Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e20333936393832.roa
File:                     3139302e3131322e3139352e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          w4y7bOG/r0g1GLZEA84EtCGfpB1PGWw3/TOc7ZBOqTE=
Subject key identifier:   A2:C1:B7:19:57:2B:A7:0D:E1:5B:E0:98:68:51:DA:18:2D:83:90:86
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       2128D78F32D8FDFA6D9A409BAE1F9BBCDF39A350
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 07 Aug 2025 11:15:01 +0000
ROA not before:           Thu 07 Aug 2025 11:10:01 +0000
ROA not after:            Thu 06 Aug 2026 11:15:01 +0000
asID:                     396982
IP address blocks:        190.112.195.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:28:d7:8f:32:d8:fd:fa:6d:9a:40:9b:ae:1f:9b:bc:df:39:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:10:01 2025 GMT
            Not After : Aug  6 11:15:01 2026 GMT
        Subject: CN=A2C1B719572BA70DE15BE0986851DA182D839086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:b9:3e:65:d0:b2:a2:89:8a:d1:1d:6d:43:
                    e4:4b:83:07:02:d0:ba:38:84:63:18:59:bf:03:81:
                    ee:6a:eb:f5:45:5f:27:e6:43:3f:db:ae:df:e4:52:
                    a2:f4:73:0c:fc:b9:2a:ce:78:89:9b:19:cd:e8:5f:
                    e3:56:60:5a:9d:a9:b1:0c:58:65:f5:a2:d1:46:7b:
                    72:3a:57:16:39:75:b4:f1:71:1b:74:27:d9:7b:e2:
                    2e:6c:5b:48:6e:03:2f:60:68:77:46:fd:c1:d1:c4:
                    b4:78:81:18:1e:a6:9d:d4:0e:42:2b:1a:ed:ac:ce:
                    c0:e2:fe:58:45:57:e2:16:db:1e:03:5e:64:b5:b9:
                    79:1b:07:88:1b:af:59:b9:b3:10:b5:c8:04:64:a7:
                    1b:1f:a3:90:31:c1:c8:f5:2f:d0:1b:62:62:8c:9f:
                    91:2c:98:7a:35:5c:4b:dc:91:28:3a:14:14:75:e7:
                    fa:12:fd:1b:b2:e5:ad:87:8d:df:2a:fb:ae:05:ba:
                    ef:5a:04:3c:a5:12:b4:ef:e6:23:f3:1f:20:6b:72:
                    ef:f2:7d:fd:2c:22:f5:e1:5f:e2:1d:a6:d6:07:80:
                    5c:4e:b5:20:99:b0:13:0f:9a:4a:43:11:ae:be:94:
                    71:14:61:e2:cc:33:f6:d6:6d:1a:d5:54:c7:c9:27:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C1:B7:19:57:2B:A7:0D:E1:5B:E0:98:68:51:DA:18:2D:83:90:86
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3139352e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:14:9f:6c:62:a1:3c:ba:b4:10:ad:12:63:49:e6:69:c4:
         e8:4c:a1:52:d8:9f:ce:df:1b:94:01:fb:0f:1c:88:1f:67:98:
         8f:61:7d:45:20:4f:d4:c1:1e:60:e2:ee:52:d2:cd:b5:27:ec:
         fc:25:fe:68:b1:4d:9f:df:c7:16:4f:5e:c4:c2:87:33:22:92:
         bf:21:7b:3f:62:03:2a:48:da:13:e5:98:29:b5:4d:d2:f3:cf:
         7a:93:c8:2f:56:f2:63:4c:6d:a1:c8:fb:d8:23:00:43:d5:34:
         36:12:f9:47:3e:c5:da:18:68:75:21:fa:25:6f:64:09:f8:af:
         98:be:f1:cf:39:98:dc:33:89:ac:bb:b2:ca:1f:e8:76:f1:fe:
         9c:e5:3c:cf:86:5e:c0:bd:f2:ea:c1:bb:33:76:c5:6b:af:1f:
         bf:b1:ce:e4:6b:b0:8c:36:37:32:00:08:8a:ff:80:66:58:2b:
         70:e1:66:ce:74:70:1e:da:f9:f4:86:0b:87:3f:f3:5b:b7:78:
         31:af:a5:8e:13:4e:7e:55:b9:8f:db:f8:25:f5:4f:94:31:10:
         be:62:b9:4e:ea:02:75:7a:1e:2e:2c:89:2c:60:1d:ce:f5:83:
         9b:3d:06:e9:bd:e6:b9:db:8c:28:76:36:7d:10:d2:50:af:13:
         04:f3:44:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:43 2025 by rpki-client