Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3139302e31342e34382e302f32302d3233203d3e203237363539.roa
File:                     3139302e31342e34382e302f32302d3233203d3e203237363539.roa (raw, json)
Hash identifier:          1FOsMWPK/1M3fHJv0wlWTqUFiblYI9e/4xTMbAESG3g=
Subject key identifier:   71:87:73:51:71:EB:36:62:2D:DC:D6:10:89:4A:05:C6:D0:C9:21:45
Certificate issuer:       /CN=8D2583CCB91894057397D5D0034AC586BBE52555
Certificate serial:       6682E76162317AE175F6997C41937C21AA29D00E
Authority key identifier: 8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3139302e31342e34382e302f32302d3233203d3e203237363539.roa
Signing time:             Tue 05 Mar 2024 18:19:44 +0000
ROA not before:           Tue 05 Mar 2024 18:14:44 +0000
ROA not after:            Tue 04 Mar 2025 18:19:44 +0000
asID:                     27659
IP address blocks:        190.14.48.0/20 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:82:e7:61:62:31:7a:e1:75:f6:99:7c:41:93:7c:21:aa:29:d0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D2583CCB91894057397D5D0034AC586BBE52555
        Validity
            Not Before: Mar  5 18:14:44 2024 GMT
            Not After : Mar  4 18:19:44 2025 GMT
        Subject: CN=7187735171EB36622DDCD610894A05C6D0C92145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:9c:7c:58:a2:49:68:e4:fe:ab:5c:64:e2:
                    9a:26:1d:0e:90:df:de:a6:91:46:d3:21:39:2d:ef:
                    b7:0d:93:ec:a5:e3:6c:bc:d9:ac:d3:49:01:de:35:
                    b6:58:bd:02:da:ae:fe:60:5e:90:41:c2:b5:5c:9f:
                    f7:f1:ff:ba:97:af:5d:93:37:26:e0:d9:c4:3e:89:
                    6d:83:6f:b3:6f:43:3d:ac:f1:ce:30:2f:fd:9b:bb:
                    5e:66:4f:f5:6d:c5:bd:ae:91:f2:75:18:45:f4:33:
                    91:b3:4e:d4:f7:81:dd:cc:76:39:cb:f5:d3:02:ba:
                    70:01:34:b6:a2:7a:c1:84:a4:33:de:70:a9:cf:f6:
                    b3:a2:47:80:87:e5:6b:45:05:66:ba:9c:9b:4d:74:
                    81:d2:35:d7:b0:a4:44:cd:a0:e2:cb:45:64:89:69:
                    87:0b:13:67:f1:bf:4e:54:47:0e:74:7e:ac:d7:14:
                    d3:b1:af:0c:49:e2:82:16:11:69:71:9a:cb:bb:ed:
                    b9:c5:7d:82:11:9b:13:06:7c:2d:e7:56:2a:3b:76:
                    26:3d:5d:df:88:01:b3:2e:37:4b:95:83:49:90:2d:
                    a6:88:c8:00:7d:93:c3:82:d4:aa:d3:e0:06:74:a2:
                    b2:05:f0:90:6a:5e:1d:21:04:6d:80:9c:9d:82:75:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:87:73:51:71:EB:36:62:2D:DC:D6:10:89:4A:05:C6:D0:C9:21:45
            X509v3 Authority Key Identifier:
                keyid:8D:25:83:CC:B9:18:94:05:73:97:D5:D0:03:4A:C5:86:BB:E5:25:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/8D2583CCB91894057397D5D0034AC586BBE52555.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D2583CCB91894057397D5D0034AC586BBE52555.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B6B23E958EA87B8EC36E5ED1B86D10E0113F67B0F375C95CCC5470EE3D12022/0/3139302e31342e34382e302f32302d3233203d3e203237363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:2e:b4:a7:10:85:04:58:1a:e3:a3:c5:3a:aa:d1:d8:d7:
