Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/3139302e3130342e38302e302f32312d3231203d3e203532343432.roa
File:                     3139302e3130342e38302e302f32312d3231203d3e203532343432.roa (raw, json)
Hash identifier:          G90O0OH6jHfCidCUT+k7t5fq11vQhXWJEUcu4r2lZEo=
Subject key identifier:   3D:C4:1E:A5:98:A4:9E:9E:1D:78:0C:B7:2B:2B:29:99:7E:68:A0:7F
Certificate issuer:       /CN=03996CD47718A115B48A83723963AF065C1AB554
Certificate serial:       793B86A0250E0B36ECD9D12CC234D0BCB2675E70
Authority key identifier: 03:99:6C:D4:77:18:A1:15:B4:8A:83:72:39:63:AF:06:5C:1A:B5:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03996CD47718A115B48A83723963AF065C1AB554.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/3139302e3130342e38302e302f32312d3231203d3e203532343432.roa
Signing time:             Tue 04 Feb 2025 20:01:59 +0000
ROA not before:           Tue 04 Feb 2025 19:56:59 +0000
ROA not after:            Tue 03 Feb 2026 20:01:59 +0000
asID:                     52442
IP address blocks:        190.104.80.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3b:86:a0:25:0e:0b:36:ec:d9:d1:2c:c2:34:d0:bc:b2:67:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03996CD47718A115B48A83723963AF065C1AB554
        Validity
            Not Before: Feb  4 19:56:59 2025 GMT
            Not After : Feb  3 20:01:59 2026 GMT
        Subject: CN=3DC41EA598A49E9E1D780CB72B2B29997E68A07F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:28:90:71:75:60:c5:c9:3e:70:57:9a:d9:c0:
                    57:69:b1:a2:39:ca:61:e3:be:93:23:b9:25:76:b7:
                    21:f1:94:f9:8f:2d:46:e4:3d:f3:90:f3:68:21:0d:
                    23:63:7a:60:ef:d2:8d:6d:73:83:29:88:a1:52:36:
                    79:f3:a2:f0:60:b8:be:68:25:7d:19:fb:f3:b9:1e:
                    78:f1:0a:b0:f4:5a:a7:47:52:44:85:0d:82:dc:67:
                    55:4a:04:71:41:33:85:42:83:86:0b:09:bc:38:17:
                    5b:c8:37:78:3e:57:83:34:50:93:d1:00:30:57:0b:
                    8d:46:6e:4e:b9:94:75:82:ab:a6:9c:03:cb:e4:7b:
                    5d:ac:e6:29:b5:8b:c1:4a:40:a0:eb:3b:0a:c9:30:
                    73:45:0d:44:12:23:35:d5:5d:fd:46:41:81:c0:6e:
                    f8:8d:80:07:22:8a:88:33:11:51:4b:1e:42:d3:5d:
                    2d:8b:d1:31:32:80:03:6c:e5:e7:ee:50:6e:67:cf:
                    c6:1f:1a:23:53:c4:41:4c:dd:3f:47:e0:53:64:ad:
                    cd:91:53:d9:1d:33:e6:ca:34:19:31:ac:da:4d:78:
                    44:58:0e:6d:dc:e8:d6:e5:e8:3d:bf:c3:76:3f:ab:
                    e1:50:a2:12:98:73:5d:ca:36:fe:7a:f4:df:13:5d:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C4:1E:A5:98:A4:9E:9E:1D:78:0C:B7:2B:2B:29:99:7E:68:A0:7F
            X509v3 Authority Key Identifier:
                keyid:03:99:6C:D4:77:18:A1:15:B4:8A:83:72:39:63:AF:06:5C:1A:B5:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/03996CD47718A115B48A83723963AF065C1AB554.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03996CD47718A115B48A83723963AF065C1AB554.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4BDD6600762D3B239C880EED7C3DF4599997D713092C69476B2B35CC502208F1/0/3139302e3130342e38302e302f32312d3231203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:9c:98:39:12:36:68:69:ed:ca:8b:c9:4e:37:33:0a:5e:48:
         0b:82:49:65:4e:e3:5e:a2:44:5d:01:39:b4:be:e0:e2:eb:7f:
         2f:87:21:46:6d:0c:00:93:0c:ed:e7:4f:8b:e1:df:9c:0d:2c:
         5a:64:7c:93:6e:e4:23:78:5d:a8:d2:fa:33:55:2c:46:8f:d5:
         26:be:89:11:ed:8a:c1:15:aa:68:3c:3d:37:c5:f0:90:42:34:
         55:19:5c:bf:8c:7d:c9:20:a9:09:e7:ec:aa:2f:30:8b:01:95:
         fb:43:b7:05:8b:9f:fa:8d:30:74:b1:b6:2d:16:8a:04:9d:a2:
         0a:ee:b0:55:49:2e:a5:3f:7a:18:c3:f4:92:c0:a9:4c:5e:7d:
         e1:cb:5a:4e:07:30:8b:9c:a5:5a:60:81:1c:0d:ee:65:66:b3:
         b8:d7:e6:03:2e:98:78:59:ee:c3:2c:2c:b7:66:0f:a3:1d:a4:
         44:7d:60:af:ef:e2:7b:c2:7c:6a:38:bf:50:9f:98:79:b1:d6:
         1a:6b:ba:b9:68:91:50:fd:9a:f6:13:d3:62:11:45:fd:e2:5a:
         e3:59:00:a0:22:fc:4f:62:31:37:46:d4:d4:67:dd:15:5f:29:
         db:b1:b8:28:bc:25:48:e3:dd:2d:cd:7f:e3:59:be:69:6e:8f:
         f8:82:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:58:15 2025 by rpki-client