Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e3135342e302e302f31352d3234203d3e203134353232.roa
File:                     3139302e3135342e302e302f31352d3234203d3e203134353232.roa (raw, json)
Hash identifier:          M3L9AMcKh3O1Ymk9uhMz80wem6uXOVggnJsx7sr1PKE=
Subject key identifier:   E7:1B:3F:79:82:D2:FD:FB:0B:54:5E:D2:1B:C1:E3:C2:61:F8:93:32
Certificate issuer:       /CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
Certificate serial:       0E12CDC6D11F9C5BD58B9E2F40A35C0F7B5C8F94
Authority key identifier: 82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e3135342e302e302f31352d3234203d3e203134353232.roa
Signing time:             Tue 05 Mar 2024 18:20:51 +0000
ROA not before:           Tue 05 Mar 2024 18:15:51 +0000
ROA not after:            Tue 04 Mar 2025 18:20:51 +0000
asID:                     14522
IP address blocks:        190.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:12:cd:c6:d1:1f:9c:5b:d5:8b:9e:2f:40:a3:5c:0f:7b:5c:8f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822F4455E9726CC3D6DCD4143A6D9F1773F8A36F
        Validity
            Not Before: Mar  5 18:15:51 2024 GMT
            Not After : Mar  4 18:20:51 2025 GMT
        Subject: CN=E71B3F7982D2FDFB0B545ED21BC1E3C261F89332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:17:4a:91:f9:45:23:aa:b7:ca:7c:fc:b7:
                    69:e2:3c:60:3d:87:f7:39:b2:96:c9:71:28:ea:87:
                    fa:9a:6d:de:79:46:10:a6:aa:2e:df:a6:bf:1a:b8:
                    8a:b1:a8:5e:2e:28:0f:8b:6b:e3:3d:a0:cd:fb:9f:
                    d7:3b:19:07:77:87:88:65:1e:37:56:04:ea:e4:e4:
                    dd:84:8e:2a:f6:40:10:f1:dc:48:95:99:bf:c3:0e:
                    25:b2:cc:82:8a:a3:d4:1a:de:91:59:73:d0:f6:8a:
                    06:5f:03:0c:4a:e6:58:34:66:e0:c2:0a:16:48:fb:
                    1d:d6:20:da:34:60:32:19:dc:9d:17:db:a2:6a:b2:
                    27:bf:33:12:5a:e2:7a:87:c7:be:68:cb:f1:84:45:
                    0b:fb:f3:64:e8:13:b5:76:de:bd:c1:7c:04:d3:b6:
                    88:8a:af:41:36:36:c7:92:1d:37:68:74:69:dd:b8:
                    f1:da:e4:01:98:b8:38:51:f7:c0:b4:17:08:22:a0:
                    bd:a8:aa:f0:2a:37:99:f8:67:31:5b:a4:eb:4f:69:
                    17:72:d2:1a:b6:cd:0e:d0:7d:5f:93:c6:ef:52:2f:
                    d7:c7:ec:f8:8d:ee:9c:f0:b1:41:a3:34:54:d3:a3:
                    7e:29:24:3b:e4:d5:23:53:d1:9c:38:c4:04:67:77:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1B:3F:79:82:D2:FD:FB:0B:54:5E:D2:1B:C1:E3:C2:61:F8:93:32
            X509v3 Authority Key Identifier:
                keyid:82:2F:44:55:E9:72:6C:C3:D6:DC:D4:14:3A:6D:9F:17:73:F8:A3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/822F4455E9726CC3D6DCD4143A6D9F1773F8A36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/748D698B243A0964A4ECEB7F9337590AF93C138D8656A80896B6E416B9B1FD9C/0/3139302e3135342e302e302f31352d3234203d3e203134353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.154.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         8a:0c:fd:36:79:26:b5:78:a1:5a:6b:2b:22:61:b7:f6:e1:3c:
