Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa
File:                     3139302e3139372e35362e302f32312d3231203d3e203130323639.roa (raw, json)
Hash identifier:          w6SXTidZsdvZGJZmyG2pD99KXIYCn/d1tbtP6VKwFVU=
Subject key identifier:   51:9E:7A:F3:B9:63:79:71:57:65:61:DD:9B:4D:38:34:22:5A:31:76
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       3DA1F26D34572E69950C5250B183BF6499AE8F95
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa
Signing time:             Tue 05 Mar 2024 17:46:30 +0000
ROA not before:           Tue 05 Mar 2024 17:41:30 +0000
ROA not after:            Tue 04 Mar 2025 17:46:30 +0000
asID:                     10269
IP address blocks:        190.197.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a1:f2:6d:34:57:2e:69:95:0c:52:50:b1:83:bf:64:99:ae:8f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Mar  5 17:41:30 2024 GMT
            Not After : Mar  4 17:46:30 2025 GMT
        Subject: CN=519E7AF3B9637971576561DD9B4D3834225A3176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:cb:fc:ac:3a:07:c7:82:b8:34:c0:46:98:
                    dc:b7:19:2a:e9:53:d6:94:88:f2:f2:84:18:42:70:
                    42:13:71:dc:bc:e0:17:8e:d0:f0:55:62:3a:06:d0:
                    7e:18:fe:9e:7b:cd:93:da:6b:d6:25:f8:be:a5:c1:
                    e5:2f:d9:98:ac:58:0d:e2:39:29:eb:f4:09:f6:55:
                    b1:8c:53:1f:bb:20:81:1a:2d:cf:e3:68:25:bb:02:
                    d2:8b:d4:c5:0c:24:fd:cb:44:83:cf:61:4d:04:39:
                    96:e1:88:6f:02:44:f9:b3:80:56:3b:fc:34:52:b9:
                    5d:08:03:14:7e:ce:b9:32:be:55:33:09:42:dc:bd:
                    a0:e2:75:6c:f9:b5:5d:b9:4a:5c:31:dc:14:57:d7:
                    c1:79:86:67:26:b5:cf:41:d5:7e:31:11:51:28:8f:
                    6e:f1:ca:1d:e9:04:a8:f3:12:67:fb:80:d4:7a:84:
                    81:13:58:ff:7e:fa:a0:f9:d5:a4:85:a8:5a:1d:c7:
                    27:89:29:2e:8d:bb:40:44:db:08:54:fd:a7:ac:fe:
                    e2:ef:f7:5d:23:df:45:3d:1c:c4:80:27:a1:73:5d:
                    1f:98:63:36:da:07:52:89:b3:8a:78:7f:f4:da:0e:
                    9b:32:b1:6c:93:e7:9b:4c:70:49:66:b9:1f:4b:dd:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9E:7A:F3:B9:63:79:71:57:65:61:DD:9B:4D:38:34:22:5A:31:76
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:47:43:73:1b:3b:8d:af:af:4d:63:63:51:b1:69:61:ef:
         41:4f:03:5e:96:8e:79:6d:26:8c:6c:24:58:ba:12:90:d5:4b:
         f3:5e:e8:9a:d6:05:69:a4:0f:63:22:c0:38:c2:9c:a9:93:58:
         2d:d9:5c:f3:31:b5:d1:4a:45:6c:52:33:11:a0:10:3b:59:a3:
         70:16:fe:86:82:64:db:74:cb:81:f8:69:9c:5c:0c:09:82:47:
         ee:af:f0:00:fb:ba:a6:0b:bd:de:bd:82:46:85:b1:49:fc:61:
         65:2d:f3:36:93:e2:2f:d4:61:56:67:3d:fd:ee:f5:df:79:ce:
         b1:35:fe:88:21:c5:4a:48:e2:83:b8:25:94:ca:38:58:c7:ef:
         a7:fb:e8:9a:bf:20:82:d0:b8:47:2a:da:d2:c6:d3:7b:11:76:
         b0:00:46:e4:63:b4:20:87:1a:bf:be:e3:1b:6c:81:ae:57:f8:
         6d:07:64:01:23:68:ad:e2:46:96:0c:d1:b9:b9:73:c7:ca:dd:
         4a:55:60:18:b0:ec:06:e0:9c:7b:21:9b:19:a4:ff:2e:17:a1:
         dc:c6:e5:1b:9a:93:e5:b9:03:01:be:ea:37:f5:8d:01:b4:eb:
         2c:0c:a6:fd:20:9a:bd:03:54:a5:f7:13:af:99:3c:05:88:eb:
         77:db:d4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----