Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203230343733.roa
File:                     3139302e3131322e3139352e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          TuW8m8AkEEzwNcP4peObQmaTqRECstylTXUhRoIFbJs=
Subject key identifier:   1D:C4:B9:D8:B6:E0:0A:D1:47:47:8C:C3:BC:E2:23:88:A7:DF:01:D4
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       107662B9EC531C08E3A1F4BB0017AE86B2B2703A
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203230343733.roa
Signing time:             Thu 07 Aug 2025 11:10:01 +0000
ROA not before:           Thu 07 Aug 2025 11:05:01 +0000
ROA not after:            Thu 06 Aug 2026 11:10:01 +0000
asID:                     20473
IP address blocks:        190.112.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:76:62:b9:ec:53:1c:08:e3:a1:f4:bb:00:17:ae:86:b2:b2:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:05:01 2025 GMT
            Not After : Aug  6 11:10:01 2026 GMT
        Subject: CN=1DC4B9D8B6E00AD147478CC3BCE22388A7DF01D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:b1:9f:3f:f4:02:4a:63:8f:46:4e:d5:d1:
                    e8:9c:15:e0:86:cd:ad:08:da:ca:9b:31:71:31:a2:
                    1b:ee:61:30:86:ce:a9:96:3e:26:80:3b:f2:25:38:
                    b0:8e:fe:83:cb:ab:df:90:9c:1f:d7:ab:68:1e:e1:
                    d5:5a:30:7c:4d:e7:f9:cc:ed:5d:44:05:66:71:5d:
                    89:7d:d6:86:a0:d7:82:ec:31:40:37:dc:97:e5:00:
                    cf:5e:07:31:33:90:48:72:36:97:aa:63:67:5c:70:
                    d2:5e:57:9b:ae:8a:26:a1:07:12:66:f9:00:31:e7:
                    b0:e2:84:58:26:09:a6:4a:26:df:b8:99:58:53:23:
                    15:49:d9:8f:f0:a8:30:fc:d3:6c:b6:5f:49:48:1d:
                    b0:21:4c:8a:93:0b:49:d7:87:d9:b5:97:67:01:43:
                    1a:00:e0:5b:f7:af:00:39:b0:8c:97:28:ba:43:c8:
                    9d:86:45:b7:17:6e:bd:87:64:5f:86:d7:d0:2f:7f:
                    a4:f9:a7:5a:56:26:f2:dc:34:8c:7b:f5:da:21:df:
                    90:a8:82:c6:b7:3d:21:68:1b:bd:76:d8:22:24:91:
                    ce:5f:d0:57:04:87:64:7b:24:94:17:17:01:3c:82:
                    60:05:5e:dc:84:e2:23:96:f2:6d:dc:a5:c9:47:4b:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C4:B9:D8:B6:E0:0A:D1:47:47:8C:C3:BC:E2:23:88:A7:DF:01:D4
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:50:74:03:dc:69:5d:2e:58:1e:b7:95:1b:6c:c6:2a:41:e3:
         64:10:09:05:8f:a9:ee:6b:37:6e:75:b2:d8:02:33:b8:f7:e5:
         42:69:b2:d7:7a:dc:ae:6e:7f:d0:ad:0f:47:99:e6:cd:c7:83:
