:fb:1a:a2:40:a0:7d:54:62:a0:ce:01:d2:ba:0e:fc:
         c4:eb:ab:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:07:50 2025 by rpki-client