Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
File:                     3139302e35342e36342e302f31392d3139203d3e2036353335.roa (raw, json)
Hash identifier:          xk9aPDKjFjUS9qg9xJqhWbIc/uvjY1o0Q8fLLPHjl40=
Subject key identifier:   E8:D6:33:02:B4:C3:0A:D5:BA:DC:2A:3E:EC:2E:18:5F:60:AF:D7:5C
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       6418B3697531B946DFB6EE47858F53C04C67BBF8
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:17:12 +0000
ROA not before:           Tue 05 Mar 2024 18:12:12 +0000
ROA not after:            Tue 04 Mar 2025 18:17:12 +0000
asID:                     6535
IP address blocks:        190.54.64.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:18:b3:69:75:31:b9:46:df:b6:ee:47:85:8f:53:c0:4c:67:bb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:12 2024 GMT
            Not After : Mar  4 18:17:12 2025 GMT
        Subject: CN=E8D63302B4C30AD5BADC2A3EEC2E185F60AFD75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:ef:88:03:7e:26:3d:f9:d8:2f:39:fe:a0:
                    94:6a:26:85:b0:ff:2c:1a:33:c5:c7:48:06:3f:df:
                    eb:15:23:77:9b:ea:2b:3d:3d:62:76:fd:a4:6d:79:
                    f3:bc:c4:b6:c6:e4:44:00:1b:db:f8:31:72:93:a2:
                    93:d1:ff:c9:4f:e1:6c:48:8c:b5:aa:f0:e3:1d:56:
                    03:7c:9b:00:c5:9f:ac:5f:72:52:e5:93:2b:f2:42:
                    da:94:ce:5c:91:c5:82:fd:15:98:19:72:f9:68:19:
                    70:c2:e1:25:fd:95:92:5b:43:03:cd:30:59:42:af:
                    24:96:a6:5f:e1:56:72:93:98:9f:d3:5c:ca:16:d8:
                    16:a1:4a:b9:95:26:89:c0:e8:d6:5f:aa:50:a2:57:
                    37:e4:f8:0a:25:cb:1f:35:5e:34:e0:ae:9b:1d:34:
                    8c:90:36:2f:6d:2b:50:40:27:1b:71:c6:13:41:16:
                    81:07:c5:ec:04:00:c5:b4:46:63:df:23:94:7d:03:
                    2b:11:e0:ee:97:da:59:83:32:ef:82:97:2b:b8:59:
                    d0:00:f0:9d:b3:2a:8f:91:e3:29:e7:10:17:71:3d:
                    f8:50:61:bf:87:e0:aa:b5:fb:ad:e4:c1:2a:6b:31:
                    7e:6c:c9:78:fe:17:4d:63:b2:d8:e3:3f:22:2d:43:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:33:02:B4:C3:0A:D5:BA:DC:2A:3E:EC:2E:18:5F:60:AF:D7:5C
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e36342e302f31392d3139203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:aa:73:63:ee:79:2b:51:00:3d:ba:c3:6e:86:67:fe:6e:f6:
         df:3f:40:3e:01:a3:ca:0b:97:cc:d8:6a:20:94:d5:71:80:14:
         b4:12:47:eb:a1:98:c2:71:eb:b2:bb:48:6f:58:86:21:87:a9:
         54:65:e1:eb:79:e0:aa:21:70:5e:6c:f1:38:0b:b7:cb:79:ff:
         9f:9a:c9:8a:f9:32:a2:71:aa:16:fb:19:9f:b0:b0:d0:da:6c:
         46:8f:85:85:40:0c:a2:8c:ea:d7:37:90:28:da:c4:00:eb:4c:
         51:49:5f:83:74:3c:a3:16:2f:f8:9e:26:3d:6e:92:e3:71:ca:
         79:38:b9:24:04:40:70:40:cd:ce:f1:92:34:96:4c:7b:13:42:
         c2:b5:40:c3:48:31:a3:89:93:5e:8a:38:19:a1:4d:c4:74:a6:
         e2:63:11:85:e3:d6:bc:c6:a7:a6:c3:56:82:9c:04:25:ac:24:
         d8:9c:0e:c7:e9:0c:1b:d1:1b:73:3e:ea:c9:2c:f4:a2:06:9b:
         06:96:2e:89:d5:0a:2f:00:07:73:f5:a6:e5:a2:d4:97:3c:7f:
         99:98:5d:ef:f0:bf:51:4c:04:71:34:10:ec:0f:3b:61:9d:e9:
         be:42:60:66:16:e5:ba:60:a3:f8:e6:0f:48:de:1e:68:04:ce:
         e7:63:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----