Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa
File:                     3139302e3138332e302e302f31362d3234203d3e203230323037.roa (raw, json)
Hash identifier:          pdX5dfDiueF/qBoGdanowS+/fNcTSvmcSpYs7JdiVlM=
Subject key identifier:   CE:A2:C7:41:B6:6E:B3:7A:12:1C:E2:66:C7:26:76:C4:2B:E8:F4:77
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       33332E729A60A22A8C716B87883154828C09AFA4
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:15:22 +0000
ROA not before:           Tue 05 Mar 2024 18:10:22 +0000
ROA not after:            Tue 04 Mar 2025 18:15:22 +0000
asID:                     20207
IP address blocks:        190.183.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:33:2e:72:9a:60:a2:2a:8c:71:6b:87:88:31:54:82:8c:09:af:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Mar  5 18:10:22 2024 GMT
            Not After : Mar  4 18:15:22 2025 GMT
        Subject: CN=CEA2C741B66EB37A121CE266C72676C42BE8F477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7d:c9:f4:59:1d:31:fe:6d:eb:68:ef:2a:f9:
                    02:6f:13:6f:7b:91:23:b4:3e:47:46:13:e9:df:86:
                    c9:22:3a:f9:a9:c9:84:a0:4e:26:8a:a9:5c:a1:82:
                    2b:b6:f9:38:df:77:20:8a:73:bb:d0:ef:c5:a4:03:
                    92:cb:af:b2:53:b1:44:e4:f6:cc:48:b3:8b:2c:2f:
                    23:8c:fd:25:0d:b7:45:81:54:38:cc:49:50:6e:50:
                    28:9c:ad:1c:63:09:ff:4a:0d:8e:96:87:f8:86:99:
                    a6:b8:d6:6a:ff:36:7b:ea:42:4e:f1:04:9d:39:de:
                    ed:0f:d7:62:6e:ab:5c:a4:7d:f8:59:bc:33:f0:4c:
                    7c:3c:31:34:a2:4c:a2:8c:eb:a9:7a:a1:b4:ea:fe:
                    51:a6:47:09:8d:40:7c:72:e5:6a:df:02:df:07:9d:
                    1a:2d:6d:56:4b:7b:bd:5e:97:8d:e0:a8:81:19:94:
                    19:d4:d8:40:92:e5:eb:71:68:18:69:75:55:37:e4:
                    43:91:31:ee:8a:25:4c:be:06:a5:c2:0c:1c:d7:58:
                    20:9b:d3:46:ec:37:ac:66:70:f0:b1:eb:fe:a2:2a:
                    53:08:5b:e7:7a:b4:f1:fe:a4:37:6a:37:77:b5:e8:
                    fd:2c:0e:04:8d:55:31:11:c2:ab:33:2b:a1:28:81:
                    87:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A2:C7:41:B6:6E:B3:7A:12:1C:E2:66:C7:26:76:C4:2B:E8:F4:77
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e3138332e302e302f31362d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:60:ea:c5:b4:ec:67:64:90:b1:b8:7d:e4:89:e3:50:fc:ac:
         48:9c:f5:7b:c1:8b:26:c8:72:6a:09:37:37:95:8f:bd:b2:3a:
         4d:f4:76:b6:ec:4f:46:8d:66:e9:ce:50:63:bb:be:0d:6d:2f:
         34:d7:16:15:f5:18:35:ab:5b:47:5d:ae:41:45:87:a5:46:18:
         8f:e0:ec:27:ff:33:d3:b1:d9:7f:28:78:95:93:23:fb:6e:c9:
         e9:70:d3:0c:41:bc:0b:35:b7:8a:aa:c0:6b:45:49:13:02:29:
         53:07:e1:8a:c7:dc:c3:b5:92:31:de:75:b3:4e:3e:03:ca:fb:
         21:5f:b1:2b:e4:0a:7e:cd:4b:06:ff:43:60:62:2f:e0:cc:97:
         61:41:b5:a2:ac:e1:00:85:05:df:51:02:18:d5:0b:88:ee:5c:
         93:df:7f:27:d0:05:24:9a:fc:22:27:80:ad:e3:44:e7:cc:07:
         c6:88:91:4f:c2:05:dc:c9:e7:f2:8a:87:ff:6c:c6:e6:16:3f:
         41:8a:78:4b:88:de:5c:19:72:6d:e1:76:61:4c:45:39:13:f4:
         4b:4e:bf:0f:b8:a8:80:86:c3:3d:82:00:4a:4f:9f:9e:91:15:
         dd:cc:2f:8c:c2:10:58:88:9b:9a:6a:62:b6:ef:93:3a:6b:a8:
         18:74:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----