Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa
File:                     3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          MbUejR/B8XuMsXpr5MzjQ0ShsOYySc6rgUZxUrEUdSQ=
Subject key identifier:   9E:54:68:76:3F:64:AD:90:75:E7:A4:56:58:3D:88:1F:CF:90:2B:4C
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       530AFDCFBC17B0E2C3E79AD899B0A0D717BA8329
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 07 Aug 2025 11:10:02 +0000
ROA not before:           Thu 07 Aug 2025 11:05:02 +0000
ROA not after:            Thu 06 Aug 2026 11:10:02 +0000
asID:                     16509
IP address blocks:        190.112.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0a:fd:cf:bc:17:b0:e2:c3:e7:9a:d8:99:b0:a0:d7:17:ba:83:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:05:02 2025 GMT
            Not After : Aug  6 11:10:02 2026 GMT
        Subject: CN=9E5468763F64AD9075E7A456583D881FCF902B4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:2b:86:ad:b9:06:9f:1b:c2:26:16:f9:19:
                    6f:06:5b:16:78:b0:bc:5c:0d:30:73:b9:12:fe:3f:
                    44:28:5e:17:84:82:2d:ce:68:bb:1a:09:05:b9:81:
                    7c:7e:ec:d2:6a:8b:d1:20:69:bb:94:34:fc:1d:41:
                    b3:4d:06:3c:6b:cc:6e:8f:8b:4f:69:a5:83:81:2e:
                    f9:ba:5b:90:4c:9b:04:b9:0a:c8:84:6d:36:e9:06:
                    3f:bb:34:8f:d5:a7:c8:6e:8e:c1:0d:8c:ea:53:97:
                    ee:31:f5:05:dc:08:3b:d9:42:02:26:ce:a8:f3:6f:
                    07:f1:fa:88:9f:99:e7:f6:d3:71:57:54:f7:b1:f0:
                    58:1a:00:9c:ef:c0:f9:7f:a2:09:c1:cd:08:0d:09:
                    77:f0:22:5c:50:82:c1:c0:34:95:f4:b4:52:47:68:
                    30:9e:80:cc:85:03:db:22:c9:42:58:16:b6:56:1f:
                    fe:38:5b:87:d2:65:1e:0f:55:15:0b:60:ef:7b:1d:
                    06:8d:6a:e7:a8:59:24:ee:17:a5:cd:bc:ec:52:8e:
                    2d:be:9f:71:81:b0:2d:9e:f9:66:e5:b5:26:fe:bf:
                    60:35:15:e0:42:f9:11:ce:85:51:01:84:62:32:38:
                    e3:5e:6d:6b:f3:40:3e:a2:89:4f:9e:68:76:46:39:
                    a9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:54:68:76:3F:64:AD:90:75:E7:A4:56:58:3D:88:1F:CF:90:2B:4C
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:fc:79:90:66:d8:84:a1:3f:7a:e3:38:0b:3c:2b:99:01:
         b4:7d:98:4b:31:17:91:90:53:18:3e:9d:7b:5a:aa:02:a6:66:
         d8:7d:0e:d9:c3:4d:90:24:07:9d:9b:34:ec:34:7a:16:88:40:
         e9:71:cf:d6:92:98:a5:28:c0:5a:ed:c0:db:6e:4f:80:1f:1b:
         90:ca:06:7d:15:51:43:99:98:e9:33:20:74:05:f6:28:c4:bb:
         a2:f0:bc:da:2a:d2:48:9a:cd:fa:69:7c:01:8e:73:49:35:60:
         4c:15:bf:ff:f9:20:b2:ad:e4:10:dd:fa:de:50:5c:96:b7:08:
         1e:4d:76:0b:cc:12:63:e5:f1:a6:ce:43:53:b4:2c:13:7b:23:
         65:72:72:84:0e:6a:e2:53:bc:9f:18:8a:71:00:79:de:ba:d4:
         68:a0:41:9a:ae:aa:0f:17:05:de:9b:fc:11:d0:5e:4c:33:69:
         47:34:c0:60:24:e0:c9:c0:ef:1c:8d:21:a3:4d:3e:95:df:88:
         35:e5:d5:ed:1d:0a:fc:57:a8:93:d8:93:5a:43:a4:2e:a1:c1:
         fa:a7:e8:66:0b:3c:08:f8:27:bd:4a:91:cc:47:8a:63:a4:6f:
         3e:c2:0a:0e:d0:a0:a4:3b:a0:e8:8b:c8:92:04:fb:28:a3:47:
         69:0e:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:09:11 2025 by rpki-client