Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa
File:                     3139302e39312e302e302f31362d3234203d3e203237393235.roa (raw, json)
Hash identifier:          bowCugOcjmQNKmay/RqnpQEkr4dSWnIO1l/mTwCi3J8=
Subject key identifier:   CE:54:F9:48:A5:CC:4F:5D:F8:85:16:61:C5:26:41:D7:DA:A8:76:D8
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       597251ACA62D603AA0FF3A7D3DF8598E1A94FAA9
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa
Signing time:             Tue 05 Mar 2024 18:17:39 +0000
ROA not before:           Tue 05 Mar 2024 18:12:39 +0000
ROA not after:            Tue 04 Mar 2025 18:17:39 +0000
asID:                     27925
IP address blocks:        190.91.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:72:51:ac:a6:2d:60:3a:a0:ff:3a:7d:3d:f8:59:8e:1a:94:fa:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:39 2024 GMT
            Not After : Mar  4 18:17:39 2025 GMT
        Subject: CN=CE54F948A5CC4F5DF8851661C52641D7DAA876D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:b8:5d:14:f5:04:82:08:e6:07:a9:1e:11:
                    fb:d3:62:cf:0e:ea:33:3a:3e:94:c4:5e:f5:5f:ab:
                    df:51:8f:81:aa:e2:64:66:9c:57:40:a2:41:6c:5c:
                    87:63:5c:39:21:51:9e:1a:fe:80:96:75:de:a0:a2:
                    97:08:d8:ef:01:91:8a:ee:24:c6:68:a4:07:b9:6e:
                    ff:c6:dc:07:69:8a:f6:a5:46:0f:0f:29:6f:64:89:
                    10:62:bb:a5:dc:ea:51:b4:b2:7d:6d:4e:66:f1:fa:
                    36:91:dd:27:05:1e:81:80:19:55:9e:f7:80:6c:be:
                    53:65:c2:54:4d:c2:bc:05:ae:1d:09:c1:df:59:99:
                    ac:e4:b6:e6:86:42:69:3c:b5:d4:a7:1e:e3:4c:38:
                    39:82:3f:65:68:d1:84:34:8c:a7:ac:88:28:1d:18:
                    e6:f6:4e:fe:1e:4f:97:93:d3:17:91:e7:b5:ae:e6:
                    1a:73:06:4f:1a:18:07:40:bc:87:db:65:04:11:ea:
                    56:7b:1c:79:76:e4:00:ed:65:9a:1d:f7:3b:b0:e5:
                    83:8e:63:c4:d0:9b:bc:73:18:b3:6a:82:6e:b4:79:
                    a6:20:ce:81:e9:a2:0e:73:41:29:74:6c:9c:6b:98:
                    55:31:d8:b5:c7:13:26:13:c8:17:ec:9b:e3:5a:ea:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:54:F9:48:A5:CC:4F:5D:F8:85:16:61:C5:26:41:D7:DA:A8:76:D8
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e302e302f31362d3234203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:18:a9:88:e2:dc:ba:05:b4:03:51:fc:d3:b2:e1:43:49:
         c5:63:b9:83:72:2b:b2:b5:18:65:68:dd:33:d0:4b:4e:6a:bd:
         a1:4f:bd:c5:51:ea:97:ce:f6:68:89:11:69:c6:3f:8d:67:26:
         d4:1d:7a:5b:47:71:1a:11:af:c1:88:dc:b0:8b:5e:07:4c:f9:
         05:7a:c0:64:45:3f:2b:e3:72:96:f0:64:71:6d:d7:d9:6a:3f:
         75:bb:26:44:6b:b5:35:39:75:89:ba:dd:3c:11:e9:33:18:f5:
         f9:dc:84:13:a0:8f:8e:35:22:a2:51:43:b4:34:76:28:8a:bc:
         03:e3:b0:ad:ce:68:db:3b:b7:cc:fd:d4:4c:e7:a5:60:74:8a:
         31:f4:84:af:83:be:bf:b5:22:83:3e:b3:33:96:79:ef:e6:c6:
         7b:1f:e3:0f:28:19:1a:84:e0:e7:2c:12:cb:d3:f0:7d:10:4d:
         4d:2d:9b:93:2e:05:82:50:09:db:32:75:46:07:95:0f:4d:04:
         f5:2c:e5:a8:96:a9:30:99:67:eb:ad:a6:cc:51:21:dd:5f:5c:
         da:5d:fd:db:b0:a4:f5:81:f1:07:8c:e3:59:8d:b7:b7:7d:09:
         ec:6e:ea:e7:9f:29:8f:dc:fa:e3:5e:21:1c:37:1b:09:5a:cf:
         8e:df:fb:1e
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUWXJRrKYtYDqg/zp9PfhZjhqU+qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNDAzMDUxODEyMzlaFw0yNTAzMDQxODE3MzlaMDMxMTAvBgNV
BAMTKENFNTRGOTQ4QTVDQzRGNURGODg1MTY2MUM1MjY0MUQ3REFBODc2RDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMrhdFPUEggjmB6keEfvTYs8O
6jM6PpTEXvVfq99Rj4Gq4mRmnFdAokFsXIdjXDkhUZ4a/oCWdd6gopcI2O8BkYru
JMZopAe5bv/G3AdpivalRg8PKW9kiRBiu6Xc6lG0sn1tTmbx+jaR3ScFHoGAGVWe
94BsvlNlwlRNwrwFrh0Jwd9ZmazktuaGQmk8tdSnHuNMODmCP2Vo0YQ0jKesiCgd
GOb2Tv4eT5eT0xeR57Wu5hpzBk8aGAdAvIfbZQQR6lZ7HHl25ADtZZod9zuw5YOO
Y8TQm7xzGLNqgm60eaYgzoHpog5zQSl0bJxrmFUx2LXHEyYTyBfsm+Na6pSjAgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUzlT5SKXMT134hRZhxSZB19qodtgwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzkzMDJlMzkzMTJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMjM3MzkzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAvlswDQYJKoZI
hvcNAQELBQADggEBAKfLGKmI4ty6BbQDUfzTsuFDScVjuYNyK7K1GGVo3TPQS05q
vaFPvcVR6pfO9miJEWnGP41nJtQdeltHcRoRr8GI3LCLXgdM+QV6wGRFPyvjcpbw
ZHFt19lqP3W7JkRrtTU5dYm63TwR6TMY9fnchBOgj441IqJRQ7Q0diiKvAPjsK3O
aNs7t8z91EznpWB0ijH0hK+Dvr+1IoM+szOWee/mxnsf4w8oGRqE4OcsEsvT8H0Q
TU0tm5MuBYJQCdsydUYHlQ9NBPUs5aiWqTCZZ+utpsxRId1fXNpd/duwpPWB8QeM
41mNt7d9Cexu6uefKY/c+uNeIRw3Gwlaz47f+x4=
-----END CERTIFICATE-----