Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3139203d3e203237383331.roa
File:                     3139302e3130322e3139322e302f31392d3139203d3e203237383331.roa (raw, json)
Hash identifier:          ChucRbulYkp5SV8vl4NMsSsHAZmrPaZ+S4ELIe+aQoo=
Subject key identifier:   C5:17:D4:F6:52:0B:DE:10:AC:38:E0:F5:31:50:80:24:97:A0:F6:66
Certificate issuer:       /CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
Certificate serial:       1A2773111D16CD3BE172B73AB0824C2F443E177E
Authority key identifier: 3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3139203d3e203237383331.roa
Signing time:             Tue 05 Mar 2024 18:15:39 +0000
ROA not before:           Tue 05 Mar 2024 18:10:39 +0000
ROA not after:            Tue 04 Mar 2025 18:15:39 +0000
asID:                     27831
IP address blocks:        190.102.192.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:27:73:11:1d:16:cd:3b:e1:72:b7:3a:b0:82:4c:2f:44:3e:17:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F426F657C9D6BF6728B5D80B4D03FE245BCD97E
        Validity
            Not Before: Mar  5 18:10:39 2024 GMT
            Not After : Mar  4 18:15:39 2025 GMT
        Subject: CN=C517D4F6520BDE10AC38E0F53150802497A0F666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:f1:79:16:9d:ad:e2:1d:c4:58:bd:4a:9c:
                    a1:ff:11:1c:ea:19:48:2b:2a:66:5c:23:48:20:cf:
                    1d:31:4d:34:de:83:c8:e0:b6:e4:51:f6:6d:f9:07:
                    c0:64:08:4a:9c:9e:a1:f4:a1:91:07:7a:0e:8f:29:
                    27:aa:ea:a2:26:67:e5:8f:56:db:95:48:e8:73:79:
                    c5:16:0b:57:9e:ea:2d:4f:35:28:f4:15:9d:14:b3:
                    14:6c:df:b4:12:c8:d8:98:a6:1c:35:fa:6e:f9:3b:
                    03:fc:8b:96:0e:97:16:5c:24:ff:ad:e7:65:38:c3:
                    47:1d:3b:a5:4c:28:66:d4:7f:65:01:85:1a:00:b2:
                    04:87:15:3f:f6:26:9b:7b:98:f8:0d:32:d9:e4:3d:
                    88:08:03:1a:f2:a2:92:34:94:f8:c0:7e:2e:a1:81:
                    32:6b:0d:5d:9d:09:84:bd:7d:ba:4b:19:aa:ef:16:
                    51:d5:63:c1:ae:5b:2d:48:52:4a:ac:e8:89:e1:14:
                    9b:13:87:ad:d1:5d:47:c5:93:56:5a:8c:b3:72:78:
                    8b:6f:dc:df:c1:c1:de:b1:20:ad:e5:cc:34:08:73:
                    85:2a:8a:c8:fe:74:94:4b:c4:05:95:34:78:4c:55:
                    e9:06:20:6c:65:cd:e2:38:19:bd:69:b2:68:eb:84:
                    89:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:17:D4:F6:52:0B:DE:10:AC:38:E0:F5:31:50:80:24:97:A0:F6:66
            X509v3 Authority Key Identifier:
                keyid:3F:42:6F:65:7C:9D:6B:F6:72:8B:5D:80:B4:D0:3F:E2:45:BC:D9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3F426F657C9D6BF6728B5D80B4D03FE245BCD97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CBEE792A2D9789F26940C4FA5AD02A2EF19EDCA696828A818B05D2EFE80B65F/0/3139302e3130322e3139322e302f31392d3139203d3e203237383331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d0:30:ba:42:8c:17:de:d2:87:3a:ae:d1:ff:0f:7d:5e:a5:91:
         74:0e:e2:0d:ae:2c:01:41:9e:73:64:76:d6:f2:9e:db:74:27:
         01:25:d7:ac:c5:43:ed:44:d0:13:43:b6:2c:5d:37:cf:1d:86:
         64:e0:a5:be:db:8a:5c:be:10:4c:5f:79:99:10:7c:87:89:49:
         0e:a8:20:39:16:d7:e1:b8:c6:c4:44:56:52:bd:dd:58:e7:de:
         49:b3:4d:b1:f5:81:b3:ad:de:c6:2f:c7:8e:05:7b:ba:30:0c:
         19:f7:ac:6c:5f:f4:dd:14:e6:3c:60:13:18:6f:45:ea:d4:a3:
         9f:73:89:5e:f7:25:31:93:e3:f6:25:b5:bb:92:61:c4:c3:3c:
         9c:51:1f:a4:40:10:17:38:eb:79:de:8a:34:9e:12:6c:86:5c:
         35:d6:d8:de:5c:14:4d:43:48:a4:b4:27:64:56:aa:b9:e4:a4:
         0e:43:97:06:2c:2e:9c:4a:5a:9c:48:de:cb:e6:af:45:65:6c:
         6b:40:4c:5d:d5:49:85:33:ab:03:42:df:bb:2c:27:ae:9b:e9:
         76:fb:16:7b:6a:8b:b4:f7:74:e4:6d:3f:4e:13:f6:58:97:22:
         1b:b8:0e:56:71:a1:fa:a2:76:35:ea:bd:e6:7a:27:b6:d8:d9:
         eb:f2:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----