Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa
File:                     3139302e39302e302e302f31372d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cPlMldd3JsK5A4OfaZgeTq11DabfMYAGRPiqMAdkfTQ=
Subject key identifier:   A9:DA:DA:ED:30:66:0D:59:07:3D:50:C8:7A:11:50:AC:81:75:54:F1
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       24F7CE6EF94C73BB0CD2868DFBEF696D3E630DA3
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:36 +0000
ROA not before:           Tue 05 Mar 2024 17:55:36 +0000
ROA not after:            Tue 04 Mar 2025 18:00:36 +0000
asID:                     262589
IP address blocks:        190.90.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:f7:ce:6e:f9:4c:73:bb:0c:d2:86:8d:fb:ef:69:6d:3e:63:0d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:36 2024 GMT
            Not After : Mar  4 18:00:36 2025 GMT
        Subject: CN=A9DADAED30660D59073D50C87A1150AC817554F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:60:4e:e7:35:de:91:86:68:62:98:66:32:
                    e4:52:6b:de:fc:ef:19:8f:a6:b4:22:8e:31:a5:d9:
                    b6:aa:6e:58:fa:c3:35:19:3d:75:8f:e2:81:58:de:
                    8f:e1:15:61:80:47:b1:84:33:cb:fc:49:66:05:3e:
                    4d:e2:92:6d:f8:60:29:de:58:18:b5:66:3a:0c:9c:
                    d7:76:98:f6:eb:2a:42:1f:f5:26:d0:39:bd:f0:e6:
                    66:cc:97:46:74:03:7e:5d:32:ca:3a:3b:6d:d1:65:
                    eb:d0:c7:16:4d:4b:fa:d8:de:85:65:6c:9b:4a:e1:
                    47:a3:63:41:2f:a8:b0:5d:03:fd:a6:e8:22:a9:64:
                    93:8c:fe:c0:be:99:96:3d:5a:f5:34:47:87:4f:25:
                    fd:28:64:31:42:c6:b8:87:a8:2f:b6:cc:68:90:de:
                    21:e1:e7:22:10:96:3a:07:b6:34:a5:8c:94:fc:72:
                    97:15:c9:07:d3:f5:f2:73:d1:d6:be:ff:61:b0:6c:
                    a0:05:63:25:2a:ad:f8:a2:c1:4e:bb:31:e4:0a:6c:
                    67:ed:14:aa:1d:81:f1:46:b8:5f:44:7f:7b:63:42:
                    42:63:9a:08:3a:55:dd:cd:44:ee:51:7d:e4:ea:2d:
                    46:14:b2:11:12:ef:09:13:bc:bb:6a:b4:02:71:11:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DA:DA:ED:30:66:0D:59:07:3D:50:C8:7A:11:50:AC:81:75:54:F1
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e302e302f31372d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:6b:5c:4d:b4:42:c9:a1:ff:ae:a0:b1:1f:a4:69:3d:8b:
         36:1d:9e:15:36:52:a7:8b:7d:19:0d:c1:2e:a0:3f:4c:b5:ac:
         39:fc:00:47:e2:b6:6b:fa:0d:e3:a5:16:35:8e:2f:8f:29:8b:
         d9:e4:b9:4e:9f:f8:5e:db:ba:12:41:7f:1a:3e:b6:16:27:01:
         50:33:bc:96:8a:88:a4:e4:dd:50:60:03:3b:e3:e7:40:ad:c0:
         4c:43:e0:eb:9e:01:82:d7:56:7b:3f:b4:f8:d6:ba:e4:0f:8e:
         02:ce:f9:c5:6d:19:7c:eb:9d:4e:13:3c:8d:d5:f8:1f:bb:61:
         dc:ac:fd:31:af:eb:5f:d2:6a:19:64:c2:27:26:bd:71:b3:6f:
         1b:a4:ce:64:04:f8:9e:55:c6:f8:69:67:27:3d:3f:26:ec:2a:
         a5:b7:fc:d9:f5:63:9f:1f:5e:39:56:8a:f9:1b:4c:99:e7:86:
         35:bb:9c:dc:96:dc:af:42:8a:6c:e7:d6:2b:88:78:c4:b8:d4:
         47:dd:fd:71:2e:b6:5e:ba:30:1a:d8:37:c7:45:6a:de:c0:12:
         d9:b3:b3:7f:e2:3c:79:cd:69:69:b4:f4:3b:0d:da:c7:2d:84:
         80:0e:fe:10:8a:b1:3e:59:0d:86:10:8e:75:0a:8a:83:a6:86:
         b9:05:e5:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----