Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa
File:                     3139302e39392e3132382e302f31372d3234203d3e203130323939.roa (raw, json)
Hash identifier:          0c7jayiVjQfMh5IDL5L5PglawbfH0jnv6JteA/gdMb0=
Subject key identifier:   A4:02:26:D5:70:9F:C9:D2:A1:2D:B4:34:DC:09:39:1C:0C:D7:01:A0
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       600F862640FDE675E2622063392C264A34C79A06
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:16 +0000
ROA not before:           Tue 04 Feb 2025 17:58:16 +0000
ROA not after:            Tue 03 Feb 2026 18:03:16 +0000
asID:                     10299
IP address blocks:        190.99.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0f:86:26:40:fd:e6:75:e2:62:20:63:39:2c:26:4a:34:c7:9a:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:16 2025 GMT
            Not After : Feb  3 18:03:16 2026 GMT
        Subject: CN=A40226D5709FC9D2A12DB434DC09391C0CD701A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:32:92:0e:a2:42:b5:4a:20:d0:1d:a6:d0:
                    33:b1:d1:b4:a9:9d:4a:05:2a:74:cd:71:96:d3:65:
                    86:27:1b:77:5f:99:cb:a5:d8:a3:fd:83:a7:ad:bb:
                    1b:56:5d:40:3a:ff:17:33:65:c6:58:ae:8d:b6:8f:
                    2b:14:ac:e2:1a:1b:b3:87:58:0f:43:77:d0:6f:88:
                    a1:e0:36:99:ea:28:4c:97:a3:c9:a5:c9:01:1d:ea:
                    9c:62:6c:a7:86:88:9a:80:f1:59:c3:ab:4e:9d:84:
                    d0:e6:cf:d6:68:2e:51:56:f0:e7:dd:71:b7:c6:54:
                    e6:55:8d:4c:f3:36:36:94:7e:c8:e6:82:43:17:32:
                    6e:91:2d:8e:da:e7:ef:5e:3a:0b:ab:fe:de:8a:4a:
                    67:da:c1:1a:81:b5:8b:6a:44:ca:f9:46:3d:fc:95:
                    4f:67:a1:fe:5b:ff:92:85:de:f2:24:2f:ff:d8:24:
                    3b:44:64:e1:c9:ac:fd:97:69:86:82:f6:3b:63:d0:
                    0c:50:05:73:75:41:14:0b:42:40:68:46:fc:a2:6b:
                    f6:89:ab:e9:dd:74:23:d8:f6:af:7f:d8:61:3a:bb:
                    71:58:82:0a:17:cb:ea:d3:ad:dd:15:b7:9e:9b:18:
                    ae:fb:d4:04:c5:54:aa:4a:19:f7:4c:16:a8:03:ca:
                    f3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:02:26:D5:70:9F:C9:D2:A1:2D:B4:34:DC:09:39:1C:0C:D7:01:A0
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         63:45:b8:44:68:72:88:d0:c1:df:91:a8:33:ab:c2:86:a8:83:
         8e:7b:33:54:97:99:ef:25:6a:ce:bb:ec:ce:ab:c3:a2:a8:f9:
         03:53:e1:0b:99:d4:d7:52:a4:a4:2f:88:bf:60:ed:9c:cc:e4:
         33:c4:62:6c:cf:03:10:c8:48:f5:57:bc:e3:a0:8a:67:e3:fb:
         c9:88:e2:5a:e8:ba:bc:41:f9:0d:dc:a5:77:f4:91:63:b5:79:
         96:3b:15:dc:42:20:2d:cb:32:7a:a8:95:03:35:4e:96:01:40:
         b5:a4:4c:ad:b6:fc:0b:ee:0d:49:fe:38:65:92:a9:e8:75:7a:
         20:f2:15:91:54:18:21:11:65:8e:6d:cb:40:e4:b6:d3:02:18:
         a6:6c:be:a9:9a:06:c3:fc:af:cc:21:ad:1d:1d:43:f1:21:89:
         09:fb:db:8b:e8:e5:14:48:d8:8f:c5:12:03:c0:17:09:8b:49:
         1c:25:93:aa:a6:02:b2:8a:f7:72:99:7b:31:27:56:92:00:e7:
         01:e7:31:b8:d3:7b:ce:b9:65:47:01:c6:f3:0e:60:41:4d:fd:
         52:46:73:a9:80:ed:db:ea:83:56:7c:2d:41:00:15:13:79:04:
         c3:87:81:ce:18:3d:ee:2e:0d:05:05:3e:a4:07:3f:90:5d:18:
         18:d8:51:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:12:25 2025 by rpki-client