Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235342e302f32332d3234203d3e203236363131.roa
File:                     3139302e3132372e3235342e302f32332d3234203d3e203236363131.roa (raw, json)
Hash identifier:          M/SKDGmmgWD/elv70W1HTJ8Q29OuF97XMAx8txJH8qc=
Subject key identifier:   CB:CC:DF:12:87:EE:E0:D9:4A:DE:FC:AB:01:37:33:21:C7:2B:B3:86
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       3D75D420EB5C669CD290A5C50C6405D041F3BA46
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235342e302f32332d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:15 +0000
ROA not before:           Tue 05 Mar 2024 17:56:15 +0000
ROA not after:            Tue 04 Mar 2025 18:01:15 +0000
asID:                     26611
IP address blocks:        190.127.254.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:75:d4:20:eb:5c:66:9c:d2:90:a5:c5:0c:64:05:d0:41:f3:ba:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:15 2024 GMT
            Not After : Mar  4 18:01:15 2025 GMT
        Subject: CN=CBCCDF1287EEE0D94ADEFCAB01373321C72BB386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:9e:b7:7c:f5:af:62:a0:db:a5:ac:41:6f:
                    d9:a0:d4:51:df:33:a4:63:5e:79:cc:ba:4c:ec:1d:
                    45:16:0e:cb:24:68:08:95:39:56:b0:b6:3a:8e:48:
                    e0:7d:76:a4:c2:fd:52:83:9f:77:95:90:bb:55:02:
                    3d:e3:b7:32:34:e2:11:e8:cd:07:49:16:b5:9c:fa:
                    c4:46:e5:6c:2d:3c:4d:ba:6e:8e:32:3f:36:df:8f:
                    29:99:1a:55:e4:a6:7a:57:74:4f:30:d5:39:a4:cf:
                    96:ca:60:e2:62:1c:53:56:d1:ce:57:91:fd:b5:01:
                    3d:26:55:24:b8:b2:85:3b:7f:22:80:1f:57:65:1f:
                    70:a8:ef:9b:ae:46:af:62:42:4c:cc:f3:ea:28:cf:
                    47:f8:81:cf:18:d5:e1:11:7b:2e:d8:31:44:fc:45:
                    64:be:e8:ad:73:5c:94:71:0b:d4:4a:80:2d:c1:18:
                    54:92:ec:93:b2:07:3d:0e:11:82:df:f4:a3:39:0e:
                    42:0e:82:59:ad:e8:75:fd:f5:fc:c7:e7:ab:ca:2e:
                    56:06:36:e6:15:1d:7e:40:09:b9:64:65:00:dd:4c:
                    db:f9:60:55:3c:d4:a7:78:fa:a6:05:3a:93:b8:7c:
                    c0:bc:ce:7d:6b:ab:e2:71:96:01:b3:37:69:a7:cf:
                    6a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:DF:12:87:EE:E0:D9:4A:DE:FC:AB:01:37:33:21:C7:2B:B3:86
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3235342e302f32332d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:8e:b1:65:3f:9e:f7:a7:91:81:7b:16:e2:7d:1c:fc:12:3b:
         20:bd:d9:90:2e:a4:1b:26:72:d6:bb:2d:3b:17:6f:e4:5a:18:
         f8:27:56:b2:fe:8a:f0:59:1a:ed:57:21:86:63:d0:92:63:46:
         09:0a:c4:d3:2d:c6:94:0d:c1:c3:0e:1b:87:f3:9c:07:ba:e5:
         50:6b:65:7f:67:5a:06:3f:e4:26:d5:34:83:e1:1b:8a:4a:bd:
         5f:63:79:cb:f2:dd:5b:b7:7a:6d:07:fe:79:cb:fe:d9:af:dd:
         88:90:84:83:5e:d9:f0:1f:f9:c0:d2:b4:53:4c:fb:74:1f:34:
         92:d7:6d:55:aa:da:de:41:ba:b8:8e:bb:31:20:06:7f:3c:72:
         b4:92:b5:fd:1f:7c:47:26:2f:0f:16:e9:1f:10:a0:23:16:29:
         9d:8f:89:cb:e9:c9:e0:ec:68:14:a1:c0:b6:5e:a2:cb:fd:5b:
         fa:e6:56:ef:44:13:0a:47:e9:9a:f0:24:11:2c:65:f7:98:24:
         53:1e:96:f8:60:0e:f4:eb:09:5f:aa:00:d4:ec:cc:3f:2b:7b:
         db:6f:01:d1:28:64:14:c9:ed:ad:18:2e:cc:2d:1f:f1:34:bc:
         49:bc:49:66:6b:1a:7f:07:3d:4d:ac:ee:7a:95:5c:fc:7a:20:
         8c:e9:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----