Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3231203d3e203236363131.roa
File:                     3139312e3135372e302e302f31362d3231203d3e203236363131.roa (raw, json)
Hash identifier:          o81ra52Za1L3GsI6vTmUwkEzPLiQbHMT8mEHcbiez4w=
Subject key identifier:   A5:FB:4F:E4:5D:C7:6C:F0:85:8A:86:31:71:54:37:20:22:3C:35:DB
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       0B1787DE5F317E1447C4E4A1F1F03E7A04EFF814
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3231203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:03 +0000
ROA not before:           Tue 05 Mar 2024 17:56:03 +0000
ROA not after:            Tue 04 Mar 2025 18:01:03 +0000
asID:                     26611
IP address blocks:        191.157.0.0/16 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:87:de:5f:31:7e:14:47:c4:e4:a1:f1:f0:3e:7a:04:ef:f8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:03 2024 GMT
            Not After : Mar  4 18:01:03 2025 GMT
        Subject: CN=A5FB4FE45DC76CF0858A863171543720223C35DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e8:47:d9:bb:46:11:22:e2:26:10:57:1e:21:
                    f4:6a:92:d4:29:95:5f:b2:ae:90:2d:6d:0f:aa:ea:
                    f4:da:36:43:3d:42:67:e1:d6:ab:bd:90:8b:01:17:
                    5d:b1:73:f5:66:45:f0:a6:67:1d:86:a2:29:1d:19:
                    1b:12:75:42:83:af:56:94:05:00:8c:12:b7:d1:6f:
                    2a:c3:f4:9f:8d:11:eb:68:92:e2:29:4c:f8:6c:73:
                    d8:73:b3:18:8d:5e:e3:26:e9:fc:58:90:25:ba:26:
                    7b:8c:2e:ac:33:f7:b0:d0:ce:fb:b7:8b:a2:5c:0e:
                    f1:d2:2e:d1:5b:44:dd:df:63:eb:b5:62:ed:43:07:
                    5e:f9:40:dd:ef:a7:e4:1c:6e:09:df:0f:8a:a7:c4:
                    f4:45:ea:8e:1c:61:5e:05:cb:6e:ae:d9:78:dd:c1:
                    d7:ec:46:88:fb:c6:c6:5e:50:8e:62:6f:d1:6a:b8:
                    49:1e:7a:ff:9c:b4:cd:df:0d:51:23:59:f5:41:21:
                    1e:94:81:0e:45:0e:06:fa:ce:24:45:95:ae:92:2a:
                    51:66:95:ea:b4:9e:a8:16:a8:51:ac:0b:3f:02:f7:
                    6b:f4:3d:96:65:87:ce:d3:81:3a:b3:4a:87:fb:b3:
                    ca:04:ce:37:12:a0:f2:20:2d:9f:19:d7:1e:99:f0:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FB:4F:E4:5D:C7:6C:F0:85:8A:86:31:71:54:37:20:22:3C:35:DB
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135372e302e302f31362d3231203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:88:eb:ad:14:e7:1b:db:de:d2:b3:23:50:bf:64:0d:c9:2c:
         5c:66:8b:df:0e:ca:43:85:d3:67:9b:ee:60:01:a3:df:9b:d4:
         1d:9a:bc:03:ad:18:13:e3:b5:98:ef:7d:af:ea:fd:7b:b9:39:
         c5:a6:ee:fe:ae:77:3d:8d:ee:7e:e6:dd:51:cc:8e:e5:ee:c3:
         97:0a:c1:e0:9d:57:d1:2b:23:cb:eb:04:2a:94:70:3e:e5:50:
         ce:10:3c:70:24:e5:e2:fa:bc:08:fc:1e:9b:33:67:7f:1c:a8:
         4c:63:70:9e:27:c5:54:77:89:73:95:b3:46:f2:5e:21:27:26:
         41:a1:52:3d:85:03:a0:df:25:08:d7:16:16:41:c2:82:79:36:
         99:82:08:10:ca:dd:6a:6c:3f:bb:bb:cf:84:74:75:cb:4e:51:
         24:b8:0d:e5:02:17:d1:80:20:ca:29:ee:8d:a4:d5:12:27:f8:
         cd:a4:dd:a2:cc:db:a2:f4:e0:d6:30:fa:64:7e:ef:86:5a:75:
         0a:23:10:6c:b0:4f:29:7b:2c:ba:97:2c:07:5c:df:c8:68:f5:
         5b:76:10:6e:cb:9b:e7:5c:8f:88:2e:df:0c:fa:b7:9c:f5:31:
         f1:c7:84:84:60:c2:0c:a7:e4:20:35:35:4f:62:8b:90:fe:47:
         68:a2:4a:d2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUCxeH3l8xfhRHxOSh8fA+egTv+BQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MDNaFw0yNTAzMDQxODAxMDNaMDMxMTAvBgNV
BAMTKEE1RkI0RkU0NURDNzZDRjA4NThBODYzMTcxNTQzNzIwMjIzQzM1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF6EfZu0YRIuImEFceIfRqktQp
lV+yrpAtbQ+q6vTaNkM9Qmfh1qu9kIsBF12xc/VmRfCmZx2GoikdGRsSdUKDr1aU
BQCMErfRbyrD9J+NEetokuIpTPhsc9hzsxiNXuMm6fxYkCW6JnuMLqwz97DQzvu3
i6JcDvHSLtFbRN3fY+u1Yu1DB175QN3vp+QcbgnfD4qnxPRF6o4cYV4Fy26u2Xjd
wdfsRoj7xsZeUI5ib9FquEkeev+ctM3fDVEjWfVBIR6UgQ5FDgb6ziRFla6SKlFm
leq0nqgWqFGsCz8C92v0PZZlh87TgTqzSof7s8oEzjcSoPIgLZ8Z1x6Z8DVTAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUpftP5F3HbPCFioYxcVQ3ICI8NdswHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzEzNTM3MmUzMDJlMzAy
ZjMxMzYyZDMyMzEyMDNkM2UyMDMyMzYzNjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC/nTANBgkq
hkiG9w0BAQsFAAOCAQEApYjrrRTnG9ve0rMjUL9kDcksXGaL3w7KQ4XTZ5vuYAGj
35vUHZq8A60YE+O1mO99r+r9e7k5xabu/q53PY3ufubdUcyO5e7DlwrB4J1X0Ssj
y+sEKpRwPuVQzhA8cCTl4vq8CPwemzNnfxyoTGNwnifFVHeJc5WzRvJeIScmQaFS
PYUDoN8lCNcWFkHCgnk2mYIIEMrdamw/u7vPhHR1y05RJLgN5QIX0YAgyinujaTV
Eif4zaTdoszbovTg1jD6ZH7vhlp1CiMQbLBPKXssupcsB1zfyGj1W3YQbsub51yP
iC7fDPq3nPUx8ceEhGDCDKfkIDU1T2KLkP5HaKJK0g==
-----END CERTIFICATE-----