Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3139302e3138322e302e302f31372d3234203d3e2038313633.roa
File:                     3139302e3138322e302e302f31372d3234203d3e2038313633.roa (raw, json)
Hash identifier:          n73Lgo+daj6S+6vkPNiB1IeBwzFyaCf2h6MmdogwDLY=
Subject key identifier:   80:18:B9:AC:E2:B2:7A:CA:7E:27:35:05:65:E4:2B:B7:12:D6:05:2E
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       463B6FFF899E3B6A358140FFA35FDBED4C8B8785
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3139302e3138322e302e302f31372d3234203d3e2038313633.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     8163
IP address blocks:        190.182.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3b:6f:ff:89:9e:3b:6a:35:81:40:ff:a3:5f:db:ed:4c:8b:87:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=8018B9ACE2B27ACA7E27350565E42BB712D6052E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:4e:9a:fb:b4:d1:72:0f:7f:2f:a4:28:70:
                    ec:f5:9a:84:d1:d2:39:ba:90:a3:ad:8e:dd:45:5b:
                    6f:da:b6:e8:f5:00:ec:9d:1c:ac:0b:b3:c9:98:20:
                    ec:16:40:35:88:78:39:52:ae:23:9e:3c:64:6d:5a:
                    a4:21:ee:be:0b:70:67:9c:e7:e5:bb:7b:d9:f9:70:
                    3d:1a:c1:53:b5:3e:68:b3:99:a5:ec:e5:cd:eb:61:
                    0f:09:1d:35:26:4a:1b:de:cf:52:8a:98:30:0c:b1:
                    17:a1:91:f6:3e:91:3d:3a:61:9d:c1:cb:61:15:6f:
                    a5:09:3e:51:18:e3:29:78:f7:ba:f3:6d:45:7b:ad:
                    3b:c6:9f:f8:0c:a2:35:5f:75:26:07:5f:49:b8:f3:
                    62:65:1f:fc:87:71:37:c6:a2:c7:d4:f4:d1:43:a6:
                    e8:37:10:28:69:d0:35:87:7e:be:a5:e7:4e:d9:46:
                    ca:00:07:b0:98:70:0a:43:60:08:df:0d:0c:13:f7:
                    ba:4f:a2:fa:41:20:f7:4a:a6:88:3f:f4:10:9f:39:
                    5c:cc:70:e0:aa:be:fc:6d:58:37:31:e0:c4:e0:db:
                    d5:8c:7c:39:9f:ba:72:d6:bf:c2:49:3b:e5:25:ed:
                    df:1e:28:bf:85:3c:3d:7f:27:aa:ae:76:ea:42:2f:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:18:B9:AC:E2:B2:7A:CA:7E:27:35:05:65:E4:2B:B7:12:D6:05:2E
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3139302e3138322e302e302f31372d3234203d3e2038313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.182.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         48:46:cb:d7:de:8a:03:5d:19:a3:2a:6e:e0:f0:3d:2e:a9:b8:
         52:f4:4e:8e:d5:23:cf:4e:32:b7:06:71:e9:5c:70:62:bc:77:
         f0:f4:dd:52:71:65:d7:d8:c5:0f:36:c2:30:ea:f6:88:6f:c4:
         87:b2:3d:d3:06:3f:47:ee:a3:b8:de:09:35:b8:fc:73:f0:9c:
         24:bf:3a:36:0f:d4:eb:9c:34:60:44:05:8d:e6:90:de:f0:c6:
         f6:8a:20:45:16:62:d0:7e:b7:f1:19:4a:12:e7:c7:28:c9:38:
         52:c1:6d:19:d0:b3:c5:04:4a:91:25:96:b2:cf:e5:11:c0:b5:
         54:80:44:6e:d4:9f:52:c1:f3:40:d3:be:64:ce:5a:7a:3f:2a:
         ea:d9:27:db:c8:92:e1:08:7b:86:18:6d:0b:25:85:ab:a1:f5:
         b9:3b:75:72:27:cc:18:e9:0b:c9:39:9a:7f:f6:e9:84:04:79:
         cb:75:7b:0f:44:a5:16:75:81:6d:eb:20:cb:32:5a:d3:ca:8a:
         dc:3b:c9:9b:81:74:16:f8:ad:d3:c1:e7:89:bc:fa:6e:4f:c3:
         61:93:d3:69:ca:d1:95:2b:da:66:e1:60:7e:0a:af:61:6b:94:
         ca:d8:c7:56:08:a7:20:9a:68:3c:2e:8f:b0:49:bb:8d:e8:fd:
         40:e8:ff:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----