Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa
File:                     3139302e3234332e302e302f31362d3234203d3e203236363131.roa (raw, json)
Hash identifier:          6S/oK9aOPWEPY/AxZXSO9KHrlibvmw+E+bqpTTieQOw=
Subject key identifier:   28:5B:0C:E1:E0:AC:22:36:4D:75:A7:BA:D8:5E:0B:A3:4F:2F:06:43
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       7E0335B9148A9D9775A66A55256EC1FF11B05876
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:12 +0000
ROA not before:           Tue 05 Mar 2024 17:56:12 +0000
ROA not after:            Tue 04 Mar 2025 18:01:12 +0000
asID:                     26611
IP address blocks:        190.243.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:03:35:b9:14:8a:9d:97:75:a6:6a:55:25:6e:c1:ff:11:b0:58:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:12 2024 GMT
            Not After : Mar  4 18:01:12 2025 GMT
        Subject: CN=285B0CE1E0AC22364D75A7BAD85E0BA34F2F0643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ac:26:77:99:57:ac:c0:33:c7:bf:d9:16:1d:
                    96:c5:8f:27:2e:e8:4c:64:4c:c8:8b:04:2a:32:cc:
                    d4:b5:fc:fd:7e:b1:d0:ee:94:91:b2:b1:de:f3:96:
                    02:fb:db:45:18:b3:95:fa:ac:85:a3:37:ca:c6:dd:
                    a7:11:cb:27:01:52:5c:03:fb:e5:c4:46:b0:93:a0:
                    6b:a2:18:ac:ac:5d:30:67:4a:40:4a:3a:09:57:5c:
                    a0:8b:59:ba:6f:4d:8b:b0:a9:06:4e:b4:6e:74:93:
                    c3:07:62:69:ae:2b:c4:a0:a2:d2:d0:76:9b:31:52:
                    9b:f8:69:2d:de:84:29:16:33:26:26:f2:96:b1:1e:
                    0d:29:95:ff:52:8f:28:21:8a:34:c0:02:93:e4:83:
                    40:e5:b3:5d:49:be:f2:c8:d0:08:5d:c2:14:0c:50:
                    74:5d:68:26:2e:28:b8:60:44:db:20:66:86:4c:e3:
                    78:2a:a9:b4:d8:c8:81:ad:cb:b8:20:ce:2a:f0:11:
                    49:19:55:9d:fc:ed:26:10:e1:d8:bc:9b:0e:78:7c:
                    b9:59:41:72:b3:12:22:d0:29:62:e5:af:b5:d9:0e:
                    e9:06:79:ef:f4:47:d9:a3:38:13:ad:02:2a:8e:ef:
                    27:b1:38:49:b8:f5:89:cc:fa:b8:3e:6b:eb:64:cd:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5B:0C:E1:E0:AC:22:36:4D:75:A7:BA:D8:5E:0B:A3:4F:2F:06:43
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3234332e302e302f31362d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:84:cc:c5:15:3c:50:a9:9e:44:73:64:00:7d:50:46:9b:09:
         19:4d:07:16:b4:a9:6b:5b:79:61:18:de:d6:fd:62:e6:3d:7a:
         7d:0e:af:6e:e1:34:fe:5f:77:58:dc:1e:3a:5f:2a:73:fc:c6:
         82:9d:14:af:67:ac:2a:64:8b:4f:2f:89:8b:66:0d:93:ef:e4:
         11:42:6f:ba:2d:4c:b8:a3:3a:12:10:12:e5:76:65:5f:ef:9b:
         b8:c8:4b:cc:5c:a2:03:3f:7b:d0:db:fc:34:47:54:4c:c9:ed:
         2f:21:18:a7:fd:5d:69:ae:b6:0a:17:7f:46:bc:75:ba:31:df:
         e9:0e:d0:c2:a2:83:27:cd:84:a5:92:5a:b8:42:bd:42:57:66:
         12:4a:13:71:1b:d1:3d:b2:8f:66:81:01:99:7f:51:48:2f:7e:
         22:4c:0d:56:9f:22:c4:f5:dc:05:09:eb:17:3a:11:30:99:d6:
         14:d4:ce:70:33:6c:41:14:57:4c:38:3b:71:ba:25:a1:c8:98:
         44:d7:c3:1d:cd:d1:94:3f:11:2e:61:3b:bc:8d:6f:83:4b:0a:
         c0:08:ac:0c:f8:72:cd:85:5f:d2:3a:fd:d3:3d:59:86:33:0f:
         e7:10:c9:5b:09:43:e4:00:0b:e2:ca:5f:78:59:3d:27:7c:23:
         cf:48:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----