Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3233203d3e203230343733.roa
File:                     3139302e3131322e3230322e302f32332d3233203d3e203230343733.roa (raw, json)
Hash identifier:          cJaiPkSKwxJyYk3Eo1cf+zWLx3Sg57Gje27eQyUy7fU=
Subject key identifier:   DB:5E:FF:5E:45:37:1C:3E:B7:74:E8:64:33:B6:1C:BA:BE:A9:8F:40
Certificate issuer:       /CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
Certificate serial:       75839BDA312929F425889F850DFF8A994EFC57D2
Authority key identifier: B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3233203d3e203230343733.roa
Signing time:             Tue 29 Jul 2025 15:25:02 +0000
ROA not before:           Tue 29 Jul 2025 15:20:02 +0000
ROA not after:            Tue 28 Jul 2026 15:25:02 +0000
asID:                     20473
IP address blocks:        190.112.202.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:83:9b:da:31:29:29:f4:25:88:9f:85:0d:ff:8a:99:4e:fc:57:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC
        Validity
            Not Before: Jul 29 15:20:02 2025 GMT
            Not After : Jul 28 15:25:02 2026 GMT
        Subject: CN=DB5EFF5E45371C3EB774E86433B61CBABEA98F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:01:99:ba:89:ba:09:2b:60:e6:34:87:0b:
                    0f:bd:7e:8c:00:33:23:45:01:f0:65:81:da:7d:13:
                    31:10:7d:b5:8f:9b:d6:09:ad:54:0c:6b:b5:81:0a:
                    1f:57:2b:ca:00:13:c1:30:8b:74:a3:f7:c6:b6:da:
                    a3:2c:b1:0e:6b:91:ed:1e:84:c8:f3:9f:7e:d5:b3:
                    3a:7d:ee:08:af:e2:b5:2e:33:04:dc:0c:73:cb:0a:
                    6c:40:ec:68:26:c4:76:72:ff:17:3c:d3:f2:40:0f:
                    dc:1b:cd:2b:08:ab:3c:7e:03:dc:96:6e:fc:00:69:
                    76:15:5c:8c:be:3f:37:46:f1:9b:38:56:e0:d4:c1:
                    90:93:8c:66:3d:eb:ef:c6:ca:00:9c:b5:72:9d:1a:
                    58:da:58:1e:52:e5:2d:a0:34:f9:c3:44:dc:d5:82:
                    41:63:80:74:f0:0c:c4:cd:c2:47:cd:6e:58:fb:16:
                    22:74:00:af:e9:a1:7d:af:8d:39:43:fc:fa:6c:0d:
                    bf:0f:41:5e:01:58:76:47:13:c3:02:da:93:76:fa:
                    dc:5f:e4:1d:99:9d:fd:76:eb:c5:17:ec:17:b6:4d:
                    db:a3:f8:8d:a6:7c:92:21:44:79:48:2b:76:52:20:
                    1e:80:39:2e:0e:0f:4c:eb:4f:ba:c2:bb:c9:7a:52:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:5E:FF:5E:45:37:1C:3E:B7:74:E8:64:33:B6:1C:BA:BE:A9:8F:40
            X509v3 Authority Key Identifier:
                keyid:B6:2E:71:9F:36:0B:F9:C9:EE:89:EC:2E:25:CF:0D:E2:28:B6:EB:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B62E719F360BF9C9EE89EC2E25CF0DE228B6EBFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05FDF64B617FCE0E4515EBFA80E41D8F6BF5D8CFE78F2BEA3A7C93E43F0E5D40/0/3139302e3131322e3230322e302f32332d3233203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:72:d6:46:e4:5f:14:f0:53:61:84:0c:e8:2e:30:51:54:d8:
         b2:36:84:54:24:81:09:a8:f1:c6:06:70:aa:ad:7f:cd:0c:75:
         40:a2:38:0b:a1:f6:11:c6:17:d7:d9:ca:47:55:75:b0:0a:2e:
         bd:a5:17:bc:a8:23:a4:7e:af:c3:cb:24:ad:e7:70:fd:92:47:
         72:dc:6f:1d:1a:df:75:7a:1a:80:62:96:89:69:5a:28:0f:42:
         c3:a2:e5:db:61:55:9d:b0:0a:51:cd:77:f9:fe:8a:6a:12:51:
         60:8b:89:8f:15:d9:57:25:9b:8f:92:1e:70:29:9e:3e:3c:73:
         f6:03:9d:1f:f6:07:96:91:e3:83:80:f4:9c:8b:1e:63:e9:0e:
         92:6b:73:46:f5:5a:c7:ab:54:4f:36:bc:40:42:18:6a:e4:00:
         51:ba:98:09:73:1c:ab:55:6d:68:ad:7e:b1:a5:c6:3f:71:01:
         07:7c:f6:3d:32:4b:eb:41:cd:f3:5f:27:a5:2a:56:8f:71:c3:
         59:14:e2:02:8a:27:e1:9d:b5:ce:3a:00:57:cd:01:e8:fe:4a:
         87:49:84:66:ee:cd:17:90:b7:59:67:ad:a8:cd:cc:9e:df:22:
         43:ec:f0:d1:b6:23:c9:e1:92:3b:12:0e:b7:7b:5b:58:3f:27:
         aa:e8:90:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:42:53 2025 by rpki-client