Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa
File:                     3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa (raw, json)
Hash identifier:          UZTv5nuLY4I0hC/zZ4qlxsnxHt8xzxzq/yzP2xbbB8E=
Subject key identifier:   9B:42:1B:B1:D7:7F:D4:8C:81:5A:8D:47:0A:95:A3:CD:43:22:67:D9
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       4D78DAC61AAD20A7FD774E4B36F5E81A5C2E5799
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:43 +0000
ROA not before:           Tue 05 Mar 2024 17:39:43 +0000
ROA not after:            Tue 04 Mar 2025 17:44:43 +0000
asID:                     27843
IP address blocks:        190.102.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:78:da:c6:1a:ad:20:a7:fd:77:4e:4b:36:f5:e8:1a:5c:2e:57:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:43 2024 GMT
            Not After : Mar  4 17:44:43 2025 GMT
        Subject: CN=9B421BB1D77FD48C815A8D470A95A3CD432267D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:85:b0:4b:20:f4:80:3a:85:05:6f:48:47:41:
                    bb:11:a8:7d:10:5d:3d:e0:3d:59:a1:f6:9e:a8:43:
                    ad:a0:c3:9c:9a:f9:3b:a3:2e:2b:80:b0:56:a3:0a:
                    f3:da:48:3b:21:ef:e4:8e:35:67:80:bf:9f:d8:0e:
                    f9:3e:42:11:5d:e0:bf:31:87:50:69:e0:9d:4a:8d:
                    ee:82:bd:4e:b3:8e:78:92:56:09:e8:50:91:3e:42:
                    44:7f:88:2b:17:f9:14:bd:df:10:1d:c6:a5:b5:e6:
                    63:6f:0a:3c:8a:08:19:4d:60:60:de:1e:81:43:3d:
                    d8:29:0b:ef:1d:ed:9c:b1:28:7a:56:9c:7e:20:a9:
                    f6:92:29:6b:b8:b7:98:c0:3c:91:21:a3:c7:9d:3c:
                    10:fa:9f:47:85:c7:ca:80:f1:3f:dd:ab:cc:de:f0:
                    ce:38:de:1e:03:d8:b8:1c:74:6a:5d:c6:fd:72:35:
                    d6:6c:34:9b:01:4f:73:14:b7:96:08:c1:69:78:de:
                    c2:11:c4:8e:53:eb:33:cd:c6:51:6f:63:60:a0:04:
                    9c:d0:95:2d:da:c8:3e:52:14:dc:61:e6:78:2c:47:
                    03:07:a9:87:af:b6:6e:b4:dc:18:22:74:c3:ad:24:
                    70:9b:6e:8a:90:cf:27:35:51:5f:2f:37:41:7e:6a:
                    ff:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:42:1B:B1:D7:7F:D4:8C:81:5A:8D:47:0A:95:A3:CD:43:22:67:D9
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e3130322e3132382e302f31392d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:9a:86:bf:3d:8d:69:d2:0d:5d:77:63:b3:6c:bf:5b:97:6f:
         ae:72:7f:b6:c9:b5:85:e2:8c:4d:b3:ce:5c:4c:3c:e3:cf:40:
         90:4c:b8:c5:fc:1e:a4:88:10:cc:2d:a5:8c:f4:b4:41:4e:f6:
         73:3e:e2:f8:14:bd:f7:8b:ec:f0:dc:2a:95:90:4d:f9:6c:95:
         c8:be:04:b2:08:fb:d9:73:28:d0:c5:5a:11:10:fb:eb:7b:ce:
         93:ab:75:c2:91:d1:6d:91:63:e5:86:c1:6d:9c:44:fb:4b:85:
         c4:26:a7:e7:97:e5:6a:a0:de:42:af:5a:76:2b:b1:8b:51:96:
         47:b1:d8:63:db:fe:ab:a2:ff:dc:7c:c8:5f:3b:cb:7c:2a:b5:
         d7:a6:ac:4c:63:00:59:8d:3a:69:6a:d5:97:bb:99:a1:0f:75:
         8e:56:27:6f:fb:e8:c8:0a:72:1d:34:8e:0b:1c:7c:15:ae:5c:
         0e:b9:b9:1c:5c:e2:ee:01:a9:08:6b:2b:f0:b5:a5:de:3c:69:
         84:a5:d5:01:93:93:a5:ca:4b:ac:8b:31:04:ec:c2:2a:83:b0:
         8e:3a:d5:e2:9c:0b:e0:96:c2:4d:e5:e5:f4:0e:4f:e1:d3:85:
         d9:29:97:95:fd:bd:48:f8:15:21:da:ab:f9:f0:39:ea:cd:05:
         19:74:1f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----