Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          k23GMu2ht5WeQepZGehPRoQ2/MXRKU+VKXOa8qlrBTs=
Subject key identifier:   9F:44:8C:82:73:F6:AB:74:0A:7C:42:58:51:C7:62:75:ED:F0:84:5A
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       590E903DE01858F9733F977AEA93CFC135476EBB
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 05 Mar 2024 17:42:32 +0000
ROA not before:           Tue 05 Mar 2024 17:37:32 +0000
ROA not after:            Tue 04 Mar 2025 17:42:32 +0000
asID:                     14754
IP address blocks:        190.149.154.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0e:90:3d:e0:18:58:f9:73:3f:97:7a:ea:93:cf:c1:35:47:6e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Mar  5 17:37:32 2024 GMT
            Not After : Mar  4 17:42:32 2025 GMT
        Subject: CN=9F448C8273F6AB740A7C425851C76275EDF0845A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:b9:13:8d:5a:f0:83:72:47:70:1b:3f:a1:53:
                    33:ae:ff:54:10:95:5e:a3:86:a2:64:64:7d:74:48:
                    fe:c4:a2:4e:65:cf:28:24:f0:c0:19:48:5e:5e:98:
                    6a:58:39:33:a0:ab:6d:90:0e:87:a0:c6:b5:dc:b1:
                    97:a7:86:e2:9f:9e:a1:82:df:47:ec:25:f6:ce:72:
                    0a:40:06:43:eb:fb:48:db:57:13:33:c4:3a:bc:ce:
                    e9:a2:6b:f3:a2:cc:38:51:f4:c1:5b:a8:38:ba:0c:
                    58:f8:25:9d:92:aa:5f:67:85:5b:44:1a:89:a7:58:
                    8c:2f:57:d8:d8:fa:53:ce:7c:48:fa:db:14:69:21:
                    0c:d1:50:0f:d0:c9:1b:45:56:e8:ab:4c:83:75:4e:
                    8f:63:5c:65:7b:22:7b:a2:0e:a7:cc:01:1e:f1:8b:
                    63:9b:d6:2a:25:92:78:b4:f7:3f:a7:ef:df:b0:f5:
                    db:2b:7f:2a:25:b7:22:c9:a6:32:95:34:d9:ab:5a:
                    4b:a9:d5:1e:5a:b8:18:ee:88:8f:10:be:bc:95:a1:
                    c7:df:e6:fd:26:c0:0f:cb:69:f1:95:c6:85:45:4c:
                    93:fa:01:06:8a:43:2d:53:1b:7a:33:55:ea:f8:49:
                    be:c1:0c:5b:9c:29:5b:c0:4b:f8:14:ad:8a:8c:33:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:44:8C:82:73:F6:AB:74:0A:7C:42:58:51:C7:62:75:ED:F0:84:5A
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:86:8b:40:97:da:36:75:39:e0:c6:16:2f:7f:1c:f7:6d:f0:
         30:10:bb:a9:42:2b:be:83:30:18:87:a5:9b:74:91:d7:27:95:
         a0:bc:f3:89:3f:a0:e8:74:f0:56:cf:7d:be:30:75:c9:e2:23:
         cc:c7:3c:25:e1:8f:09:96:db:f4:6c:76:47:d9:14:d4:42:54:
         74:be:26:fb:8c:d9:0e:ea:ba:cc:ad:4e:b6:27:23:4d:5b:45:
         d7:64:be:79:db:ab:5c:a9:18:8c:16:ca:39:3a:37:82:2d:ad:
         21:c1:ee:bc:3e:72:63:3e:77:81:ef:09:47:40:bf:b2:69:e4:
         65:17:f9:2c:f5:e4:f5:89:16:5e:f1:60:87:8d:24:0b:65:3d:
         f2:2e:a6:31:51:a4:5d:0c:df:2a:74:f7:3d:df:fa:50:4e:5d:
         95:f3:1f:3f:dd:75:37:a7:44:e4:72:36:2d:18:99:4c:8b:37:
         0c:30:ec:98:c4:89:b7:47:a9:44:04:31:a9:4d:ee:8f:75:11:
         0e:f0:f6:8f:2e:b6:b9:1b:06:0a:86:ff:ce:94:73:04:7f:e6:
         7d:13:30:d6:7d:f9:55:73:8f:d1:80:e7:b6:00:17:49:82:ee:
         7c:00:cf:9c:b5:61:c8:e7:7c:c1:05:f4:0e:44:d0:b1:10:d1:
         ba:48:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----