Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa
File:                     3139302e3131322e302e302f31392d3234203d3e203238313131.roa (raw, json)
Hash identifier:          uTICBKYINZQvPzLcTahD/gmp6GaJ94rpMz1KkoLX2bE=
Subject key identifier:   F5:77:6B:4A:E1:94:49:CA:4F:4F:24:FF:52:9C:89:C1:C5:A0:F4:B6
Certificate issuer:       /CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
Certificate serial:       1FF88775F9CE83194B1DA75A40AADA502365995C
Authority key identifier: 3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa
Signing time:             Tue 05 Mar 2024 17:55:43 +0000
ROA not before:           Tue 05 Mar 2024 17:50:43 +0000
ROA not after:            Tue 04 Mar 2025 17:55:43 +0000
asID:                     28111
IP address blocks:        190.112.0.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f8:87:75:f9:ce:83:19:4b:1d:a7:5a:40:aa:da:50:23:65:99:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118
        Validity
            Not Before: Mar  5 17:50:43 2024 GMT
            Not After : Mar  4 17:55:43 2025 GMT
        Subject: CN=F5776B4AE19449CA4F4F24FF529C89C1C5A0F4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bb:81:4e:19:05:c4:b9:1e:14:62:a1:1c:f1:
                    13:63:7a:b5:1d:e6:0c:c8:87:3f:91:ab:bb:27:cb:
                    bd:af:1a:e9:18:ba:d7:99:a5:4a:3b:89:03:ce:ae:
                    04:aa:8b:ed:b4:e8:ef:e3:66:13:22:ff:44:48:f8:
                    a9:d2:56:36:cd:21:98:05:b3:98:bf:ca:05:91:37:
                    7f:90:70:71:b3:f7:06:4a:da:59:83:d7:79:4e:5d:
                    32:a7:3a:c2:d0:bc:3d:c3:08:e6:b0:31:8e:49:bc:
                    7c:02:8d:a8:ad:f2:89:2c:e2:91:8b:98:14:b6:03:
                    8f:1d:c1:c7:f7:0b:f2:e3:0b:c6:30:8a:97:7f:06:
                    c0:04:86:47:31:2b:1c:95:21:dd:96:48:45:97:c1:
                    40:f7:91:61:ff:c6:bf:68:7c:1e:9d:c0:90:15:cc:
                    24:8b:87:98:48:c3:1e:64:a3:95:c7:14:ae:60:a4:
                    0b:ca:7c:13:4c:77:5a:14:2d:de:57:1d:05:55:8f:
                    75:8b:d3:27:08:cb:98:ba:cc:98:90:74:8e:d7:fb:
                    db:fc:f8:95:f1:62:69:6d:00:6b:b1:9b:98:cb:99:
                    e2:9c:46:6e:01:08:ee:11:56:6a:f2:32:52:f5:fe:
                    38:62:9c:d7:72:19:3e:20:a7:d5:34:4a:99:a8:53:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:77:6B:4A:E1:94:49:CA:4F:4F:24:FF:52:9C:89:C1:C5:A0:F4:B6
            X509v3 Authority Key Identifier:
                keyid:3C:73:FA:09:D2:2F:6B:6D:F4:BB:85:12:AA:9F:71:96:FA:1B:F1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3C73FA09D22F6B6DF4BB8512AA9F7196FA1BF118.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5E8ABF09873BD996FA3EB465C08EC62FB6C099B4D5F61BF4554B0225AABEFC45/0/3139302e3131322e302e302f31392d3234203d3e203238313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:60:c0:1c:dd:01:58:d3:e3:23:54:e8:84:2c:1d:e2:a2:ba:
         5a:73:65:6a:fd:69:f5:d5:75:12:10:61:90:5d:ef:5a:cf:e4:
         6b:84:8b:30:4e:2c:2e:68:46:2f:f0:87:2d:e1:1e:7a:70:51:
         01:91:51:93:fe:59:6a:2c:13:b7:d2:84:15:92:fa:eb:73:2f:
         c8:93:b2:da:77:bd:95:55:56:1c:12:32:02:8b:9a:6b:72:eb:
         c6:2e:1d:3b:dd:47:49:cc:ef:3c:8e:9c:a1:d7:25:8b:df:80:
         b1:2f:e9:34:ed:43:a1:a1:c3:f3:e7:10:6e:4b:84:37:49:5d:
         76:82:4e:d5:e1:65:81:4d:2a:49:cd:4c:c7:ed:df:89:d2:64:
         7d:3e:7d:61:8b:72:40:3b:20:b4:0b:e6:fc:d8:0b:3d:81:c8:
         de:b0:cc:fe:2d:1b:50:3c:c5:c9:2d:ba:6e:67:91:fa:e4:4f:
         c1:06:b7:0c:90:20:13:f3:25:f7:8d:0b:c7:f8:09:b6:d6:50:
         13:08:aa:3e:ab:c6:d3:e0:d1:67:60:35:9f:2b:04:f1:23:13:
         0c:3a:08:4b:8e:2b:45:cd:f7:fb:e1:da:64:d0:c3:1d:ca:63:
         e7:0a:f2:2e:f3:37:be:fe:b6:32:63:3c:a5:2f:4e:ca:4d:cb:
         7d:85:32:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----