Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136392e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136392e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          kGHG3Dx+5LKlH7eiYHQko9oqbUMN+JhMMhoVt6/qzls=
Subject key identifier:   5C:DE:08:7C:01:FA:BE:56:8D:19:7C:89:FE:6D:94:60:E5:A1:C3:24
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       583D64A7DE296546C5A21BF93728D72139426CC1
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136392e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 05 Mar 2024 17:40:56 +0000
ROA not before:           Tue 05 Mar 2024 17:35:56 +0000
ROA not after:            Tue 04 Mar 2025 17:40:56 +0000
asID:                     262171
IP address blocks:        190.93.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:3d:64:a7:de:29:65:46:c5:a2:1b:f9:37:28:d7:21:39:42:6c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Mar  5 17:35:56 2024 GMT
            Not After : Mar  4 17:40:56 2025 GMT
        Subject: CN=5CDE087C01FABE568D197C89FE6D9460E5A1C324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:95:19:59:f2:b7:6e:53:65:a5:4f:92:50:21:
                    9d:ad:90:c9:1c:23:5d:50:d0:8b:b3:b1:ce:5d:69:
                    c0:49:17:68:dd:b3:16:0b:a1:99:e7:ff:b6:5f:fc:
                    6f:44:6a:87:e1:1b:e9:af:42:35:fb:d7:9f:ed:03:
                    62:31:a2:6d:3a:b4:23:ed:3f:02:cb:2c:83:c5:cd:
                    51:24:bd:d1:4a:d7:29:8b:2f:28:b6:bd:a4:6a:00:
                    bd:1e:61:ed:56:f7:fe:5f:03:38:0c:cc:5b:cd:d6:
                    08:1d:e3:f8:98:bf:fc:f3:be:66:c4:20:0a:6d:d8:
                    05:fe:5d:ec:98:2d:e8:83:fd:d7:68:75:af:2c:43:
                    b8:73:3b:6c:b9:6f:68:ab:aa:0e:38:e0:f3:f1:f2:
                    a6:dc:0d:1d:a9:76:75:0d:18:4e:ce:47:a0:b4:c9:
                    c1:6d:c3:89:93:98:bb:d1:7e:ac:84:f7:e0:53:e7:
                    72:44:3a:fb:c8:7d:c2:a4:8c:38:d7:fe:ef:4b:96:
                    ec:80:3f:7c:66:58:f7:0c:fb:da:53:b3:be:ce:0e:
                    78:13:ec:5d:80:39:79:23:82:e5:00:36:12:cd:af:
                    5a:bf:c9:61:5b:6c:a7:3d:ec:48:ce:ce:30:9e:bf:
                    4c:fa:d2:32:cf:25:1f:44:15:34:f3:53:a5:e1:a9:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DE:08:7C:01:FA:BE:56:8D:19:7C:89:FE:6D:94:60:E5:A1:C3:24
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136392e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:74:75:18:59:9c:fa:79:21:e9:b3:84:12:99:07:f6:43:
         42:2e:89:6a:52:80:95:41:4d:87:6f:4d:26:df:e5:a4:40:81:
         5f:8c:74:b1:88:ad:43:b9:9b:69:67:44:c7:3d:4a:42:74:8e:
         99:93:ad:cb:c3:f2:fc:d0:46:7e:72:61:30:b9:e2:1a:c2:8a:
         94:9c:cd:8f:a5:3d:1e:95:4a:8a:dc:70:9f:cc:e9:34:25:d4:
         e7:08:17:6f:df:23:86:b4:37:cd:8e:aa:55:94:78:e9:bf:f5:
         fb:95:80:69:0d:63:8d:bb:21:04:c9:f7:38:a1:5a:bf:9f:b6:
         eb:34:32:43:9f:ee:d9:51:04:a8:6c:0c:c2:48:f2:75:8f:fe:
         ac:80:c4:6f:e5:e4:28:24:e8:63:84:b0:09:21:53:df:0c:c4:
         6f:d2:c9:9a:dd:77:7d:1b:9d:6a:f3:d4:9d:28:5a:0b:ee:8c:
         00:96:4c:6d:7f:72:00:12:51:f5:e5:41:ab:38:f3:c6:9e:af:
         ce:7b:8a:a5:50:dd:2d:a4:cc:ca:57:69:5d:9f:ea:0a:75:fa:
         13:78:95:74:18:99:7c:c7:83:90:ab:96:24:bc:ce:86:ae:8e:
         af:4e:10:b1:99:69:40:be:72:7e:c3:36:89:3d:0d:28:bc:6e:
         11:96:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----