Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33322e302f32302d3234203d3e203532333633.roa
File:                     3139302e3130342e33322e302f32302d3234203d3e203532333633.roa (raw, json)
Hash identifier:          bBVeGirjWzNfeJo6Irdml030SQcHKK3C0HLLydBNdt4=
Subject key identifier:   2F:5D:E8:B6:B1:58:3B:26:31:22:9D:DB:3B:A6:9B:FF:26:74:2B:DA
Certificate issuer:       /CN=92D39AD5A5179131EF8621A62156503CF92DBABD
Certificate serial:       06C6DEDFC11D5E802734EC0533E67564CE8E82E4
Authority key identifier: 92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33322e302f32302d3234203d3e203532333633.roa
Signing time:             Tue 05 Mar 2024 18:22:06 +0000
ROA not before:           Tue 05 Mar 2024 18:17:06 +0000
ROA not after:            Tue 04 Mar 2025 18:22:06 +0000
asID:                     52363
IP address blocks:        190.104.32.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:c6:de:df:c1:1d:5e:80:27:34:ec:05:33:e6:75:64:ce:8e:82:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92D39AD5A5179131EF8621A62156503CF92DBABD
        Validity
            Not Before: Mar  5 18:17:06 2024 GMT
            Not After : Mar  4 18:22:06 2025 GMT
        Subject: CN=2F5DE8B6B1583B2631229DDB3BA69BFF26742BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:2c:e2:da:0e:70:0b:a0:e2:90:c8:be:01:
                    7e:9c:0d:1c:f4:69:53:68:7e:99:57:5a:f0:c1:18:
                    25:df:d8:08:e7:56:e1:eb:d1:88:3b:cc:df:70:d5:
                    8a:04:e2:34:ca:43:3d:64:df:e7:37:de:35:ad:37:
                    13:91:05:6f:12:32:c8:f3:ad:37:6b:8e:51:62:f0:
                    f8:b7:d6:3b:1a:58:ae:5d:35:57:cf:0e:93:ff:e3:
                    06:97:5d:b8:c9:a5:b8:dc:5d:59:f0:b6:8d:27:e0:
                    2c:17:ca:7a:48:46:78:57:d4:03:d3:6b:44:02:77:
                    1f:8d:a5:77:d2:4f:ca:a6:d9:1b:b4:7c:71:27:2b:
                    de:a0:9e:fe:a4:87:4f:73:54:aa:da:df:9c:3c:5a:
                    0e:66:a8:b6:1a:98:c0:24:10:a8:94:a3:03:1a:2d:
                    5a:c7:3c:b6:b8:55:cd:78:9e:71:a4:ae:7a:b6:3a:
                    a1:60:4b:ee:b8:9f:be:6e:23:d7:94:61:4c:0d:09:
                    8a:39:94:7b:e8:e2:aa:f9:0f:5d:b7:ac:e7:6f:e0:
                    86:2c:29:70:f1:b9:ac:81:1d:40:69:86:d8:c5:00:
                    f1:8a:79:bf:fa:44:4d:70:25:49:2e:6f:bb:1f:df:
                    b2:69:c9:59:d9:26:45:48:5c:3c:f9:8b:c2:f3:fa:
                    dd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5D:E8:B6:B1:58:3B:26:31:22:9D:DB:3B:A6:9B:FF:26:74:2B:DA
            X509v3 Authority Key Identifier:
                keyid:92:D3:9A:D5:A5:17:91:31:EF:86:21:A6:21:56:50:3C:F9:2D:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/92D39AD5A5179131EF8621A62156503CF92DBABD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92D39AD5A5179131EF8621A62156503CF92DBABD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02F2D60F703B618F42E2F49241A79FAF5D9E60C5E1C06E0C6B125E1644F0544F/0/3139302e3130342e33322e302f32302d3234203d3e203532333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:3c:41:5e:af:45:d7:9f:78:1b:a9:60:39:ad:3c:b9:4b:
         51:81:b6:e2:85:14:a5:58:ae:27:50:a4:b2:9b:1f:ac:7f:ac:
         09:c5:7b:b1:f8:b4:c4:b2:32:ff:c9:a0:6c:cc:8a:46:0d:9f:
         75:79:f1:8b:24:be:44:14:cc:16:31:49:f9:62:88:42:04:6d:
         40:d7:d9:ae:bd:9f:7c:64:94:5c:d1:68:9a:d8:fd:ef:e0:00:
         82:c4:25:20:50:94:68:6a:6a:c5:d3:3b:6a:2f:e9:7b:88:45:
         07:c2:bb:60:6c:87:36:85:76:93:55:32:84:e1:62:50:29:1e:
         ad:87:cc:c8:ab:c0:25:b2:f0:de:eb:12:a6:da:a9:41:40:79:
         54:52:cb:98:48:04:26:4c:75:64:0f:0a:5f:1e:a1:d4:92:9d:
         83:89:1c:f1:52:c9:cf:2b:72:2a:27:3e:29:51:c0:1c:19:5f:
         e9:92:8c:df:63:75:06:96:cb:9a:ed:96:fc:13:a5:10:de:68:
         a7:a9:08:51:9a:ed:5c:50:f4:50:63:46:90:d4:3c:60:b3:2e:
         f3:7c:5c:69:fa:90:45:a9:4b:35:ae:b9:8f:7d:74:45:ce:78:
         9c:4c:f3:1a:ce:99:06:0b:4d:25:11:9a:ce:96:9c:04:16:ba:
         9d:e9:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----