Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e38302e302f32302d3234203d3e203237383433.roa
File:                     3139302e31322e38302e302f32302d3234203d3e203237383433.roa (raw, json)
Hash identifier:          KRyP78fCeTSQPsfajjlRx9AnAzdTKKpMIK0z2FAUEOg=
Subject key identifier:   EA:A4:8C:5E:DE:C6:AE:BB:A4:0E:AD:71:D8:80:91:94:F2:ED:D1:95
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       02E59F6D8D545C614D007A59818FEA02E8EEE3E2
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e38302e302f32302d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:44 +0000
ROA not before:           Tue 05 Mar 2024 17:39:44 +0000
ROA not after:            Tue 04 Mar 2025 17:44:44 +0000
asID:                     27843
IP address blocks:        190.12.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e5:9f:6d:8d:54:5c:61:4d:00:7a:59:81:8f:ea:02:e8:ee:e3:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:44 2024 GMT
            Not After : Mar  4 17:44:44 2025 GMT
        Subject: CN=EAA48C5EDEC6AEBBA40EAD71D8809194F2EDD195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:99:25:e7:c6:2b:16:94:fe:1f:df:7f:51:af:
                    6c:5c:a3:78:62:62:64:d1:69:4d:c6:28:d0:75:fd:
                    1c:eb:8a:15:81:3c:73:b6:22:82:18:60:71:9a:91:
                    34:56:79:98:a9:50:c7:51:97:72:ff:e8:b7:6a:65:
                    14:eb:53:a5:7d:c1:59:0a:95:4f:1f:20:21:5f:bb:
                    bb:e7:f9:ee:4e:c0:e1:1f:09:63:61:45:fc:ea:88:
                    89:ba:ea:46:b8:be:93:50:bb:d4:39:f2:c0:f3:87:
                    1d:9a:9f:16:27:57:75:d9:0a:e8:8d:48:5b:4e:ba:
                    df:72:77:33:00:7d:c2:16:cb:f4:19:0a:f6:49:c0:
                    58:a5:11:a1:3d:9a:95:00:da:cb:42:8f:39:59:11:
                    eb:8d:2a:ed:2c:fa:79:d2:29:fd:2d:f2:88:ae:0d:
                    4e:ff:31:b2:87:cb:2b:97:d0:fc:f4:b0:00:d3:04:
                    f3:0e:b1:4b:46:57:1f:a7:77:1c:b8:84:44:8c:08:
                    84:7b:cb:b1:87:a7:03:b9:b9:fe:13:8d:f1:09:e3:
                    b8:70:9d:7d:36:2b:e1:c8:42:13:a3:1c:41:84:b6:
                    80:9f:9e:82:39:9e:56:c1:79:b4:fa:a5:72:99:69:
                    f5:c8:26:11:16:5e:14:de:05:38:d1:71:e2:69:f6:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:8C:5E:DE:C6:AE:BB:A4:0E:AD:71:D8:80:91:94:F2:ED:D1:95
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3139302e31322e38302e302f32302d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:23:01:ae:98:fd:b7:ea:6d:9a:5e:ef:8a:07:be:4f:9a:62:
         b6:ca:a2:63:3c:f8:c3:8b:42:31:25:50:e2:9f:27:5f:97:5c:
