Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa
File:                     3139302e35332e34322e302f32332d3234203d3e203237373432.roa (raw, json)
Hash identifier:          qqUd61fGujtst1qHfTQ+QvAXZc3e/gatJ3kPsJ+1UIs=
Subject key identifier:   6C:D2:C6:3B:C2:CE:05:09:D5:66:9D:70:8D:56:0B:89:52:FF:9C:DC
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       27F1B88C527CADA3F69D9D8C365CD3D2C3DD8663
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa
Signing time:             Tue 05 Mar 2024 18:10:37 +0000
ROA not before:           Tue 05 Mar 2024 18:05:37 +0000
ROA not after:            Tue 04 Mar 2025 18:10:37 +0000
asID:                     27742
IP address blocks:        190.53.42.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f1:b8:8c:52:7c:ad:a3:f6:9d:9d:8c:36:5c:d3:d2:c3:dd:86:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:37 2024 GMT
            Not After : Mar  4 18:10:37 2025 GMT
        Subject: CN=6CD2C63BC2CE0509D5669D708D560B8952FF9CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:14:38:0e:ad:67:16:96:f6:1f:ba:a3:f7:2e:
                    00:95:4c:92:72:cc:44:33:38:b2:5c:c3:b9:d4:85:
                    25:f7:49:ea:1f:76:65:fc:73:bc:89:cd:fc:4c:93:
                    33:d9:ce:15:d4:ea:3f:cd:87:06:98:c9:8a:16:86:
                    e8:08:37:b4:05:33:a2:50:19:e1:e2:7e:ee:58:a0:
                    18:f4:20:f7:44:29:b9:4b:f5:19:6e:5f:c3:3e:3f:
                    c3:2a:0f:28:90:4a:55:50:22:b0:b7:e0:78:52:50:
                    fc:d2:e9:7d:c7:d9:a6:d4:52:1a:6b:05:8f:d8:3f:
                    07:40:72:d6:b7:7e:43:24:cc:6d:59:02:21:7d:6d:
                    4f:70:54:70:7f:36:ea:81:ff:3c:5e:92:e7:4b:5a:
                    8f:7f:ed:e7:8b:41:fa:55:04:96:47:25:2c:bf:b0:
                    6c:e3:25:08:b3:02:33:25:65:c9:b6:e1:40:de:bc:
                    f3:b0:cb:44:e7:06:8e:64:b9:b6:84:21:4d:39:76:
                    12:0b:fb:9d:93:2e:c9:82:6d:10:36:97:89:e6:dd:
                    52:89:c3:7a:9d:22:3d:bb:93:a5:db:67:5d:07:2c:
                    e8:c0:17:5b:86:df:d5:56:16:d9:da:92:3c:d3:31:
                    e6:0e:cf:9d:e9:fb:84:b1:ea:4c:d3:8d:ae:70:8e:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:C6:3B:C2:CE:05:09:D5:66:9D:70:8D:56:0B:89:52:FF:9C:DC
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3139302e35332e34322e302f32332d3234203d3e203237373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b4:cf:74:8b:7a:99:93:84:77:5f:82:ad:6a:06:67:7a:79:
         d0:f5:ac:d4:4c:d2:d9:d2:6f:f6:29:66:c3:38:df:4a:77:a4:
         8a:5f:f9:e7:cf:19:a5:ff:70:e3:b4:a8:83:f8:f6:93:f2:5b:
         1a:85:e1:5c:87:e6:de:5d:22:4a:d3:4a:4c:11:f9:74:dc:74:
         3a:c8:10:eb:87:73:d8:8a:7c:cd:86:38:c2:64:49:2f:69:43:
         83:0c:ff:84:b6:32:d4:4b:5e:90:61:be:4f:0a:81:8e:30:c4:
         24:f5:f4:06:ce:05:ed:93:cd:c1:4f:b7:77:71:2a:ea:3c:e5:
         76:04:22:08:99:8f:01:4d:9c:4c:b3:e1:2a:01:4a:fa:cd:dc:
         e1:d0:b5:7e:44:14:b5:d7:af:6f:f8:92:d6:91:8d:73:0e:9f:
         63:c7:09:b0:61:57:da:a2:88:1b:80:66:d9:67:5c:52:5d:1f:
         98:a4:b8:e6:c7:f6:cd:f3:20:9f:6b:12:e6:bb:1c:53:47:6a:
         69:3f:a7:fc:8e:da:7a:18:50:1b:c5:4e:0f:7c:32:9b:ec:b8:
         0f:19:9e:1b:9b:fb:99:62:c2:c1:3d:12:49:66:c9:46:6e:09:
         4e:b6:37:8d:92:2b:b9:55:29:d7:68:7a:a4:9d:1d:2c:3b:f0:
         ed:ea:4f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----