Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3232203d3e203532333335.roa
File:                     3139302e382e3137362e302f32322d3232203d3e203532333335.roa (raw, json)
Hash identifier:          fITL9Hq9zNUWNCGMekyTW1xTTEW3FwckxIcQH/kfi4Y=
Subject key identifier:   E1:B7:69:92:94:E4:4F:C1:D6:17:46:73:81:1B:42:04:CF:AE:5C:FF
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       572C6C1BE386E56A7D45EDBFDA3FD2AEFDFEEB1C
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3232203d3e203532333335.roa
Signing time:             Tue 05 Mar 2024 17:41:19 +0000
ROA not before:           Tue 05 Mar 2024 17:36:19 +0000
ROA not after:            Tue 04 Mar 2025 17:41:19 +0000
asID:                     52335
IP address blocks:        190.8.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2c:6c:1b:e3:86:e5:6a:7d:45:ed:bf:da:3f:d2:ae:fd:fe:eb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Mar  5 17:36:19 2024 GMT
            Not After : Mar  4 17:41:19 2025 GMT
        Subject: CN=E1B7699294E44FC1D6174673811B4204CFAE5CFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:42:5f:6d:01:b0:3e:bd:02:a3:a7:6b:57:
                    5c:b4:aa:65:c5:89:b6:2d:cc:89:19:c1:56:e5:8e:
                    0a:83:17:8e:5a:35:7d:51:25:c3:36:2e:09:a7:55:
                    01:50:d0:fa:bc:d4:b6:5a:03:f3:d2:0b:bf:b0:aa:
                    e2:85:f3:05:01:0e:b1:8e:80:18:e1:2b:89:1e:e6:
                    cb:0c:41:c8:f3:73:fe:f1:8a:54:1d:15:45:f4:fe:
                    e2:4d:5b:96:53:ed:66:5a:9f:c2:1d:f8:dd:fe:6a:
                    ac:a7:55:e5:4c:ca:51:b7:c4:5c:4a:6c:7b:05:a3:
                    14:cf:c0:f6:69:b0:2c:28:b3:d1:5a:ef:05:e2:70:
                    b2:02:86:11:52:7f:8d:e0:5c:de:ae:80:a1:54:9d:
                    31:f6:49:2b:16:df:5f:05:42:fc:72:ad:31:df:52:
                    37:a3:9e:50:c7:0b:66:69:43:2c:41:36:0f:91:4e:
                    ae:b1:2e:0d:ca:9e:53:7c:be:ad:04:15:b5:8c:13:
                    85:b1:53:d5:32:7b:c5:df:12:1a:60:ff:a6:68:cb:
                    47:37:88:43:5b:da:2e:2f:b7:fa:80:32:f6:df:7b:
                    6d:9d:db:bf:55:97:3a:d7:50:90:7e:77:91:fb:c1:
                    b2:b5:08:99:42:df:d3:37:ec:4b:56:8b:20:6f:28:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:69:92:94:E4:4F:C1:D6:17:46:73:81:1B:42:04:CF:AE:5C:FF
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3139302e382e3137362e302f32322d3232203d3e203532333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:2c:80:d2:10:d5:b2:c3:c7:fb:f5:10:78:bd:d5:04:59:08:
         36:c9:30:0a:c3:07:45:4e:11:b9:30:36:bf:7e:b8:94:b3:bd:
         94:2f:4d:1d:5b:80:31:65:c7:48:19:c5:6b:71:ea:55:1f:ea:
         ee:64:59:62:db:b6:59:29:41:78:95:aa:82:2d:69:41:4f:0e:
         75:79:61:6e:6f:03:5b:7e:d3:09:59:f8:e5:df:5f:d9:25:61:
         7c:45:5c:55:68:cf:15:51:38:99:03:f6:64:5a:55:53:8a:1a:
         4d:50:49:a0:37:ee:47:5d:88:36:b8:4d:42:1c:2b:3f:a0:7e:
         4d:b3:c0:20:dc:0b:a2:30:9a:df:1e:b0:41:93:f6:a8:1b:37:
         14:c2:da:65:f3:13:92:15:ad:5d:8b:d5:6d:41:a3:b5:d5:4c:
         cf:86:c2:f7:01:1f:6d:22:25:43:8e:da:e0:64:d2:52:38:a2:
         34:fe:9d:cb:5f:42:ca:3a:e1:3c:21:ba:ad:6c:5f:23:61:a1:
         4d:89:15:ef:ee:59:a4:6d:f0:b7:64:de:04:34:48:09:01:90:
         48:a7:1d:3c:d1:bc:ad:b2:78:1f:d9:a3:2f:a0:1c:26:b8:73:
         0f:b8:ec:35:7e:34:a1:d7:a2:7f:2d:e9:50:96:26:51:dc:e1:
         b9:06:e5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----