Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa
File:                     3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa (raw, json)
Hash identifier:          JxauduLmJ2iz5Izv/QICVPbwXv9Badstwy7ne21V/dI=
Subject key identifier:   43:3F:4D:0B:D9:EB:E2:E8:70:46:BF:2A:F9:26:0B:93:96:11:AF:B1
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       3940FFAF503533F828DD262FD73D7949489FE3B9
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa
Signing time:             Tue 05 Mar 2024 18:01:38 +0000
ROA not before:           Tue 05 Mar 2024 17:56:38 +0000
ROA not after:            Tue 04 Mar 2025 18:01:38 +0000
asID:                     52278
IP address blocks:        190.105.248.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:40:ff:af:50:35:33:f8:28:dd:26:2f:d7:3d:79:49:48:9f:e3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Mar  5 17:56:38 2024 GMT
            Not After : Mar  4 18:01:38 2025 GMT
        Subject: CN=433F4D0BD9EBE2E87046BF2AF9260B939611AFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:9e:5a:7b:8d:80:c4:17:8c:8d:c4:8a:ba:0c:
                    f1:71:d6:29:6b:71:e8:2b:cd:d9:eb:13:75:37:3a:
                    1a:f8:57:14:b1:40:93:df:66:d7:35:b2:34:18:c5:
                    8a:82:19:fb:fa:1f:3e:be:0a:82:7d:62:0e:69:79:
                    86:cd:01:3e:be:39:e7:9c:ca:ae:4f:04:5c:21:c9:
                    9d:7d:f0:aa:71:a7:23:ed:3a:8a:64:d7:4e:e4:2c:
                    85:af:2e:3f:a3:28:2d:25:72:0e:11:93:77:41:ca:
                    01:a4:d0:54:13:92:df:26:33:4f:67:f9:0b:22:57:
                    c9:b7:1d:ce:28:a8:45:89:96:cf:74:92:d8:55:a6:
                    8e:4a:04:5a:d4:95:a2:2e:2d:ed:d5:56:3d:15:a5:
                    1c:67:41:d2:ea:64:54:23:1b:23:81:28:95:84:28:
                    fe:9d:f5:ae:fd:72:25:eb:2d:16:12:ab:7b:3f:db:
                    13:78:83:ca:17:68:c1:76:17:7c:85:fd:57:13:52:
                    a1:e2:b6:3d:f9:42:7c:a5:8e:d6:25:eb:7c:db:15:
                    fe:e2:4b:36:95:dc:41:c1:2f:e6:2b:6f:48:d9:f3:
                    f9:9b:c5:b7:18:89:52:fe:5a:83:0c:48:57:55:5b:
                    b4:9c:68:bf:d4:7f:9a:1f:bf:27:48:ae:3c:10:66:
                    a3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3F:4D:0B:D9:EB:E2:E8:70:46:BF:2A:F9:26:0B:93:96:11:AF:B1
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3234382e302f32332d3233203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:26:0c:6f:74:83:3e:d9:1f:cb:27:9c:54:48:de:60:4e:17:
         ec:c2:01:9c:a2:f4:a5:ba:d7:c5:62:6f:54:58:dd:6b:0d:e9:
         45:7d:a1:5e:24:f0:d9:ea:b9:cb:9b:14:df:f0:89:03:50:f3:
         9d:d0:88:ec:4a:33:73:e4:e5:56:dd:01:a0:40:29:f6:d9:df:
         33:d8:6e:c6:1d:20:13:7b:6a:20:dd:90:2d:68:91:70:ca:af:
         2b:43:fd:42:9d:3c:f2:e5:6a:6c:15:0f:f0:4f:97:45:59:fe:
         93:4a:a0:2c:c3:5b:a1:86:d5:c3:3b:33:62:ee:95:bd:50:51:
         92:7b:ae:ab:5a:f3:c0:02:47:d1:bb:06:10:82:5e:7e:ea:5c:
         b2:77:19:f6:fc:e5:15:8d:99:09:37:3e:82:7d:1f:43:c7:cd:
         5f:bc:6b:41:bd:93:aa:bb:a9:07:dc:5e:38:09:a6:75:bb:c4:
         c2:56:6d:8e:d0:ae:6a:a7:28:0f:7f:39:47:51:4a:61:c3:88:
         a3:9f:39:33:1d:8e:00:d5:5e:fa:bd:e3:e0:8c:ac:99:77:ab:
         8d:ac:1d:04:38:8a:1e:f5:6f:bc:cc:3e:99:c9:61:dd:1c:28:
         22:aa:3c:58:a3:01:b2:cb:b0:f3:64:b3:56:1d:80:20:ff:0e:
         c8:d8:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----