Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e203238303037.roa
File:                     3139302e35322e39362e302f32302d3234203d3e203238303037.roa (raw, json)
Hash identifier:          D3mz/T8WYuq32NbPlSsvyC75ZHu/9SphFUQ5NdRovv4=
Subject key identifier:   30:4D:76:95:E6:88:7E:B5:F5:4F:5E:6D:F1:C8:BE:E8:66:1B:69:99
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       4B3594E5A14D2D8E9761CB050B4559AE256DC167
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:51:23 +0000
ROA not before:           Tue 05 Mar 2024 17:46:23 +0000
ROA not after:            Tue 04 Mar 2025 17:51:23 +0000
asID:                     28007
IP address blocks:        190.52.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:35:94:e5:a1:4d:2d:8e:97:61:cb:05:0b:45:59:ae:25:6d:c1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:23 2024 GMT
            Not After : Mar  4 17:51:23 2025 GMT
        Subject: CN=304D7695E6887EB5F54F5E6DF1C8BEE8661B6999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:e3:ee:8a:86:6c:7b:2f:30:af:5a:9b:5e:
                    9f:26:a4:d7:2a:43:46:d5:f0:83:d4:77:f9:ed:3b:
                    40:06:05:10:bd:9e:52:40:de:e1:65:f0:74:80:53:
                    09:52:c3:4e:cc:4c:54:af:c5:db:f5:11:6a:63:48:
                    6a:7d:d7:f5:1b:e3:9e:e0:b6:26:b4:0b:3d:00:5b:
                    dc:38:60:a1:96:a4:bc:bf:48:db:53:ae:f7:d3:22:
                    ea:27:f7:44:b0:1a:66:99:2e:12:da:9a:3e:aa:b2:
                    08:b3:9c:ea:73:44:4b:83:7d:39:27:08:21:79:ed:
                    42:58:48:ec:49:c7:a9:3c:41:c2:48:98:82:96:84:
                    07:6b:38:21:f2:07:4a:5e:41:f1:c8:2e:bf:92:28:
                    c2:6b:94:0c:97:38:36:d3:64:00:b5:2f:09:ff:87:
                    05:02:29:33:bb:75:23:52:e0:c1:22:6f:87:65:87:
                    5e:f6:a9:79:f1:63:82:b6:46:06:a2:86:83:98:85:
                    c6:2d:d5:1d:08:54:05:4c:77:25:07:d3:64:48:90:
                    3a:22:d4:6e:cd:d9:96:ee:bc:fd:3a:06:96:3f:eb:
                    34:78:e5:0b:a0:08:9a:e5:4b:31:4f:0d:7b:b3:84:
                    33:02:5a:cf:40:4b:fa:f0:12:9f:17:3d:e1:c2:fb:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4D:76:95:E6:88:7E:B5:F5:4F:5E:6D:F1:C8:BE:E8:66:1B:69:99
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3139302e35322e39362e302f32302d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:42:ae:92:2a:b9:78:1c:54:1e:56:eb:00:91:dd:97:14:5c:
         19:59:b2:5a:7d:5f:1c:a5:18:51:f8:1e:04:9a:8b:ee:62:cb:
         33:6b:97:81:37:8c:fc:0c:c7:87:61:84:6a:71:c6:db:15:26:
         ae:57:a1:b2:13:36:a6:3f:6c:42:ca:fa:44:10:88:f1:2f:90:
         e8:25:c5:bc:77:69:f3:ad:ce:07:7e:39:68:a6:f5:b6:50:15:
         a7:93:93:56:56:a8:30:11:24:54:9d:06:57:62:f7:68:b8:b7:
         57:16:56:6b:79:32:a7:45:99:74:22:57:39:64:d5:52:56:b2:
         e5:7e:9e:30:56:71:f2:13:60:ec:e4:81:67:e5:20:3f:9d:9d:
         5b:c1:ad:58:a4:79:ef:32:c3:f4:f5:b7:06:ec:b0:0f:b3:cd:
         bb:23:55:a4:47:c1:ab:7a:11:e8:85:eb:7c:c9:99:ed:b2:ef:
         aa:40:11:57:8b:75:7f:8f:d4:e5:66:98:42:79:dd:31:79:37:
         68:6b:fa:06:32:86:af:9b:47:85:7e:f2:18:30:b6:8e:b4:3f:
         8a:c4:ea:c0:98:90:4b:40:5d:15:73:b9:6d:62:d0:6f:43:f5:
         09:55:82:87:6a:f7:09:8f:81:13:c8:b9:97:46:86:41:f7:9b:
         2f:cf:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----