Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e372e302e302f31382d3234203d3e203230323037.roa
File:                     3139302e372e302e302f31382d3234203d3e203230323037.roa (raw, json)
Hash identifier:          iUKQCDx8z2g7tjLmaxGInFWzMd2Z07f7jPNVydV8FI0=
Subject key identifier:   1F:5C:EE:1A:2C:B8:54:A8:D3:F5:60:33:52:F1:A7:0C:6F:26:11:56
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       4445C7F9C9DA34DE26651D1BC8B45E351DF753BC
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e372e302e302f31382d3234203d3e203230323037.roa
Signing time:             Tue 05 Mar 2024 18:15:23 +0000
ROA not before:           Tue 05 Mar 2024 18:10:23 +0000
ROA not after:            Tue 04 Mar 2025 18:15:23 +0000
asID:                     20207
IP address blocks:        190.7.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:45:c7:f9:c9:da:34:de:26:65:1d:1b:c8:b4:5e:35:1d:f7:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Mar  5 18:10:23 2024 GMT
            Not After : Mar  4 18:15:23 2025 GMT
        Subject: CN=1F5CEE1A2CB854A8D3F5603352F1A70C6F261156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:62:c1:ee:43:6e:7a:20:6c:b4:10:7d:6a:6d:
                    5f:a7:e8:da:75:78:0f:a3:9c:7c:e8:76:5d:54:96:
                    64:35:f8:fb:db:1e:e7:a3:e2:a3:e8:59:fc:c6:47:
                    a6:6f:c0:1e:50:39:f6:56:41:67:27:51:92:a1:41:
                    3e:b8:1a:90:eb:bb:df:94:bc:dd:70:ab:9e:b9:9b:
                    35:59:0d:de:3a:2e:33:3b:8b:9e:28:42:7e:20:be:
                    e9:ab:6f:ff:3c:45:32:b4:e8:2e:10:68:6a:ca:00:
                    3b:13:fe:0e:6e:d6:a9:1c:64:29:08:4d:e9:20:ce:
                    88:dc:ac:b4:f9:b4:52:09:ae:61:66:9d:e0:7c:b3:
                    21:0a:c0:66:d6:44:55:41:e9:a8:54:76:fc:ee:6d:
                    bd:92:43:04:da:1a:8a:ed:5c:6d:d0:27:36:a1:8c:
                    b9:5a:9a:1b:90:5c:53:e6:58:f5:64:47:cf:7b:34:
                    ee:e8:41:01:f1:87:ed:fa:69:11:57:8b:35:b3:04:
                    23:d4:69:eb:ce:34:ca:ee:cc:33:2b:d0:f3:2a:8d:
                    ce:04:59:9a:2c:d5:9c:0a:72:10:89:ec:51:a6:2e:
                    be:40:b8:a6:22:9e:49:0e:70:2f:3f:a3:17:b5:2b:
                    bc:7f:69:0f:65:29:16:b6:5b:94:94:d3:a6:39:f1:
                    96:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5C:EE:1A:2C:B8:54:A8:D3:F5:60:33:52:F1:A7:0C:6F:26:11:56
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3139302e372e302e302f31382d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:71:07:09:5c:76:d7:e9:c0:70:32:3b:b4:6a:c1:b2:92:36:
         5a:14:01:a4:fe:e3:34:18:da:03:c4:c8:47:15:5d:1b:54:23:
         14:53:fd:7d:14:86:09:09:11:d0:04:67:67:fe:96:6a:f0:ba:
         19:61:59:d5:85:d7:cd:c7:3e:d8:7f:f2:6b:d7:64:1f:9a:a7:
         1c:9e:8b:29:68:f2:34:c9:c4:d7:62:ed:02:f5:d3:a9:b3:8e:
         e4:67:6f:b0:0f:03:1b:df:72:12:94:83:fc:87:45:52:81:90:
         5c:99:27:a0:4d:18:08:91:35:d0:9b:d6:cc:15:66:a1:52:7a:
         21:c2:a2:00:4f:5b:ae:ba:ee:96:6d:31:bd:08:cd:e2:6b:81:
         2e:b1:6a:d2:15:5d:28:80:b4:c2:6b:ab:ad:26:59:18:24:59:
         17:10:d7:b2:a4:fb:0a:a6:01:bb:fd:36:fc:ab:4e:c6:87:0a:
         18:e5:2a:36:2a:17:54:a8:30:19:3a:b4:62:61:80:88:1a:44:
         8e:62:9e:3b:fd:1a:01:d0:80:9a:bc:85:2f:e4:04:59:ad:ee:
         94:ef:10:08:4c:fc:14:30:eb:a5:d6:4e:46:89:e8:e8:dd:9f:
         a6:14:73:80:07:bc:2a:4f:21:45:b7:5b:10:85:7e:88:2f:37:
         0d:66:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----