Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa
File:                     3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa (raw, json)
Hash identifier:          LoC7I8GQYhD7/ah5TlCTaTwog2JpotNM3SOEl8zi2z4=
Subject key identifier:   C2:A4:A8:BF:58:2F:25:E5:78:71:F2:4F:D9:C1:45:E7:32:A2:8D:22
Certificate issuer:       /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial:       04D5AFC2319B4676EDB158B2893F5BFC11D11722
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa
Signing time:             Tue 04 Feb 2025 18:41:40 +0000
ROA not before:           Tue 04 Feb 2025 18:36:40 +0000
ROA not after:            Tue 03 Feb 2026 18:41:40 +0000
asID:                     32590
IP address blocks:        190.216.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d5:af:c2:31:9b:46:76:ed:b1:58:b2:89:3f:5b:fc:11:d1:17:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
        Validity
            Not Before: Feb  4 18:36:40 2025 GMT
            Not After : Feb  3 18:41:40 2026 GMT
        Subject: CN=C2A4A8BF582F25E57871F24FD9C145E732A28D22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:5f:2d:37:e0:a0:57:a3:5b:bf:6d:54:49:
                    ef:31:b2:f4:2d:ae:e6:d7:6b:75:2e:d2:ca:8f:07:
                    41:60:e2:96:43:c0:1c:e7:ad:4e:15:6e:77:c9:84:
                    9c:e9:a3:4e:42:55:4d:e8:94:49:b6:df:73:f0:08:
                    15:48:79:08:59:c3:b2:20:4a:14:dc:62:1e:44:7a:
                    cc:a6:81:bb:b6:d9:cf:76:cc:ee:17:ff:61:af:ff:
                    38:68:6d:36:20:32:c7:7b:16:6e:3d:02:44:34:63:
                    a1:9c:46:2d:84:21:46:67:f7:c7:3b:0e:3b:c4:a2:
                    7f:e0:bd:4f:76:f8:50:33:13:ef:ed:d1:f3:60:60:
                    02:98:95:50:40:0f:d2:93:59:f3:3f:73:91:bc:82:
                    58:08:c7:00:ee:bf:07:18:4b:74:55:e1:f4:c1:5b:
                    5a:f2:05:b0:40:b1:bf:c7:15:8b:a2:ba:89:a2:87:
                    9c:c9:05:c1:24:df:73:2d:70:c1:0a:38:c4:c9:9f:
                    21:16:ac:00:f3:d5:59:5a:18:9d:d4:c8:5f:f5:02:
                    20:f3:35:4c:a6:78:8f:cc:a2:3a:fe:9e:47:0b:e5:
                    01:ef:5e:2c:95:13:a4:51:3a:62:e8:31:bd:a4:89:
                    ca:8e:68:40:d9:51:f6:00:98:c1:84:1d:9d:db:7a:
                    08:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A4:A8:BF:58:2F:25:E5:78:71:F2:4F:D9:C1:45:E7:32:A2:8D:22
            X509v3 Authority Key Identifier:
                keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3139302e3231362e3132312e302f32342d3234203d3e203332353930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.216.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:43:ef:78:7a:90:95:05:82:74:44:0a:79:68:e3:f5:a8:f7:
         cb:d4:87:99:93:dc:ea:be:e7:0b:e8:ff:e4:22:35:3e:e5:e7:
         2b:2b:8b:69:77:6b:1e:2d:bf:96:7c:83:11:e6:63:18:86:7f:
         72:db:a1:ee:64:fb:44:21:e7:6c:74:f9:0d:b2:33:8f:35:31:
         0e:a6:fb:c4:14:15:77:80:1e:db:0d:ba:96:23:1a:90:25:27:
         c5:25:62:8d:e6:1f:34:5f:e7:2e:64:bb:c4:55:b3:20:a9:25:
         ff:da:52:29:2a:7d:f4:0e:c2:4a:67:82:11:cb:80:74:5a:03:
         5d:06:ba:00:a3:04:8e:ba:0c:4e:a4:42:e3:b0:f0:71:ed:5a:
         47:f0:49:e8:63:d8:52:d0:3b:e0:f4:43:31:60:c3:8c:cf:66:
         6b:6e:c7:f4:3f:bd:cb:49:f1:2c:38:fc:5f:bd:77:de:e5:87:
         99:eb:19:0b:d2:c3:ba:b4:60:09:ab:f9:ad:9a:9b:fa:73:a8:
         64:dd:00:f0:71:ce:57:e0:06:2c:af:39:c7:55:d6:f0:0a:37:
         8c:90:f9:7a:a3:d2:4e:33:64:82:e1:86:bd:a0:a8:27:e1:4a:
         f8:aa:fe:57:a9:82:c2:67:fe:d1:f9:fa:4c:af:fb:89:0a:8f:
         8f:b2:4b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:38:38 2025 by rpki-client