Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa
File:                     3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier:          F/4y6QeJS1/5U445fiqgxP63k3rZF11aUDK0TwNmMlo=
Subject key identifier:   12:F5:6F:48:6D:F3:2D:BA:74:83:69:4C:83:4A:D3:17:90:E1:D5:54
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       08D873A02A8DE140A505B3A9A0494660B194A519
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:31 +0000
ROA not before:           Tue 05 Mar 2024 17:37:31 +0000
ROA not after:            Tue 04 Mar 2025 17:42:31 +0000
asID:                     14754
IP address blocks:        190.149.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d8:73:a0:2a:8d:e1:40:a5:05:b3:a9:a0:49:46:60:b1:94:a5:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:31 2024 GMT
            Not After : Mar  4 17:42:31 2025 GMT
        Subject: CN=12F56F486DF32DBA7483694C834AD31790E1D554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:14:ad:37:e0:37:79:b2:07:d1:86:18:a2:
                    8d:f1:f5:7c:b9:14:14:4a:36:6d:84:2f:e5:4d:22:
                    3e:01:d0:eb:c8:82:e2:20:e5:b0:40:27:c6:cd:5c:
                    cc:e1:37:de:39:07:a2:a9:cd:fb:9b:7a:0b:de:45:
                    5c:8d:57:3d:19:09:32:2e:9a:97:cf:f3:04:a6:da:
                    91:80:65:da:17:4e:4f:dd:33:c9:12:13:21:0a:08:
                    fc:60:36:61:5f:54:a3:84:98:12:20:e9:f2:74:93:
                    96:3c:f3:70:7a:b6:d2:46:99:3f:be:f7:9e:f8:9e:
                    94:40:c6:0e:a9:ca:e6:46:8a:16:ee:f9:04:29:a9:
                    ba:cb:f6:7f:1b:90:85:e9:f3:d9:ae:b5:53:e1:e8:
                    46:d0:c6:ae:df:76:06:40:b3:c0:d0:dd:d1:cb:18:
                    a0:df:bb:cf:bc:fb:4d:2d:4c:86:dc:10:27:16:21:
                    c3:ba:8f:a5:61:45:57:25:d3:9d:d4:17:6b:53:15:
                    40:33:0b:45:93:6b:80:32:a5:78:7d:ae:f7:a5:49:
                    9f:2b:48:e6:d9:c6:5c:b0:d6:23:2c:8e:87:89:bb:
                    04:53:2b:2b:6a:9c:6b:e3:7b:b8:80:93:dc:68:d8:
                    f1:fd:3e:62:88:5f:05:26:53:ec:0d:3e:1a:b2:9e:
                    c5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F5:6F:48:6D:F3:2D:BA:74:83:69:4C:83:4A:D3:17:90:E1:D5:54
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3132382e302f32322d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:5b:1b:46:de:29:cd:71:45:40:14:39:b1:8f:d4:1f:b9:46:
         76:f5:03:0e:a5:ac:cf:cf:3b:d4:8f:1f:54:53:cf:5b:70:31:
         fd:2f:52:77:94:f6:ad:d8:84:e0:08:87:b3:fb:98:14:19:ee:
         30:12:5f:41:63:91:75:0b:8e:02:98:fc:4f:b7:61:6f:1d:0e:
         92:41:4c:6e:92:45:b6:d2:9a:98:aa:1f:95:4e:c2:31:0d:4c:
         06:b3:21:db:a5:cd:ce:06:8d:f5:54:9f:3d:bf:12:58:bc:8c:
         cc:24:fa:a8:52:49:dc:90:e9:c5:1c:e1:46:6f:88:2e:8b:33:
         4c:bc:f3:ed:6f:5c:bb:4e:34:8e:e0:a0:53:09:5e:c8:c7:ae:
         53:8b:cf:9a:09:fd:5a:41:43:89:b7:d5:83:7d:33:4e:d7:fa:
         86:21:8a:49:6d:f7:ba:91:28:f4:0d:3c:eb:27:39:c8:00:03:
         46:76:ab:d1:4c:8f:86:81:b1:37:8b:3f:70:b6:99:eb:6a:bf:
         90:8a:1b:cf:1b:a0:46:ef:2a:c2:28:10:94:83:a1:97:2e:9e:
         f9:49:68:bd:80:71:df:24:2d:31:fc:d2:89:c2:ee:20:af:e5:
         cb:d7:c5:64:27:9c:e4:fe:93:85:2d:ae:96:ca:4c:de:b3:9f:
         d4:33:de:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----