Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
File:                     3139312e3135322e302e302f31342d3234203d3e203236363131.roa (raw, json)
Hash identifier:          bLNqa66irshJ0GDimxar1fOPNbO9odGNDWmyM1Vubc0=
Subject key identifier:   9E:CA:D5:CD:AD:FD:69:42:02:E5:87:17:42:8E:10:34:A4:4A:C4:03
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       4D8A3BC4923EE9B4FBACE5DA50E67F40C2033963
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:15 +0000
ROA not before:           Tue 05 Mar 2024 17:56:15 +0000
ROA not after:            Tue 04 Mar 2025 18:01:15 +0000
asID:                     26611
IP address blocks:        191.152.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8a:3b:c4:92:3e:e9:b4:fb:ac:e5:da:50:e6:7f:40:c2:03:39:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:15 2024 GMT
            Not After : Mar  4 18:01:15 2025 GMT
        Subject: CN=9ECAD5CDADFD694202E58717428E1034A44AC403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fd:d0:18:0a:9a:0d:c3:b8:05:1a:ff:bc:43:
                    a5:70:9e:f2:e7:44:a2:4b:8a:a6:9f:aa:2c:1d:7d:
                    79:34:a7:88:1a:cd:6d:fe:d3:00:0f:62:ce:ec:3f:
                    df:5d:5b:b8:12:7b:f9:60:03:d9:64:e2:80:7f:9f:
                    46:8b:05:2c:bd:ca:36:7d:3c:d3:2b:4a:5a:69:1c:
                    cd:0f:bd:cf:9e:08:57:db:f5:63:39:80:a8:48:7b:
                    a1:20:4e:d4:2e:e4:68:20:73:9c:7f:e1:0a:bf:ff:
                    e6:4e:91:60:8f:66:ed:96:27:4c:a1:7b:14:f6:63:
                    28:08:0e:c2:ec:3a:67:b9:e2:84:24:0b:18:67:9b:
                    c1:d9:f2:27:aa:f8:4b:00:40:a6:67:c6:76:49:09:
                    93:a7:0e:f8:cf:a6:7e:54:50:9e:9d:2f:9a:80:d5:
                    35:d4:06:9b:3b:b6:a8:fb:d1:19:d6:54:a1:fb:ef:
                    fe:2e:30:ce:73:db:fe:bc:90:13:f0:8f:32:81:aa:
                    9b:86:e6:1d:65:8b:e4:02:2d:ce:88:aa:d9:26:a4:
                    03:7c:3c:1a:dd:42:6b:83:e3:61:54:e0:74:62:49:
                    2c:63:16:78:e7:d6:42:d1:b5:14:6d:09:1c:41:b1:
                    c7:19:9c:f3:ce:b9:a0:19:cf:1f:91:62:c8:36:a5:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CA:D5:CD:AD:FD:69:42:02:E5:87:17:42:8E:10:34:A4:4A:C4:03
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135322e302e302f31342d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.152.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         31:49:0a:f5:37:6b:c6:4b:54:77:60:f3:33:37:58:c7:c5:b6:
         bf:b2:4f:6c:b4:4e:fd:c0:ec:68:b8:70:78:c0:8a:76:65:ba:
         96:88:69:27:29:25:60:6a:fa:b0:ab:28:62:ac:c0:61:a6:49:
         a5:22:38:23:13:3b:63:6a:46:7b:ad:c3:50:5c:70:48:2d:e4:
         f7:52:e0:58:50:d6:e5:0b:e0:b1:48:f5:ba:47:d6:4c:2e:63:
         d8:e1:6b:8b:4d:be:15:12:2e:2f:74:0f:bf:f9:a7:47:6a:0d:
         d8:17:a5:93:31:3a:59:b7:0b:14:e3:62:c7:61:fa:32:63:2e:
         f1:2d:8a:43:93:86:b3:af:96:c1:fd:df:3c:6c:1f:40:ee:39:
         13:35:8a:ba:ad:60:4b:f0:59:f4:8a:ba:d2:13:5d:d7:df:2f:
         64:e9:8f:de:01:b2:60:b4:79:b7:42:28:5e:cb:93:1c:b3:38:
         12:e9:e0:c0:56:69:68:4d:ee:03:52:aa:e2:fd:e2:aa:ea:10:
         6a:2a:21:d4:c9:ad:b3:6b:98:9d:27:0f:82:f7:dd:ed:90:ee:
         09:e1:0f:cc:62:58:ea:f8:15:b4:ab:e1:40:4c:f5:7e:d0:d0:
         30:54:85:12:9b:8f:e6:11:12:25:ce:28:43:c0:b7:94:e3:46:
         9d:b7:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----