Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036343239.roa
File:                     3139302e35342e3138342e302f32332d3234203d3e2036343239.roa (raw, json)
Hash identifier:          aPedcsJoJX3qgDF7Cj0MiCufZx52hBJMx2+DMyPF9Tk=
Subject key identifier:   4C:BB:CC:F2:4F:3A:85:18:77:29:B3:BC:37:67:D4:0C:9F:E1:57:EA
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       76AD0ADC5CACE45EEEE53DC1DF0AADFA48E5B4E8
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036343239.roa
Signing time:             Tue 05 Mar 2024 18:17:08 +0000
ROA not before:           Tue 05 Mar 2024 18:12:08 +0000
ROA not after:            Tue 04 Mar 2025 18:17:08 +0000
asID:                     6429
IP address blocks:        190.54.184.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:ad:0a:dc:5c:ac:e4:5e:ee:e5:3d:c1:df:0a:ad:fa:48:e5:b4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:08 2024 GMT
            Not After : Mar  4 18:17:08 2025 GMT
        Subject: CN=4CBBCCF24F3A85187729B3BC3767D40C9FE157EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3f:03:e6:62:6d:c7:61:21:57:81:70:03:f9:
                    5b:48:b5:ba:b4:e3:02:ef:27:9b:7b:f4:82:70:0f:
                    b9:19:93:46:0d:e4:a4:84:b0:82:d7:66:65:75:99:
                    1a:28:5a:4f:4e:e7:d1:11:84:3c:cc:fb:af:f9:86:
                    eb:9c:52:99:e2:96:77:1e:ab:0a:1b:22:e2:01:0a:
                    81:f4:90:f6:68:89:e7:fc:62:69:d5:40:1c:07:42:
                    98:9d:5b:83:d0:02:d6:6b:ab:62:29:f6:90:fa:38:
                    dc:7c:48:5a:86:ae:ff:46:f4:76:92:dc:90:8b:f4:
                    23:dc:0b:f5:e2:77:c0:77:53:0a:dc:67:80:9b:5f:
                    68:a3:50:7a:12:54:c9:a8:4f:66:9e:aa:e3:a1:db:
                    32:cb:a6:6f:7b:1e:7d:ab:2a:d2:62:0d:b0:3d:9a:
                    1c:e2:4b:d6:0f:fb:c2:6c:e4:d4:99:e2:d7:01:33:
                    7b:27:8e:19:36:11:e9:f9:8f:9e:76:03:cc:29:31:
                    2c:52:e7:ea:67:55:d5:56:d7:60:b1:2a:4a:dd:bf:
                    7e:ec:71:ff:2c:b1:22:70:0f:ff:95:56:f5:47:68:
                    f7:f4:99:72:d2:84:ba:89:9b:2c:c7:45:60:b0:2f:
                    36:bf:df:4d:4a:60:86:d3:02:0b:95:5b:a2:78:5e:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BB:CC:F2:4F:3A:85:18:77:29:B3:BC:37:67:D4:0C:9F:E1:57:EA
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3138342e302f32332d3234203d3e2036343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:e0:00:63:df:90:e7:7e:27:a7:90:07:85:86:2c:76:91:e8:
         ff:76:31:0f:cb:ae:c5:2e:3a:8a:0b:cd:8e:40:96:fd:79:a7:
         0a:2e:83:2f:7f:d4:71:37:64:ee:47:be:4b:c2:8e:62:ff:6a:
         df:04:6d:5e:a1:76:8e:47:03:ba:0e:5a:a5:09:d2:8f:f8:92:
         41:d3:fe:16:b4:8c:b2:aa:4e:e0:ef:10:b1:bd:eb:85:93:67:
         21:f7:e1:8e:88:3f:26:07:e7:ed:ad:aa:ea:bb:1a:a9:83:e5:
         27:4c:1c:bc:fa:25:d4:5d:a1:3b:c5:24:d1:82:98:0c:21:b9:
         9c:f1:6a:98:7b:88:38:64:7a:cc:c7:ce:7c:bd:ce:44:a1:1b:
         c8:73:31:93:64:2b:13:b4:0e:c0:7e:43:58:f5:0f:bf:f4:e2:
         ff:a1:0a:5f:a2:df:b8:25:66:5a:49:7e:2b:4d:bc:64:a3:e2:
         ae:08:36:1d:bf:e6:c7:bc:45:51:50:71:a4:6a:47:63:c9:77:
         1e:09:ec:fc:88:97:db:b1:11:4f:87:e4:91:13:c1:e2:e5:41:
         99:9f:c6:70:8b:f7:a5:59:7c:be:a0:fe:68:95:a9:db:51:bc:
         ae:56:02:c7:cb:ac:7d:6f:2a:84:57:4d:e3:68:e6:9a:7e:1e:
         c7:5c:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----