Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139342e302f32332d3234203d3e203237363530.roa
File:                     3139302e352e3139342e302f32332d3234203d3e203237363530.roa (raw, json)
Hash identifier:          OvVrdGIRvh1C/KABV273FEP3Z/Mdpjc6XO8tj2YoXKg=
Subject key identifier:   73:3F:B5:E7:40:51:C0:4C:20:43:C7:BE:A5:58:33:A5:E1:30:66:74
Certificate issuer:       /CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
Certificate serial:       1761E98510A340B9621CAD941B4AEDA0CAC26187
Authority key identifier: 9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139342e302f32332d3234203d3e203237363530.roa
Signing time:             Tue 05 Mar 2024 18:03:09 +0000
ROA not before:           Tue 05 Mar 2024 17:58:09 +0000
ROA not after:            Tue 04 Mar 2025 18:03:09 +0000
asID:                     27650
IP address blocks:        190.5.194.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:61:e9:85:10:a3:40:b9:62:1c:ad:94:1b:4a:ed:a0:ca:c2:61:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B09522889B28F5D8574B9F59BD3C8CD01400081
        Validity
            Not Before: Mar  5 17:58:09 2024 GMT
            Not After : Mar  4 18:03:09 2025 GMT
        Subject: CN=733FB5E74051C04C2043C7BEA55833A5E1306674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:d8:c9:7c:28:c2:f6:84:52:84:25:f5:f9:
                    5a:56:cd:ee:41:ae:ae:e1:31:8c:f4:cb:bf:6d:5b:
                    64:da:38:28:1a:60:e8:6f:8e:92:2b:ef:c0:2f:0e:
                    c2:6a:34:65:ec:13:6f:9b:96:74:ed:22:c5:8f:de:
                    d3:55:e6:7b:4f:a1:0f:66:c3:d9:58:d0:f6:d1:d4:
                    3c:72:f5:ae:4f:4b:42:a2:b0:36:d4:d9:22:38:8e:
                    0f:39:e3:9d:37:48:61:0c:52:6d:6c:ee:d1:6e:1a:
                    88:62:f6:41:bc:e5:90:d0:da:da:83:58:05:74:9d:
                    0e:7c:f7:69:56:1c:1d:45:84:ce:c4:d6:8a:d2:7f:
                    11:79:c5:10:6f:f3:b7:f0:bb:0e:1c:22:49:53:28:
                    77:34:8b:28:35:48:41:64:13:72:05:30:bb:99:26:
                    5a:a0:80:53:d9:ca:7b:eb:df:b0:10:77:80:d8:72:
                    f1:5d:0f:0e:47:a0:8c:02:fd:77:34:d8:80:a0:19:
                    59:94:32:0c:5a:5e:c0:06:53:3a:68:9b:03:5a:aa:
                    f8:ab:6f:66:24:b2:58:d1:41:1c:68:81:da:77:c6:
                    1e:67:8b:84:01:9c:d1:63:c8:dc:e7:38:b1:0f:0e:
                    40:9d:0f:89:d0:33:f5:a4:de:cc:41:9d:a3:99:fe:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3F:B5:E7:40:51:C0:4C:20:43:C7:BE:A5:58:33:A5:E1:30:66:74
            X509v3 Authority Key Identifier:
                keyid:9B:09:52:28:89:B2:8F:5D:85:74:B9:F5:9B:D3:C8:CD:01:40:00:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B09522889B28F5D8574B9F59BD3C8CD01400081.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71952FE7B18CE27775B13403874A6EB99BF4C577597262CDF1E6E30104F69FAB/0/3139302e352e3139342e302f32332d3234203d3e203237363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:98:5b:5c:78:a9:86:6c:c7:a0:07:31:e6:5d:9a:23:fc:
         9b:95:04:45:f3:d5:1a:a5:9f:75:16:1c:2d:ee:19:db:62:1d:
         61:83:15:c7:8b:de:12:a1:9b:01:aa:74:20:0c:d1:4e:8d:fb:
         5f:31:9e:5c:27:e7:95:8e:f1:99:0b:b1:95:fa:c2:c5:0c:ee:
         3a:38:24:bc:05:bb:ad:cb:46:66:93:37:7b:78:0e:4f:72:de:
         41:0b:82:c4:78:6d:ae:94:dc:13:13:39:67:19:7e:5c:a9:b9:
         ea:d4:6c:0b:c4:58:fe:8c:66:a9:79:9a:41:33:0b:e4:42:93:
         df:08:1c:e9:81:6e:dd:df:c0:59:8c:a7:31:f7:7f:f4:c8:25:
         7b:ab:6f:40:27:93:ac:69:b3:0f:51:09:4e:72:70:7d:32:7c:
         be:b2:c6:26:bd:5d:11:d1:0d:98:51:ec:a8:5e:91:f2:3f:c5:
         f2:d7:9d:71:15:c3:76:6e:df:0f:d6:10:1c:34:ac:ae:15:c6:
         4f:b7:cd:3b:8c:78:f1:2b:9e:a1:65:4c:8b:57:15:1b:18:05:
         50:9c:41:27:b4:bb:62:48:9e:d1:c8:6f:9b:c7:7c:44:31:c2:
         5c:37:48:63:13:d8:12:09:47:82:b5:02:60:1d:b8:9d:62:b4:
         05:49:6f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----