Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
File:                     3139302e3132362e302e302f31352d3234203d3e203236363131.roa (raw, json)
Hash identifier:          +BuI4XTBT2aXKCUtx4LI7pjMOKUkaZkt3gjdSLeC+J0=
Subject key identifier:   26:19:DA:E6:EF:EE:2A:5C:C4:B9:AB:03:92:AC:A8:C0:43:49:68:B3
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       2D7FA853BAA11316E3841E9CC69FBBCFA1A45D49
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:11 +0000
ROA not before:           Tue 05 Mar 2024 17:56:11 +0000
ROA not after:            Tue 04 Mar 2025 18:01:11 +0000
asID:                     26611
IP address blocks:        190.126.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7f:a8:53:ba:a1:13:16:e3:84:1e:9c:c6:9f:bb:cf:a1:a4:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:11 2024 GMT
            Not After : Mar  4 18:01:11 2025 GMT
        Subject: CN=2619DAE6EFEE2A5CC4B9AB0392ACA8C0434968B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:22:ae:45:b0:f1:99:c1:e4:3a:8a:5c:1d:
                    e8:b1:c1:b0:ce:e6:5c:c9:24:fd:7e:9e:e4:67:dc:
                    58:b1:ba:80:21:49:bd:8c:ef:b0:6a:3f:7e:db:42:
                    c0:35:af:f6:ad:ef:07:a3:36:7c:84:87:3e:88:92:
                    32:20:33:93:28:29:6a:6a:68:1f:10:49:2f:ce:f4:
                    a9:69:6c:7d:70:bc:9d:45:64:1d:02:37:b9:a6:8f:
                    08:92:c2:b1:ab:7d:2f:23:ce:53:93:20:12:97:d2:
                    3e:a4:63:40:a2:3c:0e:c9:93:1d:dc:45:24:ee:76:
                    af:06:db:1b:08:00:70:05:74:e9:7f:da:cc:50:6f:
                    03:31:1e:ff:08:ee:f6:f8:d7:6e:0f:62:64:9f:cf:
                    46:bf:af:e6:e4:00:ed:d7:ef:cf:a3:e7:2a:4d:79:
                    37:f7:25:23:68:c9:f1:8c:fb:e5:40:2b:d6:79:b1:
                    07:49:2d:c3:89:d6:59:6a:a4:61:a5:bf:f1:50:f0:
                    8f:73:87:5a:ec:e9:22:aa:f8:e3:52:b3:5d:f6:14:
                    63:f3:ab:39:64:f0:1d:f6:c9:34:e3:3d:67:a0:fb:
                    3a:9b:88:3a:55:3f:ab:85:8d:dc:54:88:73:f5:aa:
                    b9:5e:d8:d5:44:b8:8c:27:75:11:3f:0a:29:bb:f7:
                    5f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:19:DA:E6:EF:EE:2A:5C:C4:B9:AB:03:92:AC:A8:C0:43:49:68:B3
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31352d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:f3:c3:88:a1:2d:8c:12:d9:5a:33:66:f1:ee:e5:e9:2f:
         65:f2:e1:43:79:a0:bd:24:02:1e:20:dd:cd:bc:f0:bb:79:02:
         fb:cd:06:bd:a2:68:08:5f:73:18:0a:de:bd:32:28:f6:85:eb:
         7a:98:30:88:65:36:c6:09:61:0d:cd:8e:0d:55:d8:af:3e:8e:
         c8:a4:1b:a2:03:94:00:29:af:2b:79:fb:0b:c0:63:7b:28:b1:
         e2:f5:9f:2a:e6:16:42:0b:f3:98:91:df:75:a1:01:d8:c5:75:
         17:2e:b6:1b:c2:4d:0d:94:71:95:9b:42:5a:f0:7d:34:c3:17:
         74:31:07:d7:1c:1c:e8:b7:01:a1:de:09:5b:85:fc:f7:46:fc:
         20:90:b7:7b:46:57:0e:64:31:c1:4f:72:85:9e:8f:c2:e4:d1:
         5d:b5:91:af:88:e5:88:a8:99:e1:b1:98:eb:8e:61:31:c8:94:
         32:55:71:ce:12:cc:7e:da:66:19:e9:74:60:f8:0e:30:ac:89:
         02:f6:a2:e8:09:66:61:3b:23:49:5c:e3:09:81:c7:dc:bc:fb:
         85:e0:df:05:f9:d2:bd:2f:5a:16:db:2a:e2:5c:ad:21:3a:1e:
         f4:cd:de:82:3a:a1:bb:c9:85:db:13:f8:40:fe:be:d7:6a:63:
         2d:59:af:27
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIULX+oU7qhExbjhB6cxp+7z6GkXUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MTFaFw0yNTAzMDQxODAxMTFaMDMxMTAvBgNV
BAMTKDI2MTlEQUU2RUZFRTJBNUNDNEI5QUIwMzkyQUNBOEMwNDM0OTY4QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpxiKuRbDxmcHkOopcHeixwbDO
5lzJJP1+nuRn3FixuoAhSb2M77BqP37bQsA1r/at7wejNnyEhz6IkjIgM5MoKWpq
aB8QSS/O9KlpbH1wvJ1FZB0CN7mmjwiSwrGrfS8jzlOTIBKX0j6kY0CiPA7Jkx3c
RSTudq8G2xsIAHAFdOl/2sxQbwMxHv8I7vb4124PYmSfz0a/r+bkAO3X78+j5ypN
eTf3JSNoyfGM++VAK9Z5sQdJLcOJ1llqpGGlv/FQ8I9zh1rs6SKq+ONSs132FGPz
qzlk8B32yTTjPWeg+zqbiDpVP6uFjdxUiHP1qrle2NVEuIwndRE/Cim791+pAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUJhna5u/uKlzEuasDkqyowENJaLMwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM2MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG+fjANBgkq
hkiG9w0BAQsFAAOCAQEADpPzw4ihLYwS2VozZvHu5ekvZfLhQ3mgvSQCHiDdzbzw
u3kC+80GvaJoCF9zGArevTIo9oXrepgwiGU2xglhDc2ODVXYrz6OyKQbogOUACmv
K3n7C8Bjeyix4vWfKuYWQgvzmJHfdaEB2MV1Fy62G8JNDZRxlZtCWvB9NMMXdDEH
1xwc6LcBod4JW4X890b8IJC3e0ZXDmQxwU9yhZ6PwuTRXbWRr4jliKiZ4bGY645h
MciUMlVxzhLMftpmGel0YPgOMKyJAvai6AlmYTsjSVzjCYHH3Lz7heDfBfnSvS9a
Ftsq4lytIToe9M3egjqhu8mF2xP4QP6+12pjLVmvJw==
-----END CERTIFICATE-----