Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/3139302e39392e38382e302f32322d3234203d3e203532323436.roa
File:                     3139302e39392e38382e302f32322d3234203d3e203532323436.roa (raw, json)
Hash identifier:          CzKSoU87QAEOub1lf/A/adzKQOC4AOPO5oDE+u/iRFs=
Subject key identifier:   1B:94:23:7F:57:BC:71:0C:96:1C:EC:99:AD:5B:15:F6:5C:5C:DC:C3
Certificate issuer:       /CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7
Certificate serial:       3B6DE7049212B76A6FB503ABD348AB21F8D5E3C3
Authority key identifier: D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/3139302e39392e38382e302f32322d3234203d3e203532323436.roa
Signing time:             Tue 05 Mar 2024 17:55:50 +0000
ROA not before:           Tue 05 Mar 2024 17:50:50 +0000
ROA not after:            Tue 04 Mar 2025 17:55:50 +0000
asID:                     52246
IP address blocks:        190.99.88.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6d:e7:04:92:12:b7:6a:6f:b5:03:ab:d3:48:ab:21:f8:d5:e3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7
        Validity
            Not Before: Mar  5 17:50:50 2024 GMT
            Not After : Mar  4 17:55:50 2025 GMT
        Subject: CN=1B94237F57BC710C961CEC99AD5B15F65C5CDCC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:64:cc:dc:fa:39:33:4d:c8:de:af:b4:88:
                    b7:8d:0b:96:5e:77:2f:2d:54:bf:59:92:8b:9b:9a:
                    e8:66:31:52:9d:1c:c3:9f:1b:8b:d8:ff:8d:57:fc:
                    05:15:02:9f:96:30:ff:2d:87:83:e9:76:f8:42:90:
                    07:ad:c8:f1:38:36:98:b4:4d:30:86:00:08:eb:38:
                    4c:20:95:fe:71:28:2d:74:7e:79:5b:6f:02:a3:6f:
                    eb:a3:1e:4d:88:19:e5:ff:b9:13:37:5b:c0:55:ee:
                    f5:9e:c5:71:b4:37:37:fa:1a:ff:0d:76:96:21:73:
                    c8:d7:67:25:fb:e9:bb:30:12:6f:7a:16:d3:e5:ce:
                    17:36:68:b0:49:5a:f2:b1:1f:8a:8c:14:c8:d5:f7:
                    fc:97:e4:31:3c:06:c4:85:16:22:d9:bf:56:35:bd:
                    77:09:4e:86:bb:f6:ed:96:1e:ef:90:84:5e:56:0c:
                    65:54:98:39:42:47:bb:11:0e:2f:fd:86:68:d9:4c:
                    dd:38:77:35:6f:39:f2:68:6a:60:5f:12:df:3c:fa:
                    fc:32:eb:17:ea:8d:63:5d:d2:83:f5:04:db:f2:b1:
                    02:d0:8e:68:66:1d:f1:c7:2e:6c:4b:35:b9:5d:21:
                    d2:13:55:7e:69:10:32:62:06:46:0a:bf:dc:d8:78:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:94:23:7F:57:BC:71:0C:96:1C:EC:99:AD:5B:15:F6:5C:5C:DC:C3
            X509v3 Authority Key Identifier:
                keyid:D6:0A:F8:08:8C:FC:FC:3A:52:D3:18:D5:8C:9C:FD:12:1C:E6:F7:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D60AF8088CFCFC3A52D318D58C9CFD121CE6F7C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4FEBC9126C0E0A7E03F7E5536F8E59DB9AC30C0363C5512AD9E7F2D30483A16E/0/3139302e39392e38382e302f32322d3234203d3e203532323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:36:14:65:e0:e9:83:39:bb:43:d7:d0:d4:98:62:4b:9f:
         12:82:04:5a:11:74:5e:5e:91:1c:4b:0d:ad:4c:65:75:c7:14:
         5e:28:57:16:fe:c9:fd:9b:cc:28:e8:a5:71:12:b0:75:63:76:
         7e:a3:7c:3f:71:1d:65:ec:d3:74:9c:2a:5b:4b:26:c2:16:d8:
         33:84:5c:31:af:8f:77:12:6c:12:6d:67:26:6d:9d:f5:5f:9c:
         38:6b:3e:a7:02:53:a3:d6:b8:64:78:2a:32:65:e4:09:5d:3c:
         ed:f0:54:3a:85:e7:62:44:90:25:d6:f7:21:2a:0d:96:f2:84:
         06:76:3d:26:dd:85:6a:86:aa:3e:34:a7:50:91:cb:12:3c:7b:
         ec:bd:49:72:50:8a:2f:14:04:8d:09:c7:34:6c:d5:56:c7:35:
         86:d5:3f:81:6f:28:95:8b:8c:d5:25:e9:42:b2:b3:b1:55:93:
         10:3e:ed:3b:de:74:81:e3:a9:ad:9b:67:cd:81:8f:74:46:92:
         e8:0e:64:a8:7f:3b:e6:fc:d7:b1:13:ac:d9:54:c1:49:b8:b9:
         8a:e4:87:41:b3:b8:d7:c0:2c:9f:44:2d:51:ed:82:55:9f:50:
         c5:10:38:82:9d:02:fe:ac:df:e4:56:7f:f8:30:10:63:57:01:
         5e:dd:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----