Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa
File:                     3139312e3135382e302e302f31352d3234203d3e203236363131.roa (raw, json)
Hash identifier:          cD6De3OOsBDPCtHUCwcA+a6h4jFYkP0Vg39JWdEVcCk=
Subject key identifier:   EF:67:43:B9:BF:79:90:01:FE:12:3D:C0:58:5B:60:B8:2C:98:B3:D5
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       6303177BA233700AE93679E7A165A219690ED441
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:10 +0000
ROA not before:           Tue 05 Mar 2024 17:56:10 +0000
ROA not after:            Tue 04 Mar 2025 18:01:10 +0000
asID:                     26611
IP address blocks:        191.158.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:03:17:7b:a2:33:70:0a:e9:36:79:e7:a1:65:a2:19:69:0e:d4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:10 2024 GMT
            Not After : Mar  4 18:01:10 2025 GMT
        Subject: CN=EF6743B9BF799001FE123DC0585B60B82C98B3D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:2f:7e:1c:d4:d3:88:98:ea:64:19:2d:2c:
                    96:e2:7d:a4:64:03:7a:5f:9f:04:36:8f:f9:ed:45:
                    67:8c:0c:c2:16:48:27:1a:cc:2d:97:9d:4c:f2:82:
                    af:7d:42:33:c6:cb:99:8f:9d:68:23:9d:82:b5:f7:
                    f2:59:29:6f:cc:0a:c0:63:ea:60:22:6b:89:89:0d:
                    e7:79:28:0a:6c:6d:90:f3:58:93:83:35:26:d0:0f:
                    29:8d:80:c4:79:93:27:fe:7e:46:8e:4d:a0:33:4f:
                    8c:af:1a:84:14:85:16:22:96:71:7b:11:75:53:c2:
                    67:1c:7b:8e:9e:3d:01:bf:9d:d8:8b:98:19:22:1e:
                    27:1c:1b:25:16:31:63:09:c1:35:93:23:3b:5c:de:
                    36:46:f3:49:42:0f:b8:a6:0e:6d:f8:5b:db:43:e0:
                    1a:e5:33:31:45:59:3d:7b:47:55:3e:3d:71:fa:ea:
                    ac:4a:65:be:40:4a:f2:cb:9e:03:07:53:39:e4:93:
                    e6:da:5f:2e:c8:60:41:7f:b6:d1:fd:d2:4d:71:ed:
                    f5:92:e4:d8:e9:ec:e5:8f:2b:b1:9d:9f:b5:64:8c:
                    54:ea:31:58:8b:0f:8f:c8:3f:f8:ef:60:81:d0:8e:
                    2f:df:0a:5d:6d:19:bc:2d:2e:20:34:12:86:15:46:
                    af:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:67:43:B9:BF:79:90:01:FE:12:3D:C0:58:5B:60:B8:2C:98:B3:D5
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e3135382e302e302f31352d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.158.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         6f:40:83:7d:3c:6c:50:f2:f7:54:c7:e7:61:37:d7:cd:a5:d4:
         bb:2c:b2:c1:2f:ed:a1:2c:f2:0c:3e:df:18:9e:3f:6e:f3:cd:
         d2:b6:43:29:c0:e2:dd:ef:e2:69:b9:31:5b:f0:4b:05:19:e5:
         fe:80:1d:74:db:1c:06:b9:82:5c:97:37:3e:61:b0:a9:cf:78:
         4c:e6:df:e2:c5:4e:ed:6e:81:23:72:63:65:02:0a:42:8f:27:
         6b:38:82:3c:46:ae:08:d1:a2:79:83:a3:12:93:b1:20:2e:30:
         ac:dd:0c:79:ac:cb:1b:bf:9c:6d:5f:20:49:87:76:44:15:0d:
         d5:5f:e1:80:e8:2d:9a:28:2f:3e:69:1f:0b:cd:e0:28:d7:29:
         ef:7c:d6:1a:0f:de:8f:0f:06:69:3a:18:12:26:7d:d1:5b:c6:
         df:a6:e6:a8:a9:23:50:ce:02:7a:1d:46:74:63:8a:b9:d6:fd:
         76:ff:0f:df:4a:ca:f8:05:7d:47:89:13:c8:51:cd:7e:05:e6:
         7c:67:98:51:59:2d:54:31:53:0a:fc:6b:3b:bc:3d:60:0c:29:
         69:41:33:62:03:8f:1d:c2:62:cf:66:1d:58:99:02:f3:2b:e3:
         2f:e9:3b:6c:68:cf:7e:9b:e6:75:7f:09:89:1c:f8:eb:01:b5:
         10:9b:cd:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----