Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa
File:                     3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa (raw, json)
Hash identifier:          OooPFf1jOXdqdBBJOGuv2anm4aCK2MvO7QXJlnsNMH4=
Subject key identifier:   BC:21:11:AF:C7:2F:64:0C:02:AC:62:BA:8B:21:3B:5F:1C:80:F7:62
Certificate issuer:       /CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
Certificate serial:       6E2AC11F193FA9F8DAA87F61B140E707E16DEE37
Authority key identifier: 2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa
Signing time:             Tue 05 Mar 2024 18:12:27 +0000
ROA not before:           Tue 05 Mar 2024 18:07:27 +0000
ROA not after:            Tue 04 Mar 2025 18:12:27 +0000
asID:                     27895
IP address blocks:        190.104.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2a:c1:1f:19:3f:a9:f8:da:a8:7f:61:b1:40:e7:07:e1:6d:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FCBAA080E219C73F9BBF552D81B65C05063D427
        Validity
            Not Before: Mar  5 18:07:27 2024 GMT
            Not After : Mar  4 18:12:27 2025 GMT
        Subject: CN=BC2111AFC72F640C02AC62BA8B213B5F1C80F762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:41:6e:6b:7a:70:ae:2e:76:4d:aa:35:aa:64:
                    c0:a1:db:c2:84:7d:49:69:19:31:87:87:70:fb:37:
                    2e:aa:84:17:62:7d:08:dd:a1:8c:b0:2b:12:fd:60:
                    0a:9f:78:4e:f9:94:cd:a5:97:ae:32:0c:01:a9:52:
                    2b:b5:34:e2:72:e6:65:fc:49:19:87:ac:0a:be:2b:
                    b6:1a:08:38:1c:ba:75:2b:83:47:ad:85:5c:d8:b1:
                    1a:2a:dc:28:08:ac:cb:35:50:e5:32:81:13:38:de:
                    58:97:14:17:c9:33:be:f3:aa:22:7a:f6:66:35:49:
                    b8:ca:4f:80:af:2b:ed:26:27:9c:7b:c3:1e:66:a1:
                    e8:90:dc:34:9d:e1:21:57:8c:c5:b0:d4:25:3f:3a:
                    4e:25:47:24:ce:8e:81:9d:a4:4d:70:38:5c:22:91:
                    b5:8b:cf:db:3f:dc:a8:cf:10:85:3c:8d:29:9a:c9:
                    11:a0:84:78:68:c7:7b:29:f7:dd:56:a9:c6:f6:7f:
                    9c:79:c3:c1:ba:59:d2:cc:6c:0f:d6:1c:a0:57:2a:
                    5e:fb:35:82:f8:43:91:6a:da:7b:41:45:ed:e6:d5:
                    85:84:d8:f9:a2:5a:ca:5e:ff:6b:f3:61:bc:fc:8d:
                    f0:ef:98:15:cd:53:0b:52:50:ff:1f:73:28:3d:36:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:21:11:AF:C7:2F:64:0C:02:AC:62:BA:8B:21:3B:5F:1C:80:F7:62
            X509v3 Authority Key Identifier:
                keyid:2F:CB:AA:08:0E:21:9C:73:F9:BB:F5:52:D8:1B:65:C0:50:63:D4:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FCBAA080E219C73F9BBF552D81B65C05063D427.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BB0400453B5D17FC5377D1C17C38E3AA580246F00738022369D48007162DD2/0/3139302e3130342e3132382e302f31382d3234203d3e203237383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         13:72:4a:df:af:3a:26:f8:0c:51:5c:72:ff:23:04:32:5f:97:
