Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3230382e302f32312d3234203d3e20323632353839.roa
File:                     3139302e39302e3230382e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          H/lydU/jQlcVp6rIzYH3Ge7grw3jInsXb9vOUiNKZ2I=
Subject key identifier:   BC:EB:04:DA:AA:1F:07:A6:F4:8A:1A:42:94:4A:79:D0:2D:BB:3C:A0
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6B7E1E2E7BA4B2155F79DEEE2ABA1106828EBD85
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3230382e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:48 +0000
ROA not before:           Tue 05 Mar 2024 17:55:48 +0000
ROA not after:            Tue 04 Mar 2025 18:00:48 +0000
asID:                     262589
IP address blocks:        190.90.208.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7e:1e:2e:7b:a4:b2:15:5f:79:de:ee:2a:ba:11:06:82:8e:bd:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:48 2024 GMT
            Not After : Mar  4 18:00:48 2025 GMT
        Subject: CN=BCEB04DAAA1F07A6F48A1A42944A79D02DBB3CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:21:c4:56:5d:79:61:67:0a:86:4e:91:30:
                    23:39:c1:d6:d4:55:6b:ac:ec:12:ea:4d:08:88:dc:
                    79:8d:ee:8d:b4:ab:10:0e:76:8f:5a:1a:38:a5:78:
                    0f:d3:27:ae:ae:49:b2:c8:d1:e1:b8:0e:47:b2:7e:
                    8b:40:4f:74:cd:a2:a4:27:d3:f5:46:d1:b6:e1:0c:
                    6f:d3:bb:e7:9c:5c:01:75:97:df:1b:d1:db:7f:b7:
                    9e:55:52:4f:95:1b:70:13:d6:44:22:73:f4:3b:37:
                    c2:a6:47:d1:85:74:ec:97:8f:85:5d:78:db:b3:36:
                    73:48:54:ac:ce:cd:4d:45:8f:49:d3:fc:32:e4:40:
                    0d:1c:e7:f6:fa:6c:74:a7:f4:a9:94:86:d7:bd:29:
                    aa:d0:de:1a:3f:9f:68:3a:4f:32:04:aa:2c:19:c1:
                    ab:f8:e0:9b:72:38:2c:2f:2e:dc:4b:5e:f3:76:61:
                    2c:d3:22:4a:d6:a2:94:5c:cb:a6:e8:e4:fb:91:07:
                    f1:e2:dd:4a:1d:fa:f7:56:ad:96:31:99:02:be:e3:
                    71:bb:34:b2:41:b2:ef:17:86:f5:56:ed:81:d2:2d:
                    e8:bc:7d:95:3e:86:64:95:07:ff:ad:9b:8f:21:56:
                    7d:5f:26:6f:84:76:d0:e7:14:7d:4c:75:54:5d:2a:
                    37:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:04:DA:AA:1F:07:A6:F4:8A:1A:42:94:4A:79:D0:2D:BB:3C:A0
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3230382e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:fd:3b:a4:c0:2f:23:ef:2f:e7:f7:27:71:cf:87:b6:25:34:
         76:0a:9e:12:9b:4b:b2:ad:0c:75:e5:a9:53:e3:a9:b1:3a:74:
         f7:bb:39:f5:7b:40:88:29:02:c3:ec:2c:fb:c4:e2:b6:d2:80:
         b0:43:83:19:a9:65:bd:12:1f:11:e4:68:dc:70:3c:1b:73:ea:
         15:d0:87:a8:ce:b4:ce:41:43:04:5e:a3:a5:20:82:ef:2b:3d:
         49:76:54:3f:73:11:40:9c:dd:06:c9:f8:53:03:dc:5f:a7:bc:
         18:09:3c:fb:57:93:31:68:e2:46:f4:62:1d:d6:3f:0d:f8:6c:
         18:61:d7:c4:28:39:93:04:9b:27:19:32:66:ef:b1:9b:e1:38:
         1d:d3:9b:35:da:f4:65:fd:da:fd:f7:8f:2c:32:10:1f:ae:57:
         2e:f2:e7:fc:bf:0b:a1:bb:17:2a:b8:b5:72:4b:40:6d:c1:00:
         5c:9e:a3:b7:70:f2:d2:37:e0:e9:cd:4a:de:53:30:24:db:2c:
         c9:97:9c:41:99:38:68:95:c8:7b:26:70:28:31:2a:73:7f:61:
         ce:97:77:b3:3c:18:3e:49:bb:e3:75:33:a7:f0:e4:5f:23:67:
         fb:41:cc:ee:bc:ed:a6:d5:d4:17:7d:87:f5:3b:47:fe:ff:2e:
         d3:bd:ce:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----