Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203130363230.roa (raw, json)
Hash identifier:          uGrIGMwwQpjZ0xOexa78GKC4Qi0vKqu1kNmaZBaJKwY=
Subject key identifier:   7F:F1:24:6F:56:EF:1F:89:C5:9C:65:F5:E2:94:88:3B:71:70:F0:72
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       42EE4BC75A5BC9BDC24006280A716560864FDA6E
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa
Signing time:             Tue 05 Mar 2024 18:01:09 +0000
ROA not before:           Tue 05 Mar 2024 17:56:09 +0000
ROA not after:            Tue 04 Mar 2025 18:01:09 +0000
asID:                     10620
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:ee:4b:c7:5a:5b:c9:bd:c2:40:06:28:0a:71:65:60:86:4f:da:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:09 2024 GMT
            Not After : Mar  4 18:01:09 2025 GMT
        Subject: CN=7FF1246F56EF1F89C59C65F5E294883B7170F072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ee:25:51:ce:93:18:30:f0:bf:f5:99:0c:02:
                    1e:66:0b:bf:c6:ca:a7:37:58:ea:11:ee:27:05:1a:
                    ad:77:30:bc:ed:3d:fc:fb:86:5d:b1:58:8d:17:ba:
                    56:14:a7:fa:24:d3:75:ba:8e:ec:cc:d3:89:39:3d:
                    2a:65:39:a9:84:bb:0e:aa:d7:2c:1e:ab:88:f4:f1:
                    76:61:f9:9a:ab:43:28:d2:b7:3b:00:1f:fa:65:b2:
                    4c:ec:e7:29:08:e3:a1:c9:aa:6b:84:a1:92:66:9d:
                    8c:aa:33:b3:78:7e:1a:ca:1f:bc:11:79:05:71:48:
                    36:4d:3a:43:1b:7a:f3:ad:a9:1f:57:6e:c1:f1:78:
                    69:da:58:5d:70:96:53:d8:4b:3b:52:f6:32:9a:0c:
                    fc:c1:37:b1:67:4a:d9:30:6f:a2:de:64:95:6e:f2:
                    49:98:f4:3a:90:7e:6c:d0:b3:c4:55:b6:58:6d:8d:
                    33:47:5b:e5:7d:32:fb:8d:34:e3:53:bb:d2:9e:8d:
                    23:ba:10:be:07:64:1a:cc:14:02:46:02:2d:7b:60:
                    40:12:3e:5b:26:66:7d:8d:95:79:79:b6:2b:6c:21:
                    7e:f2:33:99:76:ec:f4:7d:dc:43:b4:4e:ef:e7:65:
                    00:e7:e7:10:94:76:17:0a:0c:98:f3:2c:6f:88:6a:
                    4b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:24:6F:56:EF:1F:89:C5:9C:65:F5:E2:94:88:3B:71:70:F0:72
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203130363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:93:f3:f4:3c:45:5a:27:6a:2c:d9:42:49:98:64:5e:e2:e6:
         50:b8:a3:12:f6:9b:e5:21:39:63:01:a5:5a:9e:ed:69:03:dd:
         65:43:4c:c5:35:83:cb:eb:0a:ba:08:23:d2:c8:f2:6b:e2:a6:
         95:c0:c5:da:99:69:3f:5e:22:b8:b2:a6:75:f8:84:46:65:18:
         49:ea:ef:d5:81:4f:4d:40:d0:32:ef:1f:a1:47:65:41:9e:a8:
         cf:0c:0c:f3:bb:f6:87:0d:b8:94:ae:87:25:e6:48:60:b7:c1:
         c8:52:87:23:2a:a2:ce:75:b1:d8:b1:23:7b:05:be:49:bc:dc:
         41:b7:c5:2d:80:c7:e3:5f:e5:6d:8b:e3:dd:03:5c:31:28:b6:
         5f:ea:9a:4c:c3:74:86:57:66:06:80:3d:d0:63:1b:e4:b8:c9:
         08:21:0d:ab:a1:7e:7a:d8:b3:6a:fd:37:f2:ea:6a:c2:a2:c0:
         37:f2:eb:16:27:19:b9:c6:64:31:90:38:73:8e:24:61:33:d4:
         49:6d:83:35:c1:ca:50:b1:60:d5:a7:5c:b7:cf:da:db:f6:c6:
         b2:29:b2:50:51:c6:f1:41:75:89:45:fa:9e:a4:98:8c:29:cc:
         d2:f8:7c:be:ba:cc:7a:57:7b:b6:d3:ea:8f:ff:78:38:16:5c:
         33:01:29:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----