         87:84:d8:98:9b:9b:e9:9d:a5:80:bd:bb:d2:71:f6:48:5c:a9:
         c6:ef:89:cc:6a:e9:5b:1d:3f:00:3f:6d:90:08:e0:04:4b:10:
         7c:b4:d3:4e:69:09:17:c9:20:a6:7f:7e:b0:3f:e5:f6:8a:ab:
         22:16:1d:28:8c:9b:b0:4c:e2:ef:bf:5c:b2:ac:c3:27:89:da:
         c3:67:9c:12:dd:1f:b2:36:bd:48:8a:07:db:c7:26:6f:63:41:
         f4:50:82:e1:22:1d:c7:62:43:e1:2d:35:76:d7:02:c7:67:2a:
         8f:49:ed:43:8e:87:a1:7a:40:1e:1f:41:73:fb:d1:23:8c:b9:
         cb:39:3e:52:a3:80:58:f0:35:ba:08:e0:21:e7:85:19:85:ff:
         4c:25:2f:c4:84:93:d6:b5:b2:01:a5:58:26:97:1a:0e:95:e7:
         6d:b9:c5:9d:ed:4e:71:4d:40:84:fe:79:ab:a7:d4:75:bd:1b:
         e0:a3:84:d9:51:32:87:42:df:9f:e4:17:12:23:79:9d:be:e7:
         02:c2:ff:77:55:08:c1:23:63:4c:dd:29:2d:f8:9b:85:10:70:
         94:b9:d2:58:bb:8c:62:b6:b9:82:cb:01:a2:de:50:0d:83:d5:
         71:a3:5e:af
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUZoLnYWIxeuF19pl8QZN8Iaop0A4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQyNTgzQ0NCOTE4OTQwNTczOTdENUQwMDM0QUM1ODZC
QkU1MjU1NTAeFw0yNDAzMDUxODE0NDRaFw0yNTAzMDQxODE5NDRaMDMxMTAvBgNV
BAMTKDcxODc3MzUxNzFFQjM2NjIyRERDRDYxMDg5NEEwNUM2RDBDOTIxNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsX5x8WKJJaOT+q1xk4pomHQ6Q
396mkUbTITkt77cNk+yl42y82azTSQHeNbZYvQLarv5gXpBBwrVcn/fx/7qXr12T
Nybg2cQ+iW2Db7NvQz2s8c4wL/2bu15mT/Vtxb2ukfJ1GEX0M5GzTtT3gd3MdjnL
9dMCunABNLaiesGEpDPecKnP9rOiR4CH5WtFBWa6nJtNdIHSNdewpETNoOLLRWSJ
aYcLE2fxv05URw50fqzXFNOxrwxJ4oIWEWlxmsu77bnFfYIRmxMGfC3nVio7diY9
Xd+IAbMuN0uVg0mQLaaIyAB9k8OC1KrT4AZ0orIF8JBqXh0hBG2AnJ2CddINAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcYdzUXHrNmIt3NYQiUoFxtDJIUUwHwYDVR0j
BBgwFoAUjSWDzLkYlAVzl9XQA0rFhrvlJVUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQjZCMjNFOTU4RUE4N0I4RUMzNkU1RUQxQjg2RDEwRTAx
MTNGNjdCMEYzNzVDOTVDQ0M1NDcwRUUzRDEyMDIyLzAvOEQyNTgzQ0NCOTE4OTQw
NTczOTdENUQwMDM0QUM1ODZCQkU1MjU1NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RDI1ODNDQ0I5MTg5NDA1NzM5
N0Q1RDAwMzRBQzU4NkJCRTUyNTU1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkI2QjIzRTk1OEVBODdCOEVDMzZFNUVEMUI4NkQxMEUwMTEzRjY3QjBG
Mzc1Qzk1Q0NDNTQ3MEVFM0QxMjAyMi8wLzMxMzkzMDJlMzEzNDJlMzQzODJlMzAy
ZjMyMzAyZDMyMzMyMDNkM2UyMDMyMzczNjM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+DjAwDQYJ
KoZIhvcNAQELBQADggEBAE9nLrSnEIUEWBrjo8U6qtHY14eE2Jibm+mdpYC9u9Jx
9khcqcbvicxq6VsdPwA/bZAI4ARLEHy0005pCRfJIKZ/frA/5faKqyIWHSiMm7BM
4u+/XLKswyeJ2sNnnBLdH7I2vUiKB9vHJm9jQfRQguEiHcdiQ+EtNXbXAsdnKo9J
7UOOh6F6QB4fQXP70SOMucs5PlKjgFjwNboI4CHnhRmF/0wlL8SEk9a1sgGlWCaX
Gg6V5225xZ3tTnFNQIT+eaun1HW9G+CjhNlRModC35/kFxIjeZ2+5wLC/3dVCMEj
Y0zdKS34m4UQcJS50li7jGK2uYLLAaLeUA2D1XGjXq8=
-----END CERTIFICATE-----