Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa
File:                     3139302e3132352e302e302f31362d3137203d3e203236363131.roa (raw, json)
Hash identifier:          ydX472O8xZ3GKmURCa1fN4cZ+vIyvQt98f0zVLx2sAk=
Subject key identifier:   40:1E:59:4A:8E:33:7A:C4:2A:E3:AC:A8:4B:01:A6:C4:BF:5A:C6:47
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7D51107F95D10A6EE64F8A1079F4292EF01B7701
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:00:58 +0000
ROA not before:           Tue 05 Mar 2024 17:55:58 +0000
ROA not after:            Tue 04 Mar 2025 18:00:58 +0000
asID:                     26611
IP address blocks:        190.125.0.0/16 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:51:10:7f:95:d1:0a:6e:e6:4f:8a:10:79:f4:29:2e:f0:1b:77:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:55:58 2024 GMT
            Not After : Mar  4 18:00:58 2025 GMT
        Subject: CN=401E594A8E337AC42AE3ACA84B01A6C4BF5AC647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0f:b8:8a:0c:d0:a9:a6:59:41:66:ad:74:06:
                    b7:da:bd:48:34:46:40:01:9b:bd:a6:25:4b:5a:b2:
                    da:8c:12:98:30:56:f2:58:a3:cd:45:73:13:47:0f:
                    a8:15:c9:ac:ba:ca:9f:37:a3:13:4f:5e:23:8e:02:
                    56:d7:68:73:84:0d:ec:56:16:ec:91:d8:1c:ab:ad:
                    66:97:fc:d5:d7:7d:27:2e:84:6e:a8:36:81:21:64:
                    3e:c8:8c:e3:d7:9f:d8:56:73:2c:bd:d0:41:bd:23:
                    1c:93:af:38:ea:07:ab:e5:6e:6b:fc:f7:f4:df:38:
                    a8:6a:15:e7:03:2e:b7:46:27:c0:84:29:42:c9:fb:
                    63:32:67:cc:b9:92:ba:71:75:0a:60:a6:41:30:bb:
                    c6:f4:ca:aa:b1:06:e2:c4:b4:33:8f:b2:2e:2c:39:
                    f8:62:ca:24:07:b4:e9:26:0e:e3:58:0d:ad:86:ff:
                    de:56:af:01:65:62:9e:53:54:5d:c6:48:7f:77:7d:
                    b9:be:d0:36:2f:7e:2b:21:36:4b:90:81:ae:6c:3f:
                    2e:af:5c:ef:a2:35:01:53:ad:a5:03:1d:52:7a:19:
                    52:77:dc:84:bc:f6:f1:78:29:bd:27:98:db:ec:d1:
                    2b:97:18:31:41:e9:85:00:fe:5f:de:cc:73:6f:59:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:59:4A:8E:33:7A:C4:2A:E3:AC:A8:4B:01:A6:C4:BF:5A:C6:47
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132352e302e302f31362d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.125.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7f:5c:47:7a:2a:c6:b5:20:4a:6e:aa:d4:81:99:2b:b8:a2:6f:
         82:8f:3b:72:98:d7:f2:cc:59:ea:e3:0f:e3:6d:7b:cd:f5:92:
         5e:89:d6:23:6e:c1:ef:4d:d8:65:ef:0f:a0:ae:7e:eb:5a:80:
         a2:3d:06:0a:91:96:6e:3f:4a:a7:b9:e7:89:2f:ce:a4:8a:be:
         64:04:47:40:5d:08:85:b8:50:ef:5d:37:80:dc:b5:eb:84:d3:
         a4:cc:9f:2d:08:06:1d:1f:6d:6d:87:cf:d1:6e:95:47:6d:0b:
         7b:0f:34:9c:3a:3f:20:fd:09:81:5d:5e:b7:c5:df:8f:05:37:
         77:be:32:85:7a:57:14:0e:c3:c9:76:82:65:1a:2c:97:98:b9:
         0f:11:55:e8:cd:97:65:7f:25:13:16:aa:9c:da:73:68:ff:28:
         8e:cc:7a:fd:62:5e:41:ab:0b:2f:34:c0:4b:72:45:dd:1a:ad:
         4f:78:75:72:8f:cd:3b:fe:aa:4a:db:98:e4:7c:a5:92:b8:d3:
         ef:45:43:44:a0:e2:32:76:18:53:09:c7:13:5a:40:d2:af:cb:
         36:47:ea:91:36:86:66:f6:e2:26:9a:7a:a4:9b:ff:99:4d:7c:
         bd:c1:b4:63:68:56:b7:c5:fe:13:11:af:ab:75:0a:4e:74:78:
         59:6f:ca:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----