Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa
File:                     3139302e39372e38382e302f32332d3234203d3e203237383435.roa (raw, json)
Hash identifier:          W76vcXPgW6to3wNGVIzNZeQ34OIQ8tyKbdssKubCTcs=
Subject key identifier:   FE:51:2B:C3:BC:AC:B1:60:38:91:86:E8:0B:2D:C1:05:E8:27:39:57
Certificate issuer:       /CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
Certificate serial:       23BCA6BDF984854E04093F22F734C4902FFEB09D
Authority key identifier: 55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa
Signing time:             Tue 05 Mar 2024 17:46:32 +0000
ROA not before:           Tue 05 Mar 2024 17:41:32 +0000
ROA not after:            Tue 04 Mar 2025 17:46:32 +0000
asID:                     27845
IP address blocks:        190.97.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bc:a6:bd:f9:84:85:4e:04:09:3f:22:f7:34:c4:90:2f:fe:b0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55DB0D17B157BF6AD08BAC25988489AFD55B85BC
        Validity
            Not Before: Mar  5 17:41:32 2024 GMT
            Not After : Mar  4 17:46:32 2025 GMT
        Subject: CN=FE512BC3BCACB160389186E80B2DC105E8273957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:e4:7e:d3:ef:d6:2c:a8:3f:4c:4f:49:2c:
                    12:56:9d:53:43:92:60:1d:bb:93:d0:cd:70:70:6f:
                    37:46:28:ce:22:46:0f:a1:0c:25:c0:8f:41:08:a3:
                    b2:38:6c:e3:9b:b9:8b:bf:47:cf:54:31:cb:31:16:
                    45:0f:2f:b0:4d:63:87:64:75:b4:b5:ab:99:f8:8e:
                    08:ff:e7:97:13:56:84:e5:dd:e7:cc:5c:c2:32:69:
                    61:b4:16:8f:9e:e8:ca:a4:34:08:e9:ba:16:7e:46:
                    68:0a:48:b8:f9:4e:2b:5f:f1:2c:a0:e2:48:0b:0e:
                    97:b9:2b:4c:9b:13:b4:89:b9:a6:f6:e8:1b:e1:b2:
                    b4:97:53:c4:18:04:00:9a:f5:c0:ec:95:1b:c8:50:
                    0a:f3:af:64:0b:7f:9e:56:fd:ea:20:6a:ef:c8:5e:
                    85:12:97:9d:15:07:8a:43:99:32:51:03:0f:7e:b9:
                    dd:31:34:2b:22:08:3f:66:17:a1:ae:6b:14:f0:f3:
                    3f:87:b1:e4:a6:fb:d7:f0:82:e7:ba:dd:da:ad:0c:
                    4b:0a:dd:a2:91:a2:aa:e9:3c:bb:31:1e:74:0e:43:
                    1d:8b:7d:2f:9a:3e:e2:8f:cd:c8:4e:7b:7b:a9:57:
                    d8:5e:97:b3:22:73:b6:8e:de:a4:ce:9e:e6:d8:6d:
                    9d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:51:2B:C3:BC:AC:B1:60:38:91:86:E8:0B:2D:C1:05:E8:27:39:57
            X509v3 Authority Key Identifier:
                keyid:55:DB:0D:17:B1:57:BF:6A:D0:8B:AC:25:98:84:89:AF:D5:5B:85:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/55DB0D17B157BF6AD08BAC25988489AFD55B85BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3E9CB817C9E7C54352D64D5548E6B5A119192DF7EC2D8D81E379C4924B78A1FC/0/3139302e39372e38382e302f32332d3234203d3e203237383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:dc:76:8a:c0:49:1e:3d:f5:c2:14:1a:dc:a2:51:d7:07:5c:
         c4:e0:44:7d:e3:cb:ac:cb:fa:8b:72:ee:55:30:a7:5f:fb:e7:
         25:60:6d:f2:53:da:d2:83:d0:f2:c8:5b:cc:6f:aa:41:67:68:
         b3:99:9d:33:74:f1:6b:86:86:c7:b8:aa:a6:70:20:f1:ab:99:
         88:d0:51:17:5f:c9:6a:f4:c8:47:b0:bb:af:e7:9f:c6:61:d9:
         b5:2a:66:3e:fc:67:20:0b:69:58:8c:d9:27:47:ca:48:62:38:
         43:2a:90:a1:5e:70:e4:87:30:da:03:74:e5:67:f0:20:1a:13:
         dd:50:f3:50:b2:a9:2d:ee:3a:34:00:68:0e:ed:09:54:d9:6c:
         9b:f0:fc:f2:9e:b7:6b:2b:e9:86:06:7d:62:ed:20:aa:58:4a:
         65:5f:cd:bb:2a:8d:33:46:98:fb:a7:c0:21:e7:97:e2:1a:2d:
         d2:50:80:9e:14:7e:8e:34:6f:2f:f9:8c:db:73:90:b4:ff:75:
         a3:c0:09:b8:38:df:51:48:8c:5b:5e:b8:f3:06:49:2d:f0:23:
         84:b8:fa:b0:4d:bc:70:84:d9:26:9f:91:ae:87:11:b9:ae:9b:
         2f:e2:c8:d5:78:2c:aa:0b:48:06:55:6e:20:e7:83:83:56:da:
         0c:2d:22:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----