Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa
File:                     3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa (raw, json)
Hash identifier:          t1VbO1/JPA3gZFM/WusiOA1jBeuRjIsXyJ+z39oRSB0=
Subject key identifier:   3C:1F:B0:43:A7:EC:4C:2A:DD:AF:31:F6:FA:E5:B5:60:88:B4:37:87
Certificate issuer:       /CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
Certificate serial:       51BD366CFB59450B4051799E98E5FE83B96678EA
Authority key identifier: BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa
Signing time:             Tue 05 Mar 2024 18:19:04 +0000
ROA not before:           Tue 05 Mar 2024 18:14:04 +0000
ROA not after:            Tue 04 Mar 2025 18:19:04 +0000
asID:                     262181
IP address blocks:        190.185.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:bd:36:6c:fb:59:45:0b:40:51:79:9e:98:e5:fe:83:b9:66:78:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA
        Validity
            Not Before: Mar  5 18:14:04 2024 GMT
            Not After : Mar  4 18:19:04 2025 GMT
        Subject: CN=3C1FB043A7EC4C2ADDAF31F6FAE5B56088B43787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:67:2f:39:c5:2c:36:00:8b:bf:fe:85:a2:aa:
                    d1:fa:f8:98:ea:36:6f:f9:ff:2c:6b:5b:77:98:5b:
                    93:df:f5:36:99:8b:c4:e8:dc:c0:ed:0c:2b:03:b9:
                    74:9f:2f:ae:a0:27:a5:65:55:18:50:39:71:d0:28:
                    a3:5e:2d:51:b2:cb:b1:4e:87:be:fe:1d:6d:b1:45:
                    d1:db:fb:98:48:6c:0f:31:1b:c1:4a:fa:2d:b1:d1:
                    75:6a:58:a2:f6:6e:d7:38:74:fc:3f:cd:eb:d0:00:
                    ea:2e:8f:1f:49:57:11:b0:fe:45:1f:ca:a6:42:8b:
                    24:d9:34:2e:57:3d:81:74:f5:a9:0e:a8:cf:d7:70:
                    bb:97:42:f2:44:b1:db:b9:fe:f8:df:bd:69:76:98:
                    d1:22:b7:71:70:71:76:da:9f:7e:3b:ea:29:0b:19:
                    28:32:f4:84:99:51:f0:fa:56:a6:ad:18:9d:3d:8d:
                    53:37:0e:c2:8c:9a:82:4d:f1:08:d9:93:c8:43:83:
                    ee:5f:68:cc:0e:71:98:f2:70:17:be:07:44:6c:74:
                    7a:c8:38:e9:5e:ae:bf:be:b2:47:78:4c:e5:ec:fc:
                    4d:a1:01:14:74:19:41:6d:fb:7f:dd:ad:21:1d:49:
                    2b:ec:4f:54:7c:a0:e7:74:f5:bc:8d:7a:5a:54:83:
                    49:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:B0:43:A7:EC:4C:2A:DD:AF:31:F6:FA:E5:B5:60:88:B4:37:87
            X509v3 Authority Key Identifier:
                keyid:BF:28:4D:70:A6:F9:C8:8D:A8:EA:14:5D:79:F3:08:EF:8A:10:AF:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BF284D70A6F9C88DA8EA145D79F308EF8A10AFEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73ED473AF9BBD87C3ED55C9048ACD65916EFF8011AD0B5840D9160DE313F83F8/0/3139302e3138352e38302e302f32302d3234203d3e20323632313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:50:74:8b:ec:91:ff:3d:96:fb:0e:f8:e7:b2:43:a3:b7:
         6f:22:85:03:b7:b5:4d:2f:58:91:cb:60:81:0e:b3:e1:41:71:
         75:28:ad:ca:21:5f:71:8b:d6:a3:90:d3:bd:3b:c0:eb:21:95:
         78:a2:72:8d:0a:6d:13:df:54:92:e6:f9:2a:ae:01:03:6d:48:
         7e:ac:f5:ef:2f:e1:c4:61:d7:97:92:fd:38:44:78:4c:40:63:
         97:a9:17:86:97:e2:cd:ac:a7:e9:8f:67:16:a7:3e:cc:1f:70:
         22:88:9d:9a:f8:6c:90:dd:75:90:6b:82:66:9a:4a:ee:c6:15:
         d6:7e:09:59:44:da:d2:56:1d:3b:11:d5:88:a0:78:8a:fe:77:
         27:a6:df:e6:69:ee:1f:84:60:bb:74:17:bb:a3:e3:c7:35:6d:
         e2:af:b8:ee:cd:ad:16:24:2d:7c:a2:ee:a6:6f:e7:2b:c3:05:
         8b:a4:5d:21:90:04:54:88:f2:1d:4e:e6:6c:4c:31:51:8c:b9:
         15:42:17:6d:43:ab:c8:ff:4a:a0:93:8f:c4:02:e4:5d:ba:60:
         18:a8:8e:1e:a3:d5:48:a4:6d:36:d4:64:6a:29:b8:d7:5c:94:
         4f:08:73:0f:76:31:93:81:35:b9:80:2d:a6:29:37:d4:65:8c:
         4b:2f:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----