Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa
File:                     3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa (raw, json)
Hash identifier:          lFxmf5VbU6sPY/KPCCI8SBOGVshKDJNhpl/p0ebXub8=
Subject key identifier:   B1:5D:34:3A:51:1F:5E:C7:EB:4A:0D:66:C6:BD:FE:E1:E7:EB:9D:7B
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       5BE8AC63F6FFB6C89137D949AFB6ED6CAFCD943F
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:15 +0000
ROA not before:           Tue 05 Mar 2024 17:50:15 +0000
ROA not after:            Tue 04 Mar 2025 17:55:15 +0000
asID:                     11014
IP address blocks:        190.104.224.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:e8:ac:63:f6:ff:b6:c8:91:37:d9:49:af:b6:ed:6c:af:cd:94:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:15 2024 GMT
            Not After : Mar  4 17:55:15 2025 GMT
        Subject: CN=B15D343A511F5EC7EB4A0D66C6BDFEE1E7EB9D7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:6b:64:53:8c:80:0e:b2:7b:1f:08:4e:b2:
                    a8:c8:24:05:20:c5:c7:9d:93:f7:84:89:5a:22:90:
                    c7:6d:cf:7f:fa:90:50:dc:32:5f:39:b6:d7:22:c9:
                    94:4f:15:e2:8e:e4:8e:df:ee:ba:1d:36:6f:a9:27:
                    8f:f8:8b:54:2a:03:63:08:0f:04:14:69:ee:bc:45:
                    2f:19:0f:4e:b8:11:63:2c:bb:13:82:b6:60:61:41:
                    14:4f:bf:ad:77:d4:cc:42:30:e7:c7:0c:6a:15:79:
                    8b:dc:91:6d:ad:b9:23:f7:6b:4a:a4:b2:f6:61:53:
                    df:ab:d4:eb:de:64:e6:c5:4b:00:09:55:03:87:86:
                    90:5c:9d:ab:d9:5e:e6:15:e3:37:5e:ac:2e:e7:7e:
                    80:c7:4e:11:80:68:21:af:e5:18:2d:52:af:a0:1b:
                    89:b2:d6:77:6c:b4:4b:54:80:18:a8:b2:08:d5:d1:
                    67:44:10:0e:a1:59:8b:c3:85:f4:33:45:46:61:83:
                    49:08:b0:0e:f4:5e:9c:29:49:cb:5f:7c:eb:11:bc:
                    0a:66:c3:3b:f3:8a:a9:0c:e6:e4:86:10:21:f2:3a:
                    65:98:99:ee:4f:c9:69:cc:e2:2b:da:c4:9e:86:77:
                    e4:75:d0:e6:ac:98:d7:e6:5f:d4:dc:fc:0d:b3:3c:
                    81:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5D:34:3A:51:1F:5E:C7:EB:4A:0D:66:C6:BD:FE:E1:E7:EB:9D:7B
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3232342e302f31392d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:42:d4:c3:e2:8a:0f:7b:b0:d8:c2:aa:07:58:6d:d0:82:d0:
         69:c2:0c:69:dd:b7:15:5b:82:c0:4b:08:cc:89:b1:2f:c6:0d:
         ac:a9:75:3f:6d:51:e1:b9:31:72:62:f5:1d:fc:8e:5d:67:5a:
         ef:6b:2e:7e:38:5d:d2:98:9d:fa:60:d8:16:a1:18:93:28:b9:
         ea:0b:e6:1f:34:9d:3d:a4:2a:f2:cc:7b:18:59:87:3d:c7:17:
         59:76:b7:47:c2:00:a9:6a:96:9a:54:42:4d:9c:df:fa:7d:85:
         16:d8:8d:61:1a:b5:36:43:71:1c:80:4c:65:c4:e2:f2:5d:20:
         6d:0f:ee:fa:45:b9:1a:21:df:35:d7:2b:77:0b:92:f6:0b:43:
         2f:b2:78:0b:22:55:27:3b:68:f0:fd:e7:8e:d2:f4:54:05:b2:
         c8:67:1a:33:5b:36:94:1f:80:80:6f:5f:d9:24:86:4a:5e:db:
         e3:09:e5:64:e1:56:a6:9c:94:e6:8f:52:da:50:d0:70:c7:20:
         a8:61:c8:11:a8:2a:b4:72:27:e4:4e:91:44:4a:97:11:e3:ea:
         bc:32:5c:fb:c8:df:d1:ee:b9:78:8c:17:10:b6:c5:be:22:1a:
         09:d3:bf:4c:bc:f0:6b:0f:32:70:7c:7c:5a:a7:d5:8d:05:42:
         9e:c8:d9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----