Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
File:                     3139302e3136342e302e302f31362d3234203d3e203232303437.roa (raw, json)
Hash identifier:          OGQI1ixw0RbvG9ggeadAOb02PVzgE+Ou6FinHENBDVs=
Subject key identifier:   95:72:B1:1A:D8:59:16:60:7C:4C:FB:15:8E:5C:CC:0A:62:FF:BF:BB
Certificate issuer:       /CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
Certificate serial:       7A93DC25AF6678FBE046318389B3C428B3EB1DFC
Authority key identifier: F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa
Signing time:             Tue 05 Mar 2024 18:09:22 +0000
ROA not before:           Tue 05 Mar 2024 18:04:22 +0000
ROA not after:            Tue 04 Mar 2025 18:09:22 +0000
asID:                     22047
IP address blocks:        190.164.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:93:dc:25:af:66:78:fb:e0:46:31:83:89:b3:c4:28:b3:eb:1d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5C85A7B72BB385E9CBD144A5858312E0797036F
        Validity
            Not Before: Mar  5 18:04:22 2024 GMT
            Not After : Mar  4 18:09:22 2025 GMT
        Subject: CN=9572B11AD85916607C4CFB158E5CCC0A62FFBFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:fe:85:c3:7d:cb:9f:2e:52:62:fe:0c:c0:
                    86:c1:c6:01:b2:09:40:c9:b4:e3:0b:06:bd:6e:ad:
                    2d:8e:a1:11:dc:41:7e:ef:c5:db:20:fb:55:c1:cb:
                    43:38:ea:dc:38:01:bc:97:f4:4f:58:e3:46:c2:2c:
                    f1:f4:37:93:07:30:26:ee:7c:b5:b8:aa:a5:38:3f:
                    a7:b1:ec:51:89:40:f6:4b:de:8d:b5:93:90:06:5f:
                    f1:99:0a:00:6f:e8:5d:60:34:c9:7e:fd:bc:10:cb:
                    23:b6:14:16:44:72:79:0c:b7:c1:57:f8:f3:1e:6d:
                    70:a8:12:d2:02:8e:81:e0:fa:85:38:87:83:76:49:
                    a3:d3:ec:85:24:db:aa:fa:d3:5d:c7:44:0c:e2:c7:
                    65:47:53:56:f2:d3:eb:2d:d1:a8:59:d1:74:58:cb:
                    ff:9e:03:74:c8:60:ad:f5:c6:f0:94:59:3a:e0:b9:
                    54:38:70:da:95:f3:fe:b8:28:5c:06:71:4b:92:ce:
                    d9:be:1c:7c:ad:ac:02:e5:06:d1:fd:fd:73:ca:a4:
                    cb:60:fc:32:de:e3:8a:71:79:c7:62:9b:cb:41:a2:
                    5b:3e:91:e0:8d:b8:13:aa:62:69:df:fd:da:61:f8:
                    3e:50:28:7b:ed:35:e5:f7:7e:0d:22:3a:3d:bf:34:
                    37:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:72:B1:1A:D8:59:16:60:7C:4C:FB:15:8E:5C:CC:0A:62:FF:BF:BB
            X509v3 Authority Key Identifier:
                keyid:F5:C8:5A:7B:72:BB:38:5E:9C:BD:14:4A:58:58:31:2E:07:97:03:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5C85A7B72BB385E9CBD144A5858312E0797036F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/794418365D334074A548836C11C067A312F99CA84C30CC293AFFA52625B3585D/0/3139302e3136342e302e302f31362d3234203d3e203232303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:af:1d:a5:2b:9a:45:16:bc:58:e9:67:69:71:59:a2:6e:8c:
         be:62:6c:fb:f1:b8:0a:2d:7b:13:de:7b:cf:17:67:a6:b0:8e:
         fc:b5:27:e8:9a:e2:94:b6:25:68:63:3d:24:cc:1c:98:5b:16:
         e3:cf:dd:53:eb:a8:82:45:3f:b9:2c:d1:87:a1:cd:ad:6d:72:
         4c:5d:72:ae:d5:3c:fd:8a:db:ed:37:69:64:00:1b:06:ce:27:
         55:a3:80:71:37:15:84:e7:48:76:1d:a5:36:53:d1:aa:c7:30:
         45:63:62:b3:28:8a:ed:67:83:be:ab:8e:3d:f0:41:66:58:16:
         fc:92:dc:ea:da:a1:38:99:14:51:bd:89:0b:23:23:59:6e:f3:
         43:bf:37:61:43:dc:88:cb:be:00:20:56:e6:d3:4e:0f:45:22:
         03:d3:92:a9:ab:cf:ce:18:cc:01:4a:e6:a7:77:43:ac:5a:8e:
         5a:f3:53:ea:5e:00:3f:98:a4:b8:ab:58:fd:06:c9:fe:3e:5b:
         06:89:66:d2:59:7a:22:28:de:cb:ff:ae:a4:77:a3:35:4d:12:
         0f:cf:d5:c9:55:d0:d6:95:37:0a:ac:e5:62:2c:fd:95:78:03:
         cf:0b:d9:16:6b:64:7f:2f:41:e3:07:18:95:6d:57:ac:30:49:
         e1:5b:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----