Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
File:                     3139302e36332e3231362e302f32332d3234203d3e203237373338.roa (raw, json)
Hash identifier:          kFhDr9SOzxhoEfukdWauCnCh4AOK2qGCxk0k0XHN5pA=
Subject key identifier:   84:80:11:0D:4D:1F:79:9B:09:17:10:56:07:10:2D:C7:C9:D4:67:63
Certificate issuer:       /CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
Certificate serial:       5DF31BACE42311D8F722E9F3748224D49C710D2E
Authority key identifier: EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa
Signing time:             Mon 26 Aug 2024 14:50:00 +0000
ROA not before:           Mon 26 Aug 2024 14:45:00 +0000
ROA not after:            Mon 25 Aug 2025 14:50:00 +0000
asID:                     27738
IP address blocks:        190.63.216.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:f3:1b:ac:e4:23:11:d8:f7:22:e9:f3:74:82:24:d4:9c:71:0d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5
        Validity
            Not Before: Aug 26 14:45:00 2024 GMT
            Not After : Aug 25 14:50:00 2025 GMT
        Subject: CN=8480110D4D1F799B0917105607102DC7C9D46763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1f:cb:46:2a:ab:77:a9:5d:46:31:59:88:a7:
                    6a:f5:3f:88:a6:a8:da:02:b9:83:b8:47:73:a5:f5:
                    d1:05:bd:97:63:b9:ef:8c:79:b2:38:de:c9:8e:ea:
                    50:85:6b:bc:c9:bb:00:e7:3e:2c:12:8a:2a:81:8e:
                    9c:2f:fb:cd:14:ac:f0:ea:39:d8:83:3e:9f:75:b0:
                    b2:50:0f:ad:e3:cc:2d:df:e7:3d:9c:4b:d5:f1:ec:
                    e6:8e:c7:b7:17:e0:ad:42:85:20:9e:d5:e4:8c:37:
                    21:f8:4b:c2:9f:1a:82:40:5f:8d:dc:6c:e5:11:1c:
                    83:ed:19:b3:14:93:53:fe:bd:77:b7:bb:2e:ef:10:
                    9e:25:dc:83:fa:ab:90:d3:b9:00:2a:8f:8b:02:9c:
                    ac:37:e3:9f:8e:75:12:94:39:c1:7a:ee:cd:b7:af:
                    19:0a:50:e9:cf:b3:68:33:e9:9f:8c:4f:07:bf:26:
                    79:aa:bb:2b:5d:1a:8b:c6:aa:5c:dc:8e:7b:22:8b:
                    9c:4c:15:fc:d3:c6:7c:0d:3a:2f:aa:60:14:5a:95:
                    d0:b5:ed:51:50:a7:8d:31:1a:86:8a:57:fb:fe:19:
                    e5:bd:ad:05:c0:ce:f9:c5:df:6c:7e:b0:25:e2:6d:
                    59:3a:49:c2:96:4e:32:2a:1b:ba:2b:32:35:c3:49:
                    4c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:80:11:0D:4D:1F:79:9B:09:17:10:56:07:10:2D:C7:C9:D4:67:63
            X509v3 Authority Key Identifier:
                keyid:EB:F9:DA:4E:99:FC:BA:97:C1:C5:0D:8C:0A:B5:C3:B9:B9:D6:33:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EBF9DA4E99FCBA97C1C50D8C0AB5C3B9B9D633A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F40A126CF82DF22205AC496FD742AAFAB2AE1BCA4729D3543BD598841370390/0/3139302e36332e3231362e302f32332d3234203d3e203237373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:d7:9d:a3:34:e9:5d:c4:6e:63:ca:47:3c:8a:b2:66:d2:0a:
         ad:5b:b4:96:be:1d:47:e6:36:7d:c9:9e:b4:29:00:20:dc:ba:
         93:e3:71:d7:c3:7a:d5:e7:57:a0:ae:be:be:e5:ec:7b:43:31:
         0a:16:10:5f:3b:18:6e:82:7c:b6:c6:12:5d:8f:60:03:5d:54:
         d9:c2:ae:9f:b7:91:7a:45:43:b1:9b:45:4e:4a:e5:e2:72:af:
         9d:9a:8c:55:2e:3d:da:1f:52:0a:08:be:9d:54:5d:f0:a6:30:
         78:87:fa:c0:a3:29:30:17:e9:18:36:7a:d7:22:24:48:8d:23:
         cc:a3:b6:18:9a:e8:0f:66:89:ce:9e:c5:e6:30:94:03:ef:4c:
         9e:72:73:f4:c1:b9:7a:e5:09:76:f7:41:dc:81:ad:05:8f:20:
         a1:5f:c8:8f:98:c7:86:8b:63:4e:e9:fc:f4:b2:82:ec:ee:5b:
         c1:72:60:e8:18:9f:9c:03:68:6f:9c:cc:af:c0:8c:17:84:1d:
         6b:a4:3a:ba:34:81:c0:26:73:c7:2a:8e:4e:72:dc:76:23:cf:
         2a:d2:28:81:69:26:65:e2:a5:fd:87:c0:4c:fd:9a:d5:35:69:
         80:3e:b4:37:ee:e0:ab:23:8c:31:32:2f:a7:ec:58:4a:bb:3a:
         a1:7e:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----