Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa
File:                     3139302e342e31362e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          eQoELufVral47q/DA0o7ZLntibCFig2hlJozLTNYYCA=
Subject key identifier:   1F:A3:92:1E:A9:83:55:5D:96:F7:54:2A:F6:47:09:2C:BD:82:7A:F6
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       1A935E2025C056E11BDBF89BEED960F787660104
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:41:12 +0000
ROA not before:           Tue 05 Mar 2024 17:36:12 +0000
ROA not after:            Tue 04 Mar 2025 17:41:12 +0000
asID:                     23383
IP address blocks:        190.4.16.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:93:5e:20:25:c0:56:e1:1b:db:f8:9b:ee:d9:60:f7:87:66:01:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar  5 17:36:12 2024 GMT
            Not After : Mar  4 17:41:12 2025 GMT
        Subject: CN=1FA3921EA983555D96F7542AF647092CBD827AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ff:5a:ab:4c:41:af:63:fa:9f:52:81:f4:ec:
                    41:bf:05:05:12:f7:81:79:23:d6:4b:57:dc:93:21:
                    c4:ee:cf:e3:25:0e:98:b4:69:bc:b4:6c:45:88:74:
                    fa:d4:a1:4d:74:06:3c:e1:20:de:e6:4c:aa:1c:7b:
                    f6:71:dc:c5:0f:3c:b4:c6:17:b1:06:dc:63:8a:50:
                    12:69:e4:e5:95:e7:bb:7f:f2:8e:9a:82:b2:4f:37:
                    4a:44:05:78:54:9e:d0:a0:f8:e8:f1:ba:e5:b9:58:
                    a5:0c:fc:49:16:84:67:3d:bf:bf:dc:3d:f1:45:fd:
                    11:9b:af:dc:f8:7b:8d:b4:03:6f:9a:b3:cf:a4:55:
                    4e:0e:0b:8c:8a:5f:c1:61:4c:13:54:15:0b:53:63:
                    46:97:b2:3d:1a:15:8c:ce:63:84:81:55:6c:dd:32:
                    f8:c5:45:ca:17:78:d8:e0:87:57:3c:b5:37:c9:1e:
                    de:b5:17:65:41:97:74:54:f6:91:41:9f:51:10:ce:
                    5d:fc:56:f4:36:c6:f1:9f:36:fb:fa:65:10:20:f1:
                    a3:0d:a3:6b:fc:c6:92:aa:f8:61:a5:5c:6d:8d:c3:
                    3f:ae:4c:5d:33:73:a6:21:ec:74:0f:a6:1e:91:10:
                    77:f4:12:ff:58:88:8b:8d:4d:7c:9e:84:73:f7:55:
                    c7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A3:92:1E:A9:83:55:5D:96:F7:54:2A:F6:47:09:2C:BD:82:7A:F6
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3139302e342e31362e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:be:d9:34:fb:a9:0b:c3:c5:13:e4:33:8f:bd:dd:97:3d:e9:
         08:88:76:aa:d4:c3:e8:8e:5b:5c:00:af:ca:28:e9:18:2f:37:
         85:06:da:44:13:69:dd:61:22:ef:99:c7:d2:a7:1d:ef:41:5e:
         24:19:22:7a:be:c0:56:e2:03:ea:2a:b5:28:df:e6:4b:73:d4:
         b4:d8:c1:68:b5:df:2b:c8:96:e9:52:dd:6b:ed:b2:d2:4a:98:
         0d:48:4f:48:e5:e3:a4:5e:ba:b2:cd:c9:97:0c:79:0e:ec:c9:
         b3:b0:fd:96:27:c6:a8:98:1d:e7:fb:7a:fa:79:1f:73:48:79:
         2c:b8:d0:41:6f:07:b3:c9:79:ba:2f:dd:04:bf:59:c9:83:70:
         7c:32:03:b8:58:fb:c7:b9:41:bb:08:e0:5b:7e:3c:db:2e:0a:
         2d:e0:1a:06:39:96:e3:6e:76:6f:e5:96:af:a1:34:43:70:54:
         40:80:8c:d4:41:48:01:38:a3:a2:96:a0:aa:e9:06:b3:bd:03:
         f7:47:e2:1c:9e:97:74:72:4c:b0:02:b3:5a:39:a1:2e:32:31:
         21:5c:f6:cc:8c:a6:fe:fa:48:47:32:78:a8:b4:9f:29:09:1f:
         59:7d:fe:12:5b:9f:f2:1e:41:70:05:fe:9f:aa:7a:e6:89:ed:
         30:a9:51:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----