Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa
File:                     3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa (raw, json)
Hash identifier:          vpS86/m6XEQ4GAC7zUeX71m1rmKi6XgkV3u0HQsWpsc=
Subject key identifier:   6C:1E:98:F3:3A:85:3E:12:D5:E6:9B:38:AE:71:11:4C:09:87:46:56
Certificate issuer:       /CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
Certificate serial:       41BF9F5276468C1834CCF6CC6E0C3527E32E2271
Authority key identifier: 36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa
Signing time:             Tue 05 Mar 2024 17:41:36 +0000
ROA not before:           Tue 05 Mar 2024 17:36:36 +0000
ROA not after:            Tue 04 Mar 2025 17:41:36 +0000
asID:                     266702
IP address blocks:        190.196.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:bf:9f:52:76:46:8c:18:34:cc:f6:cc:6e:0c:35:27:e3:2e:22:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365798164A7A7DA30D5CCF91DBE7A7F40472134B
        Validity
            Not Before: Mar  5 17:36:36 2024 GMT
            Not After : Mar  4 17:41:36 2025 GMT
        Subject: CN=6C1E98F33A853E12D5E69B38AE71114C09874656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:b5:8c:15:7d:3c:5a:a8:86:93:55:6e:4d:
                    17:b1:a8:fa:07:c8:d6:a1:4d:47:f9:f8:67:59:12:
                    82:fd:84:77:8a:4f:66:00:47:7d:3a:d6:e0:fc:94:
                    2e:d4:a2:ef:55:7a:43:b3:0e:be:fb:91:0e:25:97:
                    d1:63:f6:6e:1c:19:25:e5:94:d7:57:d4:6c:d6:84:
                    f7:79:09:5e:26:f0:a1:97:66:fa:96:e7:fd:73:36:
                    96:e9:bb:2e:e4:3a:bc:e4:17:ef:8f:ce:f5:74:53:
                    d7:f0:64:70:c5:f0:c9:8b:ad:32:a5:fa:1a:f1:e3:
                    9a:52:fe:8c:f8:5d:30:f1:4a:f6:da:93:82:72:55:
                    1f:d1:4e:5f:93:4c:16:2f:76:06:70:fa:02:4f:c4:
                    e3:1f:b3:cd:a1:72:0f:d0:37:2e:af:88:a2:36:82:
                    d9:3a:5d:03:74:21:5c:18:b4:a2:70:9b:a2:f5:86:
                    97:7c:e3:fb:67:e1:3f:c0:71:b5:43:95:0f:6f:29:
                    69:39:b1:d7:08:dd:87:db:00:6b:16:c0:14:07:c0:
                    ed:c5:e1:d2:66:78:e3:80:8c:6f:d1:7e:11:01:8d:
                    43:8e:af:2a:c8:81:4c:98:0e:f2:0e:a0:5d:32:74:
                    3a:0e:72:ab:4f:5d:c6:17:4b:98:1f:84:5c:43:31:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1E:98:F3:3A:85:3E:12:D5:E6:9B:38:AE:71:11:4C:09:87:46:56
            X509v3 Authority Key Identifier:
                keyid:36:57:98:16:4A:7A:7D:A3:0D:5C:CF:91:DB:E7:A7:F4:04:72:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/365798164A7A7DA30D5CCF91DBE7A7F40472134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D2D4302A5843A315BC4C388FCB456B1638F653FCAEFC5BF368C41CAFF58FCFD/0/3139302e3139362e3234382e302f32332d3234203d3e20323636373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:13:49:7c:b9:a3:28:40:d9:53:83:51:83:5e:0c:42:99:53:
         9d:08:4b:46:a5:e5:34:0e:15:f4:f8:4c:29:74:c8:e9:91:b7:
         af:1d:45:99:db:5f:4f:92:bb:55:48:48:16:aa:1c:ba:bc:3d:
         25:e0:db:eb:db:2a:bd:a1:6f:cd:ac:c3:c0:ab:b3:03:59:a0:
         02:89:75:22:dc:f5:6c:63:90:02:6b:3e:a7:df:d1:37:15:08:
         0b:89:9f:72:d3:60:e0:92:f4:4a:a1:c0:10:f2:91:14:e0:0a:
         fc:e6:e6:cb:24:50:61:b1:c6:0c:57:f0:82:4d:4a:f8:3a:f2:
         49:39:6b:45:cd:af:05:52:62:69:46:de:b4:f5:07:d1:e5:be:
         89:f1:2b:1e:19:ec:6d:5f:5e:64:35:a3:a4:68:4e:1c:61:af:
         97:1f:11:a5:62:ed:7c:68:21:e8:be:2c:38:17:6a:c4:ff:87:
         36:42:be:91:b4:7b:cd:0a:27:d6:39:71:4b:a9:2b:21:6f:68:
         a1:6a:ff:08:30:04:ec:da:64:b4:3a:69:7f:47:10:45:f4:f1:
         3f:90:63:42:4e:52:09:cf:dd:ca:29:48:59:e0:71:17:54:a8:
         0d:19:38:31:68:9e:8e:5e:bb:bf:e1:4a:1d:f4:2d:be:b0:37:
         81:68:c4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----