Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa
File:                     3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          QPmt9do0nvtr0z9cDn88uVEhP6OsopX99GrvEJaM/Wg=
Subject key identifier:   88:FC:DE:5F:DA:69:75:E0:18:11:7B:2E:9F:07:4B:F0:94:3F:56:C8
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       697AAFBB9AD626E55DDE5FCFEC648452202403C1
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:10 +0000
ROA not before:           Tue 05 Mar 2024 18:11:10 +0000
ROA not after:            Tue 04 Mar 2025 18:16:10 +0000
asID:                     262191
IP address blocks:        190.131.192.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7a:af:bb:9a:d6:26:e5:5d:de:5f:cf:ec:64:84:52:20:24:03:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:10 2024 GMT
            Not After : Mar  4 18:16:10 2025 GMT
        Subject: CN=88FCDE5FDA6975E018117B2E9F074BF0943F56C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:42:7d:fe:71:ae:bd:15:b3:5e:d9:b9:38:9b:
                    c7:08:d7:d8:66:33:83:55:c1:32:7e:0d:46:09:eb:
                    e9:6f:51:46:88:57:0f:85:30:1f:1e:c7:05:03:c9:
                    92:10:f0:ba:97:d7:04:4d:02:1c:d4:d9:3a:f6:50:
                    25:d1:88:ec:ab:51:61:4e:55:35:0b:47:f1:68:87:
                    7d:a9:5a:4f:fb:9d:97:b0:43:84:d8:56:66:80:fa:
                    c9:68:74:1f:e4:ac:52:67:ce:6b:83:a0:b6:33:55:
                    1e:42:d7:7f:55:d2:47:04:51:ef:b6:93:fd:7a:7b:
                    8d:e8:4f:46:88:16:94:08:93:a3:89:4a:76:4f:d5:
                    4b:4c:5a:1f:db:cc:df:6d:5f:a2:1a:3d:b7:ee:ca:
                    78:a9:42:8b:70:60:81:97:4b:41:8b:8b:08:d7:3b:
                    be:84:2c:42:ff:ba:af:31:3a:7f:74:68:e3:7b:76:
                    f4:dc:b6:d6:99:20:5d:a0:66:11:16:8f:50:6c:19:
                    2e:10:b6:5a:c5:1c:9c:cf:4f:9d:67:26:f8:6c:fb:
                    2e:82:cf:61:ef:f7:fe:12:23:83:fa:46:0b:66:4b:
                    2b:fe:7d:6e:23:7b:65:02:7d:27:c8:96:ad:e7:65:
                    2b:65:a5:c1:b1:f3:d7:0b:3a:9e:47:dd:be:2e:54:
                    ec:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:DE:5F:DA:69:75:E0:18:11:7B:2E:9F:07:4B:F0:94:3F:56:C8
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3139302e3133312e3139322e302f32332d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.131.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:8b:a3:d6:e6:71:c1:a6:ef:d6:fa:1f:74:ce:5c:b3:2f:
         79:60:63:0d:39:c9:eb:a8:51:e8:71:17:db:42:bb:31:85:6d:
         7d:b9:80:3c:71:4a:64:9f:bc:93:87:83:f6:ea:ef:2a:bd:01:
         b4:c7:bf:52:a1:1a:3f:77:a3:25:97:f1:3d:42:c5:53:1b:ad:
         ea:57:74:ab:9b:84:e1:96:07:5b:33:69:f8:af:dc:bd:ed:24:
         a7:19:47:7d:e5:30:22:2a:61:11:fa:bb:0f:46:de:7e:93:e5:
         a8:66:56:15:be:ea:30:47:1e:76:95:81:8f:4f:f3:d7:74:60:
         b1:ef:f7:83:1e:6a:86:d7:29:ae:a3:ef:0f:0f:32:b9:c6:f1:
         36:f3:01:59:aa:e6:30:da:0e:68:3d:a4:32:ca:27:33:c1:2b:
         7c:d8:6c:bc:eb:7c:52:8a:e2:88:f0:c0:dc:b9:d1:4e:b6:a4:
         0c:15:95:d4:59:d1:b0:21:22:54:fa:00:d0:ca:88:34:21:d2:
         64:88:7e:e4:a8:40:a5:30:48:d2:bb:30:f7:59:23:c6:44:f5:
         3c:63:32:77:8b:d3:45:4e:f0:0e:b8:a3:c1:a4:97:1c:10:7f:
         62:e7:5a:84:68:22:50:a7:81:c2:d5:2a:9a:88:ac:c6:9c:c9:
         36:ad:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----