         f7:8c:6c:e7:ae:50:41:d3:04:d1:ce:74:b2:a3:1e:5e:07:20:
         a3:cf:8c:1c:32:3f:9e:95:b0:d1:89:93:ee:6f:7f:fb:44:d3:
         72:b6:a6:1a:29:97:f2:82:d6:14:8b:fe:1c:85:7c:a1:0b:88:
         f9:6e:4d:5b:77:52:45:66:49:eb:43:1d:02:74:cc:c2:a1:02:
         17:28:b7:64:d5:cd:e3:be:e7:50:18:6a:d0:ce:9f:aa:a6:1d:
         f3:b9:3b:9c:60:8b:59:61:77:0a:8f:eb:a4:6f:4b:b8:b5:1d:
         59:fa:6c:bf:f8:53:8f:b1:03:f9:88:69:db:c2:bd:a0:ea:28:
         22:72:3e:8e:40:f4:26:21:c6:fc:99:58:cc:bb:d4:e0:10:3b:
         43:4c:1f:7a:fc:5d:09:56:12:b2:fa:3a:7c:18:e0:aa:ca:c2:
         bd:b3:7d:96:5d:a5:57:b9:55:1a:e6:f8:d6:32:7d:89:00:f1:
         68:f3:46:0e:a8:86:b8:39:03:d1:73:3a:3f:fd:86:a4:3b:a6:
         2a:bf:09:6e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUEHZiuexTHAjjofS7ABeuhrKycDowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjYyRTcxOUYzNjBCRjlDOUVFODlFQzJFMjVDRjBERTIy
OEI2RUJGQzAeFw0yNTA4MDcxMTA1MDFaFw0yNjA4MDYxMTEwMDFaMDMxMTAvBgNV
BAMTKDFEQzRCOUQ4QjZFMDBBRDE0NzQ3OENDM0JDRTIyMzg4QTdERjAxRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF7GfP/QCSmOPRk7V0eicFeCG
za0I2sqbMXExohvuYTCGzqmWPiaAO/IlOLCO/oPLq9+QnB/Xq2ge4dVaMHxN5/nM
7V1EBWZxXYl91oag14LsMUA33JflAM9eBzEzkEhyNpeqY2dccNJeV5uuiiahBxJm
+QAx57DihFgmCaZKJt+4mVhTIxVJ2Y/wqDD802y2X0lIHbAhTIqTC0nXh9m1l2cB
QxoA4Fv3rwA5sIyXKLpDyJ2GRbcXbr2HZF+G19Avf6T5p1pWJvLcNIx79doh35Co
gsa3PSFoG7122CIkkc5f0FcEh2R7JJQXFwE8gmAFXtyE4iOW8m3cpclHS3VfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHcS52LbgCtFHR4zDvOIjiKffAdQwHwYDVR0j
BBgwFoAUti5xnzYL+cnuiewuJc8N4ii26/wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNUZERjY0QjYxN0ZDRTBFNDUxNUVCRkE4MEU0MUQ4RjZC
RjVEOENGRTc4RjJCRUEzQTdDOTNFNDNGMEU1RDQwLzAvQjYyRTcxOUYzNjBCRjlD
OUVFODlFQzJFMjVDRjBERTIyOEI2RUJGQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CNjJFNzE5RjM2MEJGOUM5RUU4
OUVDMkUyNUNGMERFMjI4QjZFQkZDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDVGREY2NEI2MTdGQ0UwRTQ1MTVFQkZBODBFNDFEOEY2QkY1RDhDRkU3
OEYyQkVBM0E3QzkzRTQzRjBFNUQ0MC8wLzMxMzkzMDJlMzEzMTMyMmUzMTM5MzUy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnDD
MA0GCSqGSIb3DQEBCwUAA4IBAQBiUHQD3GldLlget5UbbMYqQeNkEAkFj6nuazdu
dbLYAjO49+VCabLXetyubn/QrQ9HmebNx4P3jGznrlBB0wTRznSyox5eByCjz4wc
Mj+elbDRiZPub3/7RNNytqYaKZfygtYUi/4chXyhC4j5bk1bd1JFZknrQx0CdMzC
oQIXKLdk1c3jvudQGGrQzp+qph3zuTucYItZYXcKj+ukb0u4tR1Z+my/+FOPsQP5
iGnbwr2g6igicj6OQPQmIcb8mVjMu9TgEDtDTB96/F0JVhKy+jp8GOCqysK9s32W
XaVXuVUa5vjWMn2JAPFo80YOqIa4OQPRczo//YakO6Yqvwlu
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:59 2025 by rpki-client