Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e372e36342e302f31392d3234203d3e203237383535.roa
File:                     3139302e372e36342e302f31392d3234203d3e203237383535.roa (raw, json)
Hash identifier:          HAyHeRFpgfmZc/aTqmFHD+qsDT2PHLJ9i8mqXRZU1WE=
Subject key identifier:   A5:B9:44:7E:05:A5:5F:E6:3E:82:51:88:FB:69:BE:FC:E3:4E:01:AF
Certificate issuer:       /CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
Certificate serial:       72A74DD98C91D21C4C3253198BFD0115A5C63B25
Authority key identifier: A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e372e36342e302f31392d3234203d3e203237383535.roa
Signing time:             Tue 05 Mar 2024 17:49:48 +0000
ROA not before:           Tue 05 Mar 2024 17:44:48 +0000
ROA not after:            Tue 04 Mar 2025 17:49:48 +0000
asID:                     27855
IP address blocks:        190.7.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a7:4d:d9:8c:91:d2:1c:4c:32:53:19:8b:fd:01:15:a5:c6:3b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907
        Validity
            Not Before: Mar  5 17:44:48 2024 GMT
            Not After : Mar  4 17:49:48 2025 GMT
        Subject: CN=A5B9447E05A55FE63E825188FB69BEFCE34E01AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:ee:6d:ff:f9:bb:bd:df:2e:cb:ca:34:bf:
                    c1:cb:c0:ca:52:f6:60:8f:59:64:b9:5e:73:68:b7:
                    fb:d4:7a:97:1e:04:9c:7c:d7:39:30:04:a6:dd:cc:
                    3d:07:26:2b:b6:a1:d1:20:76:59:55:e7:9e:1b:14:
                    e7:24:58:8a:9d:5b:47:ac:c6:dc:11:0b:0d:25:3d:
                    2b:d1:99:e0:51:44:5a:a5:b8:35:fe:96:07:13:3c:
                    60:b9:da:cb:98:ec:23:a9:e8:33:4b:6c:6c:f3:1f:
                    78:99:da:de:0a:67:da:21:8f:c0:95:8c:79:dd:1d:
                    63:3d:a6:71:a7:d5:be:a4:f6:f8:1f:61:fe:a8:74:
                    e7:56:51:bb:78:39:71:55:eb:cb:34:11:e6:24:f0:
                    de:f8:b6:53:3b:c1:8a:92:fe:ff:f2:eb:5b:f6:7a:
                    a9:a8:3e:d1:45:93:12:54:71:2e:37:22:89:c5:d3:
                    03:f6:7f:53:f2:50:a6:9a:09:fc:2d:ae:ba:d3:92:
                    97:6e:53:e1:c9:a5:82:a4:f3:bc:eb:41:c8:fa:78:
                    d3:6c:eb:97:b6:a0:7d:69:0f:01:5b:e6:ad:b8:4f:
                    49:d7:da:58:d8:5b:3d:b5:31:72:8a:c3:28:db:36:
                    f9:6f:26:50:94:a2:64:ed:36:c9:b1:c0:86:df:ea:
                    ae:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B9:44:7E:05:A5:5F:E6:3E:82:51:88:FB:69:BE:FC:E3:4E:01:AF
            X509v3 Authority Key Identifier:
                keyid:A7:29:8B:AA:1E:D1:E1:9D:CC:8B:3C:9B:9E:12:3E:92:1E:ED:79:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7298BAA1ED1E19DCC8B3C9B9E123E921EED7907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29E00CE602B393B4179BA729DC98233823CC21365F1BDFBC94438459CD1328B2/0/3139302e372e36342e302f31392d3234203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:33:c0:70:ec:58:26:a0:61:06:ed:84:f8:1a:94:67:7c:40:
         25:0e:b1:aa:95:68:1d:5a:26:14:b9:e4:9b:57:42:ad:9c:27:
         c3:28:6b:17:93:24:d8:15:1b:cb:04:44:e3:dd:37:3a:88:a6:
         e1:03:75:28:b2:fd:af:5d:53:22:58:5c:b5:1f:0b:59:03:11:
         a6:40:06:9f:4f:2c:b2:bb:b1:bd:7e:95:e9:15:cf:5b:d4:1d:
         53:f0:d4:03:61:6b:f8:53:d1:91:15:ea:80:e3:99:dd:db:87:
         d8:da:1f:50:8a:3a:83:aa:06:5a:6d:3e:2f:21:ab:4c:10:fa:
         42:38:31:7f:71:6c:cf:2e:20:39:54:1a:23:c7:c1:0e:f8:c6:
         87:2c:39:71:16:a4:96:dd:b5:09:22:81:a7:0a:a3:50:ef:df:
         b7:60:26:37:73:b1:7c:5b:19:5b:08:a4:a0:5a:c9:6c:94:7c:
         3c:9e:1c:c2:ef:ff:7e:25:90:1a:22:5c:c6:5e:ba:bc:c1:61:
         a2:36:cc:b0:5a:dd:99:a0:47:21:fc:78:58:ad:3b:f2:25:39:
         3b:36:c2:8d:3a:3a:9c:67:82:9f:b2:42:76:0c:72:67:10:64:
         b2:87:a4:b6:c8:dd:4c:5b:5d:f3:99:47:8e:0e:4f:8f:8c:e2:
         ad:f6:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----