         7b:3b:2d:5e:ad:8c:e7:30:f9:8f:b9:76:06:dc:31:4a:c6:63:
         7a:ee:4b:42:7a:8a:6d:b6:af:3c:3c:6b:02:18:2b:91:b7:f9:
         4a:c1:3e:73:73:0f:77:73:b2:a6:1a:e9:d0:ab:c8:66:8a:2f:
         ba:f7:66:c4:e2:6c:97:69:20:94:14:f5:02:6f:a1:74:26:90:
         f9:af:2b:83:ab:8a:8f:18:92:70:9a:d0:6a:24:7d:a3:73:4f:
         60:dc:e2:58:69:2e:c4:10:c4:2b:17:8a:81:97:61:a2:19:28:
         75:0e:fb:0b:50:1a:47:7f:e2:d6:00:aa:fe:aa:40:74:13:2c:
         f6:8f:67:94:26:c0:d8:93:22:05:39:3a:9f:2b:52:41:d0:54:
         a4:b6:41:6d:a1:a3:16:a8:35:77:0c:53:de:76:20:a1:27:e8:
         86:6c:13:f7:da:06:5a:a7:b9:7c:34:2f:74:f2:00:8f:7b:26:
         9a:42:f7:21:63:1c:93:1f:41:b6:2a:bc:da:88:a1:e3:c4:3b:
         bd:7d:c7:23:da:27:a0:7f:3a:95:e4:81:83:ff:60:6a:c8:3b:
         e3:52:98:43:57:4f:e9:cd:15:c7:1b:5d:5b:6b:e7:e2:0d:b6:
         c4:60:49:92
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbirBHxk/qfjaqH9hsUDnB+Ft7jcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZDQkFBMDgwRTIxOUM3M0Y5QkJGNTUyRDgxQjY1QzA1
MDYzRDQyNzAeFw0yNDAzMDUxODA3MjdaFw0yNTAzMDQxODEyMjdaMDMxMTAvBgNV
BAMTKEJDMjExMUFGQzcyRjY0MEMwMkFDNjJCQThCMjEzQjVGMUM4MEY3NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlQW5renCuLnZNqjWqZMCh28KE
fUlpGTGHh3D7Ny6qhBdifQjdoYywKxL9YAqfeE75lM2ll64yDAGpUiu1NOJy5mX8
SRmHrAq+K7YaCDgcunUrg0ethVzYsRoq3CgIrMs1UOUygRM43liXFBfJM77zqiJ6
9mY1SbjKT4CvK+0mJ5x7wx5moeiQ3DSd4SFXjMWw1CU/Ok4lRyTOjoGdpE1wOFwi
kbWLz9s/3KjPEIU8jSmayRGghHhox3sp991Wqcb2f5x5w8G6WdLMbA/WHKBXKl77
NYL4Q5Fq2ntBRe3m1YWE2PmiWspe/2vzYbz8jfDvmBXNUwtSUP8fcyg9NgwpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUvCERr8cvZAwCrGK6iyE7XxyA92IwHwYDVR0j
BBgwFoAUL8uqCA4hnHP5u/VS2BtlwFBj1CcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMEJCMDQwMDQ1M0I1RDE3RkM1Mzc3RDFDMTdDMzhFM0FB
NTgwMjQ2RjAwNzM4MDIyMzY5RDQ4MDA3MTYyREQyLzAvMkZDQkFBMDgwRTIxOUM3
M0Y5QkJGNTUyRDgxQjY1QzA1MDYzRDQyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkNCQUEwODBFMjE5QzczRjlC
QkY1NTJEODFCNjVDMDUwNjNENDI3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTBCQjA0MDA0NTNCNUQxN0ZDNTM3N0QxQzE3QzM4RTNBQTU4MDI0NkYw
MDczODAyMjM2OUQ0ODAwNzE2MkREMi8wLzMxMzkzMDJlMzEzMDM0MmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMjM3MzgzOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvmiA
MA0GCSqGSIb3DQEBCwUAA4IBAQATckrfrzom+AxRXHL/IwQyX5d7Oy1erYznMPmP
uXYG3DFKxmN67ktCeopttq88PGsCGCuRt/lKwT5zcw93c7KmGunQq8hmii+692bE
4myXaSCUFPUCb6F0JpD5ryuDq4qPGJJwmtBqJH2jc09g3OJYaS7EEMQrF4qBl2Gi
GSh1DvsLUBpHf+LWAKr+qkB0Eyz2j2eUJsDYkyIFOTqfK1JB0FSktkFtoaMWqDV3
DFPediChJ+iGbBP32gZap7l8NC908gCPeyaaQvchYxyTH0G2KrzaiKHjxDu9fccj
2iegfzqV5IGD/2BqyDvjUphDV0/pzRXHG11ba+fiDbbEYEmS
-----END CERTIFICATE-----