Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa
File:                     3139302e39392e3132302e302f32312d3234203d3e203532333932.roa (raw, json)
Hash identifier:          I2EfFKVuJ8g4R19zB1UENS2EUi3YTuSXK2wGqyrEsus=
Subject key identifier:   34:07:C9:A3:88:9A:82:D7:2D:87:55:B6:6A:7F:15:51:5E:13:09:97
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       570B7BA564A2D0F3BD788AE6FADC519EEB0058B3
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa
Signing time:             Tue 04 Feb 2025 18:21:25 +0000
ROA not before:           Tue 04 Feb 2025 18:16:25 +0000
ROA not after:            Tue 03 Feb 2026 18:21:25 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0b:7b:a5:64:a2:d0:f3:bd:78:8a:e6:fa:dc:51:9e:eb:00:58:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Feb  4 18:16:25 2025 GMT
            Not After : Feb  3 18:21:25 2026 GMT
        Subject: CN=3407C9A3889A82D72D8755B66A7F15515E130997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:71:3a:55:61:f6:9a:0f:eb:c7:a4:1f:a2:
                    f5:7c:0a:5a:ef:e1:cc:0b:49:92:c3:4e:e6:69:30:
                    c5:2d:16:c0:5e:ea:6e:52:c0:3b:d2:ec:ac:2c:42:
                    7a:a7:fd:db:f9:20:8f:83:1d:07:3f:31:af:89:f5:
                    8a:3b:4b:ca:4b:ec:f1:69:1e:68:b8:a1:bc:a9:aa:
                    90:45:d9:e6:fb:bc:c7:00:d9:d1:30:2f:2a:dc:68:
                    53:b6:d4:59:74:00:02:c2:2c:4d:8a:24:33:2d:0d:
                    e0:99:50:dd:bc:29:96:30:3c:b7:51:76:4b:13:bc:
                    f8:4d:be:69:93:b9:42:72:a5:09:30:cf:ac:9c:2c:
                    db:c4:c1:ca:01:e4:18:45:96:d7:d8:d0:62:ff:79:
                    9a:63:d7:96:43:97:16:35:ef:e9:88:dd:63:1b:35:
                    56:68:a9:26:37:9a:f1:ee:10:27:33:7c:b9:99:74:
                    23:f2:cb:39:2a:f7:4a:c6:f4:e3:2a:28:9b:f9:3c:
                    ea:eb:e3:63:44:47:06:30:9f:9a:9c:9f:3e:24:b6:
                    e3:7f:4c:9e:72:45:7c:9a:6f:12:00:41:d1:f7:da:
                    f8:6b:ae:1d:b9:62:a1:39:42:2e:bb:53:1e:0e:fa:
                    7a:07:5a:d9:d7:b0:29:65:ee:7a:ce:08:ae:18:af:
                    b2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:07:C9:A3:88:9A:82:D7:2D:87:55:B6:6A:7F:15:51:5E:13:09:97
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132302e302f32312d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:44:7b:55:12:69:60:b4:33:f9:e4:f7:15:4f:69:41:c6:
         83:fb:e7:1e:db:f7:5c:37:7a:19:50:c3:0f:be:67:af:1e:e7:
         99:d0:b7:aa:d1:ad:aa:a0:af:30:1f:59:5b:bd:21:cb:2f:a1:
         4b:ff:99:82:ec:0a:7c:eb:0e:59:12:ad:b6:ab:f5:b4:08:4d:
         63:af:15:95:cd:3c:87:2c:de:ba:02:c4:ca:dd:d8:79:05:fb:
         38:e5:81:a2:50:c4:8c:2c:92:2d:f9:8e:40:61:06:67:76:75:
         43:3d:85:88:61:df:e1:97:72:41:5c:b8:b1:6e:bd:de:15:80:
         81:9d:cd:df:e8:12:13:0d:9e:13:20:9f:ef:1e:a6:40:5d:07:
         ac:4c:e4:ae:90:68:27:fa:44:f0:da:de:9e:51:4c:f2:81:20:
         27:da:84:c3:2b:b4:62:d7:ad:66:47:3c:eb:7d:68:51:af:24:
         6c:61:56:68:27:71:61:58:7a:ea:ee:e4:09:51:5f:f1:0a:fb:
         f2:b7:bd:32:69:75:f0:3c:83:bb:f5:86:d9:ce:1c:87:18:bd:
         8a:7d:2d:1d:ae:ce:32:4b:9c:62:6e:e2:58:be:71:ac:e4:7f:
         9e:0e:84:61:c9:b1:18:9c:e1:17:d1:bb:ac:1a:17:a3:0b:35:
         53:31:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----