Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
File:                     3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa (raw, json)
Hash identifier:          RXQ89XmP0MpalskuciMGh0OYbVgCKl+cm583ovsukKs=
Subject key identifier:   19:39:6F:B0:E7:7D:DD:5C:7D:D0:36:0D:8D:C5:22:3C:85:7A:87:68
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       236DC6DC7A315C0EE59DE263BB1B10108FE01172
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     23383
IP address blocks:        190.109.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:6d:c6:dc:7a:31:5c:0e:e5:9d:e2:63:bb:1b:10:10:8f:e0:11:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=19396FB0E77DDD5C7DD0360D8DC5223C857A8768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:61:93:5e:7f:44:3e:64:ea:b7:4d:df:6b:14:
                    95:12:98:7d:53:2b:7b:c1:f1:64:04:ba:73:0c:d7:
                    eb:47:d4:11:d7:6f:d6:bf:06:e3:d7:4f:49:74:51:
                    98:c2:81:0f:21:a0:58:b9:fd:dc:a5:18:e7:92:32:
                    b4:d2:b1:ca:38:8a:ae:21:6b:ed:b2:91:bd:aa:90:
                    c4:4a:d9:a2:c8:1c:7d:c7:5b:87:44:1b:09:95:16:
                    15:b2:99:cc:f2:e4:7f:ab:f5:22:0d:e3:44:97:26:
                    0e:7c:0d:aa:e7:d2:3d:79:4d:15:cb:27:4b:95:fc:
                    02:5e:14:1e:c2:7b:53:89:d9:41:65:0a:55:e8:71:
                    cd:98:a2:e9:13:b2:27:8f:4a:a6:09:d4:73:1b:0d:
                    c3:6d:7d:da:83:ba:a5:60:47:30:3b:93:11:76:29:
                    80:58:db:a7:82:97:00:7d:ee:3d:2d:dd:28:8c:25:
                    e1:85:51:f7:77:9c:35:da:03:53:4a:d7:03:a2:27:
                    36:43:22:98:05:37:b9:05:21:22:14:db:1b:b4:ae:
                    cc:72:42:67:9c:6d:3d:0d:0c:16:f4:b2:a7:8a:bf:
                    65:6c:b0:f9:20:b0:be:76:12:45:b4:a4:14:61:4f:
                    cb:87:33:d4:b8:62:73:f2:69:44:9e:d9:6c:43:78:
                    8f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:39:6F:B0:E7:7D:DD:5C:7D:D0:36:0D:8D:C5:22:3C:85:7A:87:68
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139302e3130392e3139322e302f31392d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         25:54:24:bc:f9:b2:b6:8b:ec:c3:bc:7f:2f:da:53:54:46:ac:
         70:2d:59:b2:cb:47:a9:87:5b:01:4d:ec:07:16:1f:52:c5:58:
         15:59:53:d1:9a:8e:56:5c:fc:27:c4:55:3f:b0:b0:2c:26:2d:
         ce:f7:f1:8f:0f:26:7a:9e:8b:97:af:9f:af:01:41:40:59:ee:
         b6:e7:c1:88:33:57:95:5d:a3:9d:c8:45:60:22:e1:af:c4:2f:
         1e:b3:a9:7f:e6:91:96:98:28:9b:5c:56:8f:0f:70:89:94:87:
         99:a5:e1:8e:48:14:e9:e5:9d:04:ed:b1:47:28:2e:25:0b:ee:
         d0:b7:0f:32:2d:67:1b:70:58:51:62:67:08:cf:5d:f9:88:fd:
         ba:4c:ae:55:24:f4:eb:07:2b:12:6a:e0:03:5d:c0:a5:a5:ce:
         3c:77:7b:4f:0a:41:0f:d2:f5:8c:7f:9b:bc:08:18:ca:a8:ff:
         cd:c9:91:ec:a4:63:4a:f6:76:80:cf:76:7e:c3:48:27:d7:94:
         18:db:d8:0a:19:43:3b:63:f3:c6:ac:15:e3:1a:9b:b0:b0:d8:
         2e:f7:18:d6:5a:5e:cb:b0:f4:d7:8b:91:fb:a8:a2:80:3e:e4:
         7b:7f:f6:d0:09:7e:3e:f1:32:9c:0a:f8:34:1d:38:6d:5c:e8:
         98:f3:7f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----