Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa
File:                     3139302e3134382e302e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          RRgt67ZtUesQMi0nHrDpIg6N8RQicohCzQcJaiuXkAc=
Subject key identifier:   CC:6D:45:26:70:83:65:78:1A:E3:1E:5A:76:D7:4B:5D:2B:57:64:18
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       46B8AFB2A212E6FBE847616417D1CB7FC86A4FCD
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:23 +0000
ROA not before:           Tue 05 Mar 2024 17:37:23 +0000
ROA not after:            Tue 04 Mar 2025 17:42:23 +0000
asID:                     14754
IP address blocks:        190.148.0.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b8:af:b2:a2:12:e6:fb:e8:47:61:64:17:d1:cb:7f:c8:6a:4f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:23 2024 GMT
            Not After : Mar  4 17:42:23 2025 GMT
        Subject: CN=CC6D4526708365781AE31E5A76D74B5D2B576418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:49:20:31:56:34:e3:8a:7d:cf:39:c6:4e:
                    96:81:fc:1b:5e:15:13:e4:3c:a7:16:e8:0e:79:dc:
                    90:5e:10:e4:f7:81:c3:f1:a6:11:08:c9:21:46:07:
                    2b:64:da:7b:b9:a1:40:86:9f:44:8b:e1:40:8a:e6:
                    4f:c4:6e:bd:92:a8:67:c5:47:b2:7c:d0:9a:e8:e2:
                    ac:3a:40:02:c0:3b:5b:ac:b8:7d:35:bb:72:04:fc:
                    a3:e4:b4:29:e1:35:77:1b:9b:3b:49:8c:3f:2d:09:
                    bb:66:16:db:f5:87:c9:f8:e6:be:23:4a:31:30:f4:
                    5d:9a:61:0b:91:bb:55:1b:54:0f:60:1b:c2:75:b3:
                    1e:ac:99:59:40:2d:56:8c:2c:3e:14:c4:07:34:e9:
                    b9:90:23:e6:a6:6b:a3:fd:36:84:e2:c7:39:b9:bf:
                    fb:09:2d:36:8f:23:0b:31:36:92:c8:86:15:5d:f9:
                    21:9e:0b:4b:64:8f:58:76:48:4e:fb:a8:35:a1:11:
                    10:8b:b8:ad:69:41:17:29:29:04:47:e0:32:77:2e:
                    0f:25:9a:5e:0e:76:6e:b7:34:fb:31:bd:bd:bd:0a:
                    b6:6e:ed:d1:b1:e3:27:f9:43:4b:b3:dd:17:b9:a2:
                    ff:f2:39:6f:ac:67:b2:cc:7c:2a:f6:de:ad:87:7e:
                    b7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:45:26:70:83:65:78:1A:E3:1E:5A:76:D7:4B:5D:2B:57:64:18
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e302e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:10:c1:3c:4d:da:72:0a:f2:c4:c6:56:98:d3:aa:97:9a:ed:
         d0:8e:d8:c4:88:9e:cb:00:87:a1:25:ea:46:41:93:2b:65:f0:
         fe:9f:66:b5:e7:04:f3:3a:02:73:af:25:f2:26:79:37:f4:ff:
         9b:cc:1d:b7:e5:bb:e6:fd:63:1a:52:15:0a:d7:89:0d:45:bc:
         e2:6b:c1:c8:c3:7f:fa:1e:d4:2c:86:b7:f4:b5:37:c9:a7:32:
         98:72:54:c5:bc:16:0f:6a:56:86:70:f5:33:8e:15:a7:79:56:
         f7:42:c6:f9:35:e5:39:2d:0a:0e:81:06:3f:31:c9:3b:89:a0:
         ef:25:c1:ae:4f:7c:03:e1:60:c2:1e:94:cb:13:dd:c2:9d:81:
         ab:df:7c:a4:bb:de:58:5e:0b:84:df:c8:17:c3:38:8c:7c:44:
         f3:05:9a:2f:a6:b2:ea:c0:6a:b0:13:3e:e3:a1:32:4b:89:e9:
         95:fc:e7:b8:c8:e5:e0:c3:75:63:f1:a9:8b:aa:dc:18:25:12:
         ce:3a:61:d2:e7:06:de:f4:4f:cb:a9:1b:23:9c:ef:22:ea:bf:
         09:d0:8a:f7:5e:75:70:5b:cb:db:b7:80:fc:28:f7:c9:1f:3f:
         61:15:cd:5a:8b:a5:80:4f:cf:90:cb:9d:c7:a8:e0:83:41:76:
         61:4b:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----