Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa
File:                     3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa (raw, json)
Hash identifier:          avS/G5uO1caiRqMawq3xDcaETJacQg3LF+qvnyZ1TXM=
Subject key identifier:   2D:58:78:A0:49:D3:76:39:FB:21:3B:37:FE:6C:FB:0A:06:CD:FB:0C
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       5ECF1ACF59E2354B5BBC614DCA759123FA76A581
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:07 +0000
ROA not before:           Sun 31 Mar 2024 03:20:07 +0000
ROA not after:            Sun 30 Mar 2025 03:25:07 +0000
asID:                     52369
IP address blocks:        190.110.112.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cf:1a:cf:59:e2:35:4b:5b:bc:61:4d:ca:75:91:23:fa:76:a5:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:07 2024 GMT
            Not After : Mar 30 03:25:07 2025 GMT
        Subject: CN=2D5878A049D37639FB213B37FE6CFB0A06CDFB0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:e4:43:5f:35:9d:41:cc:21:7e:fc:04:c3:
                    c6:f8:65:55:27:86:43:9a:56:5f:17:fb:3c:00:b0:
                    a9:f5:31:6c:82:5d:eb:de:6f:e4:63:85:09:9c:57:
                    f0:32:ec:c5:3d:82:d1:43:81:71:4d:d1:e5:4c:b7:
                    c2:e1:80:a8:79:a0:6f:9d:17:38:54:4d:68:11:50:
                    f4:3c:75:5b:c0:31:f0:fe:60:42:e8:b0:c9:99:b3:
                    7a:0d:50:f6:af:ef:50:dd:b7:6a:41:57:e1:f4:68:
                    43:12:ae:f3:99:3d:a4:42:b7:01:6e:6a:48:27:ef:
                    e2:0e:1d:5f:14:23:b1:f6:49:0a:f6:fb:b1:26:e2:
                    7c:8e:46:b7:e0:87:84:06:77:7f:ff:5b:c6:44:9c:
                    16:49:70:3e:f0:99:df:b0:1f:74:26:8e:e7:31:32:
                    c7:a1:a0:4e:1e:43:e7:3e:2f:58:51:b0:03:18:43:
                    18:e4:54:8f:c8:4e:03:69:05:d0:c6:7a:77:39:2e:
                    73:11:d6:bc:5b:6b:1f:e1:a9:f6:85:55:fb:41:8d:
                    e9:37:df:1a:d5:a0:a9:13:3f:55:d4:9b:97:7a:ad:
                    64:d5:ea:33:e9:73:de:fc:38:87:2a:29:9b:f2:60:
                    e0:9d:e2:7c:32:6b:4a:28:f4:de:cf:57:24:60:fa:
                    d3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:58:78:A0:49:D3:76:39:FB:21:3B:37:FE:6C:FB:0A:06:CD:FB:0C
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3139302e3131302e3131322e302f32312d3231203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:2b:c2:73:3f:7c:a7:0c:b7:9c:08:03:91:4c:07:72:be:2f:
         02:dc:9d:f5:6f:ff:86:f0:86:51:da:5e:98:d3:03:61:b0:00:
         0e:00:52:c4:19:3c:30:af:93:45:a3:a5:51:9c:78:8d:00:1f:
         2d:26:fe:17:5b:74:ae:79:3c:2f:af:57:82:15:e7:f6:84:1a:
         e7:9c:be:e1:53:0a:0f:ef:9c:96:dc:d4:cd:99:c9:26:ee:21:
         90:bd:2d:6e:8a:fd:89:5e:f7:ca:32:f9:80:b7:a1:69:44:11:
         88:ff:31:de:3f:b3:bb:93:ec:0f:8e:7c:4d:0d:f6:02:2a:ab:
         86:3b:a9:1a:c5:e5:df:26:d1:65:57:08:09:97:8f:1f:21:4d:
         bb:df:d4:8b:9b:10:a9:5f:ed:fa:f1:92:a0:89:5a:fd:ec:ee:
         cb:66:76:33:cc:24:6c:a6:38:26:fb:58:7e:58:c2:a8:2d:13:
         76:a8:f5:2b:72:b3:04:3d:71:7c:77:dd:10:67:f0:40:d1:3f:
         3d:3c:4e:8b:51:5e:24:b1:bd:82:0e:6c:64:69:ea:11:f8:56:
         c5:e6:81:1f:ce:db:c3:3c:c1:4a:5a:e0:04:3d:44:3e:2c:38:
         e1:64:85:f5:d6:65:ca:36:c5:5b:34:8e:96:73:d9:97:fc:02:
         23:90:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----