Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e20333936393832.roa
File:                     3139302e3131322e3230312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          a3K+0ARADe097cFf1qz7/CnPaGcoNGkO852yPQ9fxdw=
Subject key identifier:   32:60:75:5E:2A:E1:D3:55:B8:24:0C:B5:43:49:08:0D:02:9E:2C:5D
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       4E21EB5026CBC868EAA5D43940A8CD7C3D158816
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e20333936393832.roa
Signing time:             Thu 07 Aug 2025 11:15:02 +0000
ROA not before:           Thu 07 Aug 2025 11:10:02 +0000
ROA not after:            Thu 06 Aug 2026 11:15:02 +0000
asID:                     396982
IP address blocks:        190.112.201.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:21:eb:50:26:cb:c8:68:ea:a5:d4:39:40:a8:cd:7c:3d:15:88:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Aug  7 11:10:02 2025 GMT
            Not After : Aug  6 11:15:02 2026 GMT
        Subject: CN=3260755E2AE1D355B8240CB54349080D029E2C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6a:40:62:07:fe:c5:84:78:e5:a3:60:bb:8b:
                    55:82:79:bf:a0:a8:55:c0:16:18:e5:29:02:e2:9f:
                    d3:48:03:5b:30:ac:45:80:d5:83:e7:e8:f3:c9:d3:
                    b7:c6:ed:b1:20:fb:d6:5b:5c:60:1b:b8:2e:9e:de:
                    40:29:e3:04:c2:7f:5c:4c:c4:a5:a5:4f:1c:50:81:
                    43:2f:3a:7c:41:99:dd:55:79:93:3f:85:73:8d:48:
                    ab:91:b3:ef:9a:61:f7:1e:60:68:38:95:c6:1f:b7:
                    98:b3:e9:09:3f:cd:dc:aa:fa:ad:9b:c0:dd:11:ef:
                    64:62:da:e5:f3:d8:02:09:4c:e2:6f:1d:52:8c:4a:
                    45:03:7a:b2:ca:3d:b3:09:0f:e5:45:ef:2f:7d:e9:
                    0b:ee:35:68:a5:11:8d:2d:b0:d1:63:c1:10:4c:0d:
                    45:24:b1:2c:7f:e7:87:a3:ca:29:bc:1b:21:19:e8:
                    93:ea:13:7d:ec:98:93:4e:79:7a:b3:2d:1b:48:55:
                    37:c6:3f:2e:55:76:6c:4d:11:27:4b:ef:a7:c9:1d:
                    ed:42:b0:85:94:78:b8:dc:27:aa:16:33:22:63:ae:
                    df:36:5c:f3:03:e9:3e:45:2b:32:6b:d4:b9:f8:a0:
                    15:18:f6:88:6c:85:ad:9d:d3:98:09:9c:ee:04:47:
                    d2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:60:75:5E:2A:E1:D3:55:B8:24:0C:B5:43:49:08:0D:02:9E:2C:5D
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:30:c7:75:02:1c:75:12:6a:ec:37:4e:ed:79:a2:b5:00:0b:
         9c:e9:67:a6:82:cb:91:17:60:15:13:d0:b8:63:9c:72:d0:8d:
         0f:c9:f9:44:0f:0f:bc:28:86:98:d1:41:3c:f2:da:c2:1b:04:
         d0:56:80:14:f7:81:5e:28:cd:ac:ec:48:54:3d:60:18:59:7b:
         3d:4b:8e:62:e4:59:62:ad:a0:5c:17:db:29:fd:f3:bb:94:d4:
         9d:d5:e7:65:c2:9b:df:11:b0:22:8e:8f:b8:ba:af:57:08:fe:
         e2:26:b0:45:69:7d:8a:4b:96:a5:82:0e:66:7b:da:76:f6:83:
         a5:6f:49:0f:7e:b1:b2:33:c5:22:28:fc:14:8d:a0:af:66:3a:
         5b:01:4f:5e:63:ad:7c:12:1c:ec:fc:67:ed:9d:14:7e:e0:f1:
         48:ef:22:db:cf:4c:78:fd:d8:0b:46:57:96:39:fe:46:70:f3:
         08:a9:08:1f:19:fb:2e:df:8b:84:cf:a2:c5:e3:00:2e:22:fb:
         42:e1:d8:fc:e4:c2:37:61:03:b8:e3:fd:36:a9:e7:49:ef:01:
         8f:4c:30:e6:86:b5:0f:f3:04:1e:29:00:51:e1:25:05:37:45:
         5f:fa:f6:de:d6:58:11:69:22:7a:aa:e9:77:87:6f:8f:ab:b3:
         ce:47:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:08:43 2025 by rpki-client