Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
File:                     3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa (raw, json)
Hash identifier:          /F3Fuq4eA6i75Zd7NG4S2ViMRXQUtXS/A+o+QLXsoAw=
Subject key identifier:   D2:67:44:DB:A1:6A:9B:F3:72:B0:A7:5D:F1:D7:A3:CB:F8:79:FD:3A
Certificate issuer:       /CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
Certificate serial:       3C5A21E88138D3EFAFB35272E58A88FB485548A0
Authority key identifier: 45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa
Signing time:             Tue 05 Mar 2024 17:54:13 +0000
ROA not before:           Tue 05 Mar 2024 17:49:13 +0000
ROA not after:            Tue 04 Mar 2025 17:54:13 +0000
asID:                     271795
IP address blocks:        190.12.148.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5a:21:e8:81:38:d3:ef:af:b3:52:72:e5:8a:88:fb:48:55:48:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45A86C069187499FBAD41DB2F295FCFF52D22E50
        Validity
            Not Before: Mar  5 17:49:13 2024 GMT
            Not After : Mar  4 17:54:13 2025 GMT
        Subject: CN=D26744DBA16A9BF372B0A75DF1D7A3CBF879FD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:23:3c:5a:a9:95:84:ea:21:1c:72:c0:4c:
                    f7:f2:77:59:ee:21:56:b5:0f:bb:01:39:24:e8:4a:
                    89:d1:29:34:d7:6b:ed:42:7c:91:57:db:94:21:28:
                    86:b0:75:01:0b:95:b6:28:72:de:1e:57:e1:a4:61:
                    05:5f:f6:8c:4b:e1:05:40:89:f4:15:22:89:04:b4:
                    e9:86:ff:3c:0f:e1:81:26:d6:43:de:78:d5:01:8f:
                    2f:11:f1:63:ab:7b:6e:18:ba:45:d5:79:5c:46:39:
                    b5:a7:6b:12:4d:ea:1e:09:e9:8c:1d:af:a9:16:4c:
                    ae:2b:4b:94:7f:8d:07:fd:8b:e5:e4:b3:23:1c:9d:
                    3c:4b:41:8f:03:46:52:d1:ad:f8:f0:4b:03:44:07:
                    e1:55:1b:b9:b7:ba:fc:05:c5:cb:e8:d2:34:af:ff:
                    dc:53:9f:a1:6e:76:c2:dd:48:5b:9b:6d:97:46:77:
                    91:4e:e4:11:e2:40:70:ff:8c:37:f9:aa:63:59:99:
                    70:27:36:fd:5f:73:3b:b4:60:7c:39:12:5a:05:ac:
                    29:a6:4f:d0:78:cd:b0:47:1a:9c:eb:5d:fa:b3:85:
                    e8:4a:97:98:c0:c2:0e:1d:61:d6:96:b4:1a:fc:51:
                    aa:19:19:5a:11:25:db:c8:21:e7:83:ea:40:ae:3f:
                    11:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:44:DB:A1:6A:9B:F3:72:B0:A7:5D:F1:D7:A3:CB:F8:79:FD:3A
            X509v3 Authority Key Identifier:
                keyid:45:A8:6C:06:91:87:49:9F:BA:D4:1D:B2:F2:95:FC:FF:52:D2:2E:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45A86C069187499FBAD41DB2F295FCFF52D22E50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05C9EB9B11E98961167E81DD4C9255491A06B008F2AB988B932E108B03A04A6E/0/3139302e31322e3134382e302f32322d3234203d3e20323731373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:4c:bc:1f:6f:64:c4:cc:2e:6d:75:04:f5:7b:9b:bb:b3:16:
         bb:c1:52:13:f8:0b:e1:72:96:4c:5a:0b:86:5d:f9:c6:3f:2c:
         6d:6b:19:5c:a0:5e:35:e6:e0:fe:bc:5b:31:4f:3c:b7:4a:3c:
         6f:4a:0e:83:1a:78:06:6e:87:e2:bd:7c:b9:d9:eb:55:fa:bc:
         88:2d:c7:8b:52:12:cf:e4:f6:a3:7a:db:16:41:b4:83:de:32:
         b6:dc:66:a3:3a:98:c6:72:b2:8d:de:21:cf:04:50:df:e5:65:
         bb:5e:83:fb:2b:75:20:34:41:7d:47:41:df:89:27:50:d1:72:
         46:4b:1c:f1:fc:2f:64:f6:3c:b8:de:99:98:8c:9d:bb:3f:c1:
         9d:a3:a1:be:75:c5:21:2a:83:8e:cb:af:b9:af:f1:01:4e:99:
         b2:ad:a5:11:96:d9:10:87:44:00:cb:aa:92:19:fc:27:6c:28:
         5a:25:6a:b3:de:92:08:f0:db:5c:8f:83:6c:79:8e:94:8b:86:
         b6:86:7a:e8:04:90:f5:ce:87:34:7b:dd:6c:26:e7:a9:8b:f6:
         ea:2b:84:4a:02:67:c9:ee:1d:20:a5:98:ab:d4:b5:9c:d0:db:
         2b:a7:dc:e5:f4:e7:78:fb:f3:ea:80:c4:6a:01:eb:f8:52:26:
         8d:6a:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----