         f4:a4:a2:35:37:03:ae:b7:b7:06:7d:2f:db:94:da:32:aa:e6:
         12:24:11:ed:b8:4b:7f:76:f3:a0:ec:47:4c:23:3f:69:c5:47:
         53:e1:07:01:60:41:15:bf:9b:07:08:71:45:90:79:22:b8:61:
         64:da:b1:6c:a8:ca:56:eb:0c:2c:63:00:ba:8e:b2:74:f3:c9:
         59:8f:07:fb:80:08:9b:9b:a8:30:ae:0d:2d:47:67:3f:83:d5:
         d6:ca:d4:d3:b8:a6:73:a6:65:6d:48:36:bd:a4:cb:40:a2:25:
         73:80:a9:1a:6f:47:1e:09:cf:22:41:a0:5b:91:2b:8c:36:6e:
         d9:12:0d:41:7d:d4:3d:c0:af:9c:a9:96:b7:06:ce:28:35:ce:
         95:dd:38:e2:52:a2:ca:a6:3a:49:0b:80:84:53:3d:dd:ec:88:
         c5:e2:f0:55:40:60:c3:22:cb:e4:62:b3:89:aa:6e:bd:ec:49:
         7b:fe:a6:c0:d5:24:bc:09:3e:3a:83:77:2c:ce:e3:dd:96:45:
         b5:c3:a0:31:f0:41:12:68:c6:72:c5:0b:f9:5d:f7:9e:fe:73:
         7f:f3:f5:ac
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUAuWfbY1UXGFNAHpZgY/qAuju4+IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUYwOEQzOEQ0NTcxQzA5QTgzQjQ1QUNGRDEwQUVCNzgy
NkNFOEY4NDAeFw0yNDAzMDUxNzM5NDRaFw0yNTAzMDQxNzQ0NDRaMDMxMTAvBgNV
BAMTKEVBQTQ4QzVFREVDNkFFQkJBNDBFQUQ3MUQ4ODA5MTk0RjJFREQxOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHmSXnxisWlP4f339Rr2xco3hi
YmTRaU3GKNB1/RzrihWBPHO2IoIYYHGakTRWeZipUMdRl3L/6LdqZRTrU6V9wVkK
lU8fICFfu7vn+e5OwOEfCWNhRfzqiIm66ka4vpNQu9Q58sDzhx2anxYnV3XZCuiN
SFtOut9ydzMAfcIWy/QZCvZJwFilEaE9mpUA2stCjzlZEeuNKu0s+nnSKf0t8oiu
DU7/MbKHyyuX0Pz0sADTBPMOsUtGVx+ndxy4hESMCIR7y7GHpwO5uf4TjfEJ47hw
nX02K+HIQhOjHEGEtoCfnoI5nlbBebT6pXKZafXIJhEWXhTeBTjRceJp9pQlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQU6qSMXt7GrrukDq1x2ICRlPLt0ZUwHwYDVR0j
BBgwFoAUnwjTjUVxwJqDtFrP0QrreCbOj4QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BMTZFOEYxMDMxNDZCMjg1MDMzNTAyM0E3MEE2RDM5ODc0
NzY2MzY4REJEQTVGMDQ4RDU1OTcyQjk4RkQ4MzY3LzAvOUYwOEQzOEQ0NTcxQzA5
QTgzQjQ1QUNGRDEwQUVCNzgyNkNFOEY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RjA4RDM4RDQ1NzFDMDlBODNC
NDVBQ0ZEMTBBRUI3ODI2Q0U4Rjg0LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTE2RThGMTAzMTQ2QjI4NTAzMzUwMjNBNzBBNkQzOTg3NDc2NjM2OERC
REE1RjA0OEQ1NTk3MkI5OEZEODM2Ny8wLzMxMzkzMDJlMzEzMjJlMzgzMDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzczODM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS+DFAwDQYJ
KoZIhvcNAQELBQADggEBAD4jAa6Y/bfqbZpe74oHvk+aYrbKomM8+MOLQjElUOKf
J1+XXPSkojU3A663twZ9L9uU2jKq5hIkEe24S39286DsR0wjP2nFR1PhBwFgQRW/
mwcIcUWQeSK4YWTasWyoylbrDCxjALqOsnTzyVmPB/uACJubqDCuDS1HZz+D1dbK
1NO4pnOmZW1INr2ky0CiJXOAqRpvRx4JzyJBoFuRK4w2btkSDUF91D3Ar5yplrcG
zig1zpXdOOJSosqmOkkLgIRTPd3siMXi8FVAYMMiy+Ris4mqbr3sSXv+psDVJLwJ
PjqDdyzO492WRbXDoDHwQRJoxnLFC/ld957+c3/z9aw=
-----END CERTIFICATE-----