Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa
File:                     3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa (raw, json)
Hash identifier:          v2cXnIo0nKkkWoOi4ClobTYPYtZKg5uM4CgLP46Bg80=
Subject key identifier:   5A:B4:21:83:10:13:26:0D:16:2B:57:2B:84:44:39:05:2D:0B:6D:70
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       788C7822F46A47EBF83E450D257397927252CB67
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:58 +0000
ROA not before:           Tue 05 Mar 2024 17:35:58 +0000
ROA not after:            Tue 04 Mar 2025 17:40:58 +0000
asID:                     262171
IP address blocks:        190.93.160.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8c:78:22:f4:6a:47:eb:f8:3e:45:0d:25:73:97:92:72:52:cb:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:58 2024 GMT
            Not After : Mar  4 17:40:58 2025 GMT
        Subject: CN=5AB421831013260D162B572B844439052D0B6D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:19:74:ef:af:a9:89:66:d9:74:3b:01:47:38:
                    92:67:0e:52:2c:70:10:d7:d5:5c:ff:12:95:79:e4:
                    f2:e2:2f:e9:30:69:98:44:27:6e:5d:23:97:50:b9:
                    ca:c4:f0:00:5a:ad:23:e5:2b:2c:d6:0c:9e:be:cd:
                    6f:11:e6:3a:85:20:1a:be:f8:00:d8:e5:07:13:0a:
                    c9:27:d6:37:d0:2d:e9:09:ea:c5:38:a0:b3:b9:cd:
                    7f:1b:f0:1c:ba:54:c4:cf:dd:35:8f:14:47:55:8f:
                    17:78:20:39:67:ac:14:1d:5e:0b:54:6f:a0:b3:ca:
                    5c:3c:0d:2c:bb:8d:5d:75:c7:56:04:62:9f:d8:19:
                    c5:ae:ee:7f:6d:57:cc:bb:0c:72:7d:ab:3b:85:17:
                    ec:e3:29:42:16:1d:f6:20:77:29:0f:86:90:fe:8f:
                    85:aa:7f:3e:c4:1e:d1:eb:4b:36:ca:64:d9:78:10:
                    0c:d1:59:4c:aa:2d:69:f8:eb:89:ea:61:fa:c0:00:
                    fa:af:77:2d:1b:9d:f6:c9:1c:1c:bb:7a:26:4c:32:
                    66:02:11:99:91:1d:eb:f9:3f:c1:ce:ad:08:2a:55:
                    b7:5d:7e:19:dd:d0:4e:a0:81:11:06:40:99:80:16:
                    c8:ce:c8:1a:df:4a:f8:ab:01:23:bc:7b:3c:28:71:
                    92:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B4:21:83:10:13:26:0D:16:2B:57:2B:84:44:39:05:2D:0B:6D:70
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136302e302f32302d3230203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:55:62:85:3c:6d:e9:45:99:d5:83:8c:9b:a5:1c:74:3f:
         2f:cf:de:2a:22:7b:55:ed:76:00:1b:51:2d:7b:15:b3:1f:a9:
         1e:5b:1a:dc:c8:df:ef:23:3e:4b:53:e3:f8:2e:51:e8:96:f5:
         cf:9e:eb:f2:fb:0d:41:aa:29:c5:c4:16:f2:9d:1a:83:ea:26:
         a9:91:6e:8d:66:ab:0c:fa:05:ac:b4:03:98:cd:70:3b:42:9d:
         0a:72:e7:24:41:f2:bc:d2:a0:15:b1:a3:10:5a:3c:39:59:20:
         f4:a3:cb:de:de:0a:fa:fa:4f:79:cf:1e:50:5d:c6:a9:54:0f:
         60:24:1f:77:80:4d:12:bd:d0:d4:83:9d:d8:2f:97:bd:28:28:
         94:54:75:9c:40:f6:63:fb:1e:cd:1f:45:85:b4:3f:89:9d:f0:
         ce:f1:c3:49:ea:17:cd:50:04:e9:dd:5e:de:0a:66:00:ab:e2:
         2b:43:89:80:22:c7:91:b2:87:73:53:b7:77:58:26:60:a1:cd:
         79:4e:74:5a:c0:ea:59:f8:f5:1f:3f:b1:da:0d:df:be:05:81:
         c7:43:4b:83:c7:c7:f8:09:17:0d:49:41:48:21:95:2f:f9:31:
         ae:1b:3c:51:8e:06:c9:9d:8e:18:16:05:16:87:e7:da:35:2d:
         93:30:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----