Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3234203d3e203236363131.roa
File:                     3139302e3132362e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          nD3DhKVhwiqSYXScP6P1wQLEN49uhtK6wsPiaI1xGtc=
Subject key identifier:   55:8B:DD:2E:FF:88:27:75:27:C8:3B:1D:B7:5C:E8:E7:BF:3F:08:0C
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       6B9193611022C519904014C956D01C0A214EA9E2
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:00:55 +0000
ROA not before:           Tue 05 Mar 2024 17:55:55 +0000
ROA not after:            Tue 04 Mar 2025 18:00:55 +0000
asID:                     26611
IP address blocks:        190.126.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:91:93:61:10:22:c5:19:90:40:14:c9:56:d0:1c:0a:21:4e:a9:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:55:55 2024 GMT
            Not After : Mar  4 18:00:55 2025 GMT
        Subject: CN=558BDD2EFF88277527C83B1DB75CE8E7BF3F080C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b2:bc:a6:86:b5:35:94:cd:41:7a:79:56:7f:
                    04:46:d8:17:32:2e:44:d3:53:98:42:23:88:14:b0:
                    57:bd:2b:51:bb:cd:cf:76:07:6e:08:5b:68:93:75:
                    51:24:f1:ae:d1:9c:75:67:6a:78:c4:b7:a3:63:25:
                    a8:41:d5:4c:1a:55:26:d8:26:47:79:cc:7e:ee:18:
                    23:a9:52:e1:bb:3a:e9:e4:bb:b8:87:9d:e5:82:1c:
                    1a:e3:8d:c0:f9:dd:a7:61:51:e4:84:5d:4f:bd:bd:
                    23:dc:8c:2e:a7:db:9a:86:c3:b5:01:3e:43:b8:e5:
                    65:01:9d:29:b5:50:53:bc:03:aa:4b:2c:dc:81:46:
                    8b:70:37:65:c5:41:92:ee:ac:a9:d4:81:d6:f9:14:
                    89:f5:19:58:fe:a9:6e:0e:b3:81:e2:ef:6f:f1:eb:
                    69:c1:95:01:d8:e1:f7:ce:70:3c:8a:10:30:91:30:
                    36:5f:e2:da:1b:2b:e8:62:d1:ba:e7:ae:2c:76:2b:
                    2b:c5:b5:46:01:fc:62:23:d6:c2:bf:04:6c:6a:b2:
                    01:68:8b:44:d7:fb:8e:cd:6f:3d:ae:4c:73:45:e2:
                    61:6b:dd:f4:b8:9c:51:e5:fc:20:df:d1:2a:27:2f:
                    b0:a2:f9:67:0d:43:65:e2:27:00:91:e6:88:2a:2b:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8B:DD:2E:FF:88:27:75:27:C8:3B:1D:B7:5C:E8:E7:BF:3F:08:0C
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132362e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.126.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:2f:54:27:4a:67:bb:84:55:3b:6e:32:8c:96:96:ab:c2:
         c4:cf:47:20:a9:fa:3b:63:25:68:67:55:cb:1d:9d:b9:24:9f:
         32:2b:15:f3:58:bd:4f:51:3e:21:6e:aa:ee:b5:cb:66:d5:c0:
         87:d8:86:f8:24:b1:02:9e:5d:12:dd:05:0b:ad:67:8c:98:8d:
         cb:3c:b7:b7:22:78:ac:28:3a:7a:32:bd:26:52:cb:b3:1a:ed:
         97:f6:bc:f4:0d:65:58:dc:3e:fc:d4:5d:18:4c:37:e8:79:0e:
         e8:d6:19:5b:09:eb:f0:2e:bf:6c:90:31:a4:5f:f0:dc:f2:f9:
         54:5e:5b:e7:cb:a0:14:52:03:fb:6f:75:a4:83:da:f9:07:09:
         74:f7:dd:66:88:ec:1f:e0:be:82:4a:5b:64:d1:b9:72:45:42:
         2e:b9:c9:d4:09:3d:f7:27:53:61:fa:e8:22:5e:89:14:b2:0b:
         98:a3:25:a2:2d:43:20:b5:13:a1:72:28:2f:b1:45:0c:49:80:
         f5:da:e9:89:e4:2e:83:b7:a6:ac:6d:70:ea:d0:af:e0:4f:30:
         c9:03:aa:7e:13:e0:5c:8f:26:3c:3c:1b:1b:4d:f4:e4:2c:98:
         72:9f:df:ac:c6:61:48:57:f9:3d:dc:75:71:f9:0d:d5:d3:e8:
         1a:1c:89:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----