Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa
File:                     3139302e3134382e38382e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          oV0hxtNFPgIt5RZ7k5W7ydt7TlvQAFq304ZxBp0vcDg=
Subject key identifier:   DC:28:21:84:DD:4E:34:5B:88:19:A1:FD:6F:FC:C2:53:25:F3:D0:49
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       0EB6799D7E98A4BDA1E6F358807D07F4F9C7662C
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:33 +0000
ROA not before:           Tue 05 Mar 2024 17:37:33 +0000
ROA not after:            Tue 04 Mar 2025 17:42:33 +0000
asID:                     14754
IP address blocks:        190.148.88.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b6:79:9d:7e:98:a4:bd:a1:e6:f3:58:80:7d:07:f4:f9:c7:66:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:33 2024 GMT
            Not After : Mar  4 17:42:33 2025 GMT
        Subject: CN=DC282184DD4E345B8819A1FD6FFCC25325F3D049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:83:b9:14:6d:cf:ba:47:7a:aa:85:a1:ef:
                    40:64:ab:08:06:d1:48:9e:fb:c8:84:70:2e:33:38:
                    d3:d6:6e:28:c4:cc:78:65:43:24:3b:bd:11:4d:d9:
                    ae:f7:1d:70:1e:f9:e1:a4:96:e6:6f:e1:6a:1f:fe:
                    c5:28:60:3b:6d:84:79:cb:e4:8e:f3:35:26:11:75:
                    4c:f4:2e:c1:3b:71:ef:c3:74:2d:36:88:18:5d:f6:
                    dc:ca:c3:53:96:fd:d9:04:c1:eb:bd:94:75:7c:10:
                    51:bc:5f:25:90:f5:62:50:70:d0:39:ca:0a:ee:a1:
                    f0:f6:c6:69:df:6d:62:ea:db:06:a9:d9:0b:38:cd:
                    c5:aa:77:2e:c7:25:52:31:5b:5f:67:2a:fd:3e:59:
                    20:f0:62:0c:fb:27:7b:b1:37:df:8f:c9:99:13:96:
                    cc:1e:bd:91:f1:8f:e3:8c:c7:14:6f:f7:a0:03:5c:
                    0e:13:c0:e2:c5:cd:ea:a4:29:ac:a0:89:68:22:e6:
                    db:38:7d:b6:45:1a:69:69:34:0e:d0:55:bb:33:76:
                    7c:7e:8f:d9:dd:fd:e4:51:11:7c:77:57:e8:9f:e9:
                    79:d0:21:4d:be:b5:9b:e9:cc:25:f9:72:4e:40:bf:
                    df:a2:73:56:69:7e:d9:73:f6:a8:22:3a:f7:e1:ce:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:28:21:84:DD:4E:34:5B:88:19:A1:FD:6F:FC:C2:53:25:F3:D0:49
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134382e38382e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.148.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         90:1a:b8:5e:d5:71:8c:6b:ee:89:fd:78:f2:ee:f4:13:89:27:
         a2:79:f7:a2:1a:bd:08:c1:bc:0b:92:f2:af:55:db:f1:59:99:
         23:d4:cd:bb:75:53:6c:de:48:18:8e:eb:4e:3f:93:34:66:a3:
         6e:0a:ff:0e:fb:65:dc:a2:2d:fc:38:21:f1:47:87:f9:79:45:
         d6:63:e0:d3:46:19:74:35:c1:07:23:2a:f7:4c:e0:d5:41:7a:
         42:0a:a2:ee:a2:cd:9a:03:11:01:21:81:d6:a0:63:c7:2c:00:
         b4:10:d7:58:1c:e2:ba:b7:ed:3a:63:97:f1:d2:6f:a8:98:bc:
         aa:31:3e:f7:de:d5:cb:b2:57:5c:44:c6:7a:05:64:95:7c:df:
         86:69:50:8c:b5:50:cd:0e:9c:2c:91:71:08:c5:b1:05:7e:ff:
         ae:dd:0c:88:62:02:48:92:8f:6d:bc:9d:a7:8b:7a:74:65:74:
         4a:f8:49:18:83:4c:05:fa:10:07:6d:e7:57:f3:7d:de:3f:40:
         07:7f:26:de:2e:05:cc:22:55:a0:21:71:4b:19:99:de:6d:20:
         6c:72:e9:ec:dc:b4:a8:bf:70:37:b2:98:0d:61:af:3c:af:68:
         69:36:6c:1e:be:6f:32:62:3c:8a:bc:27:73:24:ee:36:da:de:
         6b:a4:6c:07
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUDrZ5nX6YpL2h5vNYgH0H9PnHZiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNDAzMDUxNzM3MzNaFw0yNTAzMDQxNzQyMzNaMDMxMTAvBgNV
BAMTKERDMjgyMTg0REQ0RTM0NUI4ODE5QTFGRDZGRkNDMjUzMjVGM0QwNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOQoO5FG3Pukd6qoWh70BkqwgG
0Uie+8iEcC4zONPWbijEzHhlQyQ7vRFN2a73HXAe+eGkluZv4Wof/sUoYDtthHnL
5I7zNSYRdUz0LsE7ce/DdC02iBhd9tzKw1OW/dkEweu9lHV8EFG8XyWQ9WJQcNA5
ygruofD2xmnfbWLq2wap2Qs4zcWqdy7HJVIxW19nKv0+WSDwYgz7J3uxN9+PyZkT
lswevZHxj+OMxxRv96ADXA4TwOLFzeqkKaygiWgi5ts4fbZFGmlpNA7QVbszdnx+
j9nd/eRREXx3V+if6XnQIU2+tZvpzCX5ck5Av9+ic1Zpftlz9qgiOvfhzg15AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU3CghhN1ONFuIGaH9b/zCUyXz0EkwHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDM4MmUzODM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzEzNDM3MzUzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA76UWDAN
BgkqhkiG9w0BAQsFAAOCAQEAkBq4XtVxjGvuif148u70E4knonn3ohq9CMG8C5Ly
r1Xb8VmZI9TNu3VTbN5IGI7rTj+TNGajbgr/Dvtl3KIt/Dgh8UeH+XlF1mPg00YZ
dDXBByMq90zg1UF6Qgqi7qLNmgMRASGB1qBjxywAtBDXWBziurftOmOX8dJvqJi8
qjE+997Vy7JXXETGegVklXzfhmlQjLVQzQ6cLJFxCMWxBX7/rt0MiGICSJKPbbyd
p4t6dGV0SvhJGINMBfoQB23nV/N93j9AB38m3i4FzCJVoCFxSxmZ3m0gbHLp7Ny0
qL9wN7KYDWGvPK9oaTZsHr5vMmI8irwncyTuNtrea6RsBw==
-----END CERTIFICATE-----