Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32332d3234203d3e203532323533.roa
File:                     3139302e3130382e3230322e302f32332d3234203d3e203532323533.roa (raw, json)
Hash identifier:          HtM1JuWa6DBXfiV4WfBv0+ccObH2WVly1rvYpANS/Wg=
Subject key identifier:   70:66:AE:F4:BF:A1:C8:C0:C7:4D:9C:66:0D:21:F3:43:FB:97:60:41
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       2A040A814F60A3B92DDF3AFAEA73A508A0AEBACF
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32332d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:40 +0000
ROA not before:           Tue 05 Mar 2024 18:13:40 +0000
ROA not after:            Tue 04 Mar 2025 18:18:40 +0000
asID:                     52253
IP address blocks:        190.108.202.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:04:0a:81:4f:60:a3:b9:2d:df:3a:fa:ea:73:a5:08:a0:ae:ba:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:40 2024 GMT
            Not After : Mar  4 18:18:40 2025 GMT
        Subject: CN=7066AEF4BFA1C8C0C74D9C660D21F343FB976041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:e7:54:04:97:4f:41:db:6f:6a:b2:8d:9b:
                    10:ce:c1:71:77:46:a5:44:6e:bd:00:fc:1d:23:46:
                    61:67:44:04:e4:f1:e2:03:fe:20:b2:22:98:81:6e:
                    63:fd:73:2c:c0:2b:28:ff:56:00:75:21:49:9f:27:
                    f0:50:9c:3b:b3:e0:0e:f6:7b:bd:86:5b:20:69:47:
                    0b:44:07:94:e6:e6:6b:3f:a1:5b:86:c2:36:f2:2d:
                    09:12:a0:16:bd:ee:21:02:9b:2f:91:95:b7:83:90:
                    fe:89:01:84:61:c8:ce:3c:b1:46:d8:a1:d9:d2:c2:
                    46:01:09:dd:28:63:6d:21:58:a4:77:30:1d:63:67:
                    d1:a8:96:8c:c7:93:66:2c:4f:82:fb:92:15:b6:76:
                    a0:13:a0:e7:23:39:ce:84:24:1e:bf:81:a4:0d:96:
                    b3:e3:12:79:d7:f3:59:54:3a:a8:bc:8d:77:1b:f1:
                    aa:4c:14:6f:ee:b7:ac:59:f4:44:b4:1e:ad:b4:0d:
                    85:9d:00:a2:4b:d2:b4:cf:62:5e:1a:6e:16:a3:79:
                    5f:d7:50:f1:f8:2d:fa:cf:08:15:61:b3:bd:d1:c5:
                    1f:a3:7a:11:88:ca:fd:68:d8:4a:8d:69:b7:59:a7:
                    a0:83:be:fa:2e:d7:50:cb:67:c8:73:ad:77:98:13:
                    ad:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:66:AE:F4:BF:A1:C8:C0:C7:4D:9C:66:0D:21:F3:43:FB:97:60:41
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3230322e302f32332d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:da:a7:50:25:b2:08:a8:55:80:c4:26:b3:92:9b:0a:60:af:
         80:cf:68:05:20:7a:2b:d2:b8:87:a1:bd:01:b5:e0:f1:74:88:
         c8:de:9e:d0:87:e3:0e:3b:1c:33:b6:29:fa:9b:ff:ea:44:2d:
         9e:82:a8:e5:f0:47:20:b1:26:e4:5e:db:71:7b:ea:c4:dd:94:
         f0:9c:82:7e:3e:42:44:1f:ff:bc:5e:1a:7f:ca:6d:9d:ec:c5:
         ab:c8:ad:f0:e3:ad:9c:f2:70:46:87:af:72:4f:19:16:f6:8a:
         ed:d7:63:ef:5a:c1:8e:35:17:0f:34:68:fd:84:bc:9d:13:0b:
         41:e3:72:e3:bf:f1:8b:10:5f:42:60:c7:4d:0c:70:ef:37:a1:
         ee:1e:03:1d:9e:ce:d1:80:9f:9e:ef:5c:2f:92:f9:78:a2:59:
         f0:40:bd:ee:6e:64:de:c5:b9:67:93:d3:b0:cc:f4:05:3d:95:
         33:61:fc:9a:03:f9:08:79:2c:d9:c8:0e:dd:3d:7c:a2:97:4a:
         80:9f:d4:7a:99:51:40:67:c2:79:d2:72:94:6f:1a:86:e9:5f:
         3f:44:91:dd:f8:ea:34:77:9b:8d:02:da:ae:c2:13:ce:1e:a9:
         a2:4f:fb:57:5d:84:89:71:a4:01:76:0f:47:75:bb:42:29:0c:
         a3:15:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----