Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231362e302f32312d3234203d3e203630303232.roa
File:                     3139302e3132312e3231362e302f32312d3234203d3e203630303232.roa (raw, json)
Hash identifier:          B3xhPYfCxyVySfhlKRTitDaK3tOFCVK/8D79v+ScftY=
Subject key identifier:   CB:D2:8B:CA:D8:8B:6E:6F:BA:27:CA:DA:ED:CA:FA:46:93:B6:9A:7F
Certificate issuer:       /CN=305D06C24AF1C29D223292689F4201FDBCC0C091
Certificate serial:       B490BEF58B4F88205E7726B94D2528D5F5015A
Authority key identifier: 30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231362e302f32312d3234203d3e203630303232.roa
Signing time:             Tue 04 Feb 2025 20:00:13 +0000
ROA not before:           Tue 04 Feb 2025 19:55:13 +0000
ROA not after:            Tue 03 Feb 2026 20:00:13 +0000
asID:                     60022
IP address blocks:        190.121.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:90:be:f5:8b:4f:88:20:5e:77:26:b9:4d:25:28:d5:f5:01:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305D06C24AF1C29D223292689F4201FDBCC0C091
        Validity
            Not Before: Feb  4 19:55:13 2025 GMT
            Not After : Feb  3 20:00:13 2026 GMT
        Subject: CN=CBD28BCAD88B6E6FBA27CADAEDCAFA4693B69A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:20:88:d3:0e:f3:29:5d:2d:5f:9c:d7:d5:05:
                    75:f2:f8:7a:39:d7:29:3e:6e:55:1b:08:c2:85:b6:
                    f3:9c:0c:f8:84:8d:cc:8a:a6:24:0f:43:16:5e:56:
                    e2:92:02:fb:78:c6:54:c8:57:9e:04:29:9a:4f:02:
                    ab:80:64:4d:31:df:f1:a5:ed:e0:ed:55:23:e7:0f:
                    8a:7c:5e:b4:0a:49:0b:85:bb:cb:16:98:ea:49:90:
                    24:cb:e4:06:5e:12:fe:7d:4d:c8:1c:2a:79:cd:1f:
                    12:38:7d:3c:55:65:a9:aa:dd:b1:9c:1f:82:05:49:
                    e2:67:47:3f:21:90:d6:38:57:c3:de:08:ac:ac:ae:
                    7a:6a:ca:3c:e1:74:35:b0:a3:17:33:dd:b3:9d:f2:
                    fe:51:14:3c:ad:c5:39:83:04:07:74:18:a9:16:c9:
                    b6:a5:22:f8:32:e4:ad:18:2d:7c:dd:99:25:6e:cc:
                    d2:f8:db:61:73:89:e6:a8:4d:bf:b9:71:86:84:23:
                    39:56:c3:05:b7:00:c6:65:db:0d:40:1f:56:80:57:
                    f4:d8:85:ad:93:2f:24:fd:ee:a2:4a:98:b3:ce:91:
                    b9:fd:77:3f:8a:87:8c:6d:a0:e5:d6:6f:ab:38:74:
                    ae:68:bc:6c:4b:59:3a:ac:7d:08:f5:a2:ca:32:49:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:8B:CA:D8:8B:6E:6F:BA:27:CA:DA:ED:CA:FA:46:93:B6:9A:7F
            X509v3 Authority Key Identifier:
                keyid:30:5D:06:C2:4A:F1:C2:9D:22:32:92:68:9F:42:01:FD:BC:C0:C0:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/305D06C24AF1C29D223292689F4201FDBCC0C091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305D06C24AF1C29D223292689F4201FDBCC0C091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/492C9AD07ED863FE3714CD242F151AF80FED91B1C83F27EFFF635EEE3FD9F327/0/3139302e3132312e3231362e302f32312d3234203d3e203630303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:96:1a:68:4f:13:9c:09:52:c6:cf:34:ef:ba:ab:25:36:0e:
         6c:46:59:2f:6a:05:d5:81:24:c8:24:e3:b3:b7:11:ac:e0:1a:
         1d:90:46:af:3c:26:3c:27:4d:1d:a1:e7:03:ce:5b:82:0d:4b:
         88:87:93:cb:83:d4:4c:4f:7f:d5:a3:3d:f1:31:21:51:8b:5c:
         8d:90:01:7c:8c:40:7e:f9:64:87:eb:5e:73:f0:4b:97:f9:32:
         d3:f5:88:56:63:4a:5d:2e:84:66:16:2f:81:f1:d5:38:63:52:
         57:2f:17:d5:14:43:b4:a3:86:c3:43:f9:91:5b:b0:ba:0b:22:
         40:73:a2:a9:25:f0:04:53:dc:3e:96:69:a4:53:81:e7:4f:19:
         56:40:83:82:4c:f7:17:6a:b3:f8:a1:97:82:e1:3e:16:dd:9d:
         b0:94:32:96:f4:24:9a:d5:4e:46:cb:44:29:91:14:6a:c1:9a:
         45:10:d4:e3:98:44:b0:95:e6:61:d1:94:da:88:fb:9a:8c:49:
         fa:7e:de:da:fb:01:71:68:f7:67:b6:c3:f5:10:05:dc:ad:69:
         4d:17:29:47:22:e4:e3:bf:fb:ab:aa:1b:6b:f0:c8:d0:9f:e4:
         b6:be:72:f6:70:8a:e5:52:04:ad:be:97:b0:1f:b7:21:e7:11:
         5f:af:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:47 2025 by rpki-client