         5f:b2:81:4e:3d:0a:24:46:0f:21:c8:d3:c6:ec:9e:45:0a:3e:
         75:72:b8:db:aa:37:5e:93:e3:c8:58:d1:c5:10:72:f7:38:4f:
         15:be:98:54:28:eb:b9:0a:2f:39:ab:f3:10:a0:ca:d9:fd:59:
         ee:e9:2e:07:0a:d0:8b:58:64:b6:21:b4:ed:23:fc:a9:ca:f8:
         10:e2:80:fb:df:98:88:d0:a0:d8:db:04:00:74:7c:dc:28:fd:
         30:a8:b1:78:67:b3:54:59:90:49:95:82:0f:bc:6f:9c:f5:8a:
         49:0a:73:35:59:81:06:5e:f3:74:f4:a4:81:18:84:28:c3:6b:
         3b:83:ef:f4:9f:ba:dc:03:9b:ff:d7:14:02:83:98:28:17:97:
         19:f9:72:0c:e3:fb:5f:2a:65:86:02:b3:c0:54:ff:e5:84:f8:
         06:af:81:11:1f:49:aa:97:14:97:9a:06:3d:31:b1:4e:b1:7b:
         26:02:67:0a:30:63:54:2f:4a:9e:8c:1c:a0:b0:88:45:a9:99:
         3c:5d:a1:ee:43:2b:fb:dd:30:ad:9d:59:7f:56:b7:1f:b9:37:
         d0:29:60:4a:33:bd:11:5e:5c:44:ac:59:75:15:2d:e9:ae:1c:
         01:9b:9c:f2
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUDhLNxtEfnFvVi54vQKNcD3tcj5QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyRjQ0NTVFOTcyNkNDM0Q2RENENDE0M0E2RDlGMTc3
M0Y4QTM2RjAeFw0yNDAzMDUxODE1NTFaFw0yNTAzMDQxODIwNTFaMDMxMTAvBgNV
BAMTKEU3MUIzRjc5ODJEMkZERkIwQjU0NUVEMjFCQzFFM0MyNjFGODkzMzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVRdKkflFI6q3ynz8t2niPGA9
h/c5spbJcSjqh/qabd55RhCmqi7fpr8auIqxqF4uKA+La+M9oM37n9c7GQd3h4hl
HjdWBOrk5N2Ejir2QBDx3EiVmb/DDiWyzIKKo9Qa3pFZc9D2igZfAwxK5lg0ZuDC
ChZI+x3WINo0YDIZ3J0X26Jqsie/MxJa4nqHx75oy/GERQv782ToE7V23r3BfATT
toiKr0E2NseSHTdodGnduPHa5AGYuDhR98C0FwgioL2oqvAqN5n4ZzFbpOtPaRdy
0hq2zQ7QfV+Txu9SL9fH7PiN7pzwsUGjNFTTo34pJDvk1SNT0Zw4xARndyYhAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU5xs/eYLS/fsLVF7SG8HjwmH4kzIwHwYDVR0j
BBgwFoAUgi9EVelybMPW3NQUOm2fF3P4o28wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NDhENjk4QjI0M0EwOTY0QTRFQ0VCN0Y5MzM3NTkwQUY5
M0MxMzhEODY1NkE4MDg5NkI2RTQxNkI5QjFGRDlDLzAvODIyRjQ0NTVFOTcyNkND
M0Q2RENENDE0M0E2RDlGMTc3M0Y4QTM2Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84MjJGNDQ1NUU5NzI2Q0MzRDZE
Q0Q0MTQzQTZEOUYxNzczRjhBMzZGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzQ4RDY5OEIyNDNBMDk2NEE0RUNFQjdGOTMzNzU5MEFGOTNDMTM4RDg2
NTZBODA4OTZCNkU0MTZCOUIxRkQ5Qy8wLzMxMzkzMDJlMzEzNTM0MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzQzNTMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG+mjANBgkq
hkiG9w0BAQsFAAOCAQEAigz9NnkmtXihWmsrImG39uE8X7KBTj0KJEYPIcjTxuye
RQo+dXK426o3XpPjyFjRxRBy9zhPFb6YVCjruQovOavzEKDK2f1Z7ukuBwrQi1hk
tiG07SP8qcr4EOKA+9+YiNCg2NsEAHR83Cj9MKixeGezVFmQSZWCD7xvnPWKSQpz
NVmBBl7zdPSkgRiEKMNrO4Pv9J+63AOb/9cUAoOYKBeXGflyDOP7XyplhgKzwFT/
5YT4Bq+BER9JqpcUl5oGPTGxTrF7JgJnCjBjVC9KnowcoLCIRamZPF2h7kMr+90w
rZ1Zf1a3H7k30ClgSjO9EV5cRKxZdRUt6a4cAZuc8g==
-----END CERTIFICATE-----