Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa
File:                     3139302e39392e3132312e302f32342d3234203d3e203532333932.roa (raw, json)
Hash identifier:          ukwwkHY4E0UTuSstRMQ1uGKtCuk31xL/VECaXyQakbk=
Subject key identifier:   80:1B:2E:F9:AB:0F:1A:00:72:D7:35:72:2C:D3:A1:38:8D:DF:50:C3
Certificate issuer:       /CN=9F55459C53825B02691E161D0ADE7235B715E158
Certificate serial:       467822D078332173773EA078EBE3089F6D5587C1
Authority key identifier: 9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa
Signing time:             Tue 04 Feb 2025 18:21:23 +0000
ROA not before:           Tue 04 Feb 2025 18:16:23 +0000
ROA not after:            Tue 03 Feb 2026 18:21:23 +0000
asID:                     52392
IP address blocks:        190.99.121.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:78:22:d0:78:33:21:73:77:3e:a0:78:eb:e3:08:9f:6d:55:87:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F55459C53825B02691E161D0ADE7235B715E158
        Validity
            Not Before: Feb  4 18:16:23 2025 GMT
            Not After : Feb  3 18:21:23 2026 GMT
        Subject: CN=801B2EF9AB0F1A0072D735722CD3A1388DDF50C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:b0:74:bb:56:d1:f9:0a:35:22:95:76:b5:
                    6f:c2:01:ed:a0:43:6f:09:65:d4:66:b8:ba:ae:a1:
                    1e:36:db:10:48:d6:32:74:b0:89:41:48:76:6d:3a:
                    b1:67:e0:47:7b:2a:cd:9f:68:61:21:90:5a:b9:a1:
                    08:be:d2:9c:a4:cf:dd:07:58:ce:dc:13:a2:60:26:
                    c7:c6:3d:70:aa:54:ff:e3:f4:97:c7:d3:71:88:19:
                    d9:c9:14:9e:91:ab:e3:c2:cc:77:22:f8:df:f9:60:
                    b2:bc:33:9f:be:f1:99:68:08:e5:3b:0d:0f:c3:6f:
                    59:63:a0:15:0d:85:57:f1:63:90:29:a5:64:c5:d8:
                    eb:88:ee:99:08:cf:2f:a5:8e:cc:23:e8:d4:5f:a7:
                    8d:1b:ef:cf:46:43:08:39:d2:b2:b3:a0:e3:d6:91:
                    c4:69:df:b4:6e:41:80:e2:60:d4:5a:85:90:ab:49:
                    8f:b5:33:ff:41:15:1f:1e:c9:60:a9:1b:6a:fa:50:
                    7e:74:9b:ae:17:dd:6c:c5:56:c0:0f:ce:6c:df:bc:
                    76:b1:90:d4:cc:ac:5c:f6:89:0e:b4:a6:34:3b:6a:
                    a6:4b:94:6f:f3:b1:ac:b9:77:c8:32:63:fd:63:07:
                    d9:3a:70:33:3c:22:8c:3f:43:c5:46:3b:4c:b5:94:
                    cd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:2E:F9:AB:0F:1A:00:72:D7:35:72:2C:D3:A1:38:8D:DF:50:C3
            X509v3 Authority Key Identifier:
                keyid:9F:55:45:9C:53:82:5B:02:69:1E:16:1D:0A:DE:72:35:B7:15:E1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/9F55459C53825B02691E161D0ADE7235B715E158.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F55459C53825B02691E161D0ADE7235B715E158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55023891308CBFF7AD340F8194F05D2727F5EC58A57D8CE1DBDD7F280A1A059F/0/3139302e39392e3132312e302f32342d3234203d3e203532333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:e9:43:73:50:50:92:7a:69:29:cc:76:62:ac:49:d8:41:00:
         71:43:94:6c:b4:fb:02:17:97:54:85:4e:31:64:9d:d8:31:65:
         4e:0e:c5:b2:b5:d7:e3:bb:6e:16:5b:56:ab:27:00:da:7f:c4:
         c7:e1:15:22:fb:d5:ce:c0:d1:54:26:91:ae:dc:38:1e:6a:ef:
         95:58:c7:40:40:25:79:38:33:15:49:f0:d2:6f:8c:ea:10:df:
         38:ee:42:2e:1f:bc:84:9f:03:f3:e8:1e:90:16:f5:b4:7f:25:
         57:14:6d:e2:d0:72:80:fd:2c:40:6d:84:62:83:2d:ed:51:c3:
         ef:6b:55:eb:10:f9:76:f3:b4:49:bf:dc:f1:9d:c5:6b:f9:44:
         33:4b:73:64:92:39:89:48:35:47:5c:c7:dd:d4:4d:d6:c8:65:
         7b:71:ff:a8:d2:82:28:d0:95:58:5c:5a:1e:79:2b:6a:ae:86:
         38:f7:9c:ed:05:09:9a:39:13:a7:4e:be:76:97:8e:c4:dc:dc:
         cf:bd:5d:c4:85:b8:5e:6d:47:22:6d:3f:eb:4b:35:53:22:35:
         d9:6d:90:54:a3:63:58:91:2c:2f:c6:f2:21:24:2e:53:68:ab:
         34:4b:3a:fa:86:cb:72:6a:75:c7:d0:5b:a7:40:80:02:fb:18:
         22:df:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:45:54 2025 by rpki-client