Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3132382e302f32302d3234203d3e203532323333.roa
File:                     3139302e342e3132382e302f32302d3234203d3e203532323333.roa (raw, json)
Hash identifier:          iGl8PQCeZuTK+Iv8Mo+iAyLtc5ekPyHr4jSr814gxn0=
Subject key identifier:   9E:D2:A4:F7:FB:18:4C:17:FE:5B:33:50:7B:20:18:43:B8:3D:6C:0F
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       363679693FED4F11B3ABF1AA22B3B520E3E2A489
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3132382e302f32302d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:10 +0000
ROA not before:           Tue 05 Mar 2024 17:37:10 +0000
ROA not after:            Tue 04 Mar 2025 17:42:10 +0000
asID:                     52233
IP address blocks:        190.4.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:36:79:69:3f:ed:4f:11:b3:ab:f1:aa:22:b3:b5:20:e3:e2:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:10 2024 GMT
            Not After : Mar  4 17:42:10 2025 GMT
        Subject: CN=9ED2A4F7FB184C17FE5B33507B201843B83D6C0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c2:da:8a:3c:bf:38:23:f3:77:46:c9:80:a9:
                    38:ce:6c:48:2c:9e:25:2c:84:a8:97:90:dd:17:67:
                    44:b7:9c:f4:58:bf:ac:98:4a:f5:75:cc:b3:9c:2f:
                    c3:34:34:35:82:4f:e8:e5:37:1e:ef:79:cf:14:fc:
                    31:07:be:62:10:4d:3c:6e:7d:3e:39:57:a4:a7:a4:
                    e6:74:3f:d9:52:b3:a3:fc:cf:5b:e4:26:b3:a2:b7:
                    6c:f3:45:29:c6:98:e0:19:28:d8:1e:2c:ac:1f:b2:
                    9c:88:38:d6:80:14:76:29:2f:b6:be:79:6f:b7:c0:
                    bb:73:58:33:73:b8:63:13:f4:59:36:8f:cb:00:41:
                    5f:09:f6:38:2d:22:77:2f:53:e2:58:f5:10:7a:f6:
                    7b:34:59:d5:c1:71:62:fa:ba:ae:a9:bc:73:97:17:
                    d9:55:94:89:50:36:2f:e2:08:2a:c5:9b:1a:91:4d:
                    ff:af:0e:54:3e:e1:6e:b5:6b:74:06:0e:89:6a:eb:
                    1c:de:30:59:69:ab:32:85:10:5e:4f:00:89:e3:fe:
                    3a:50:c6:f8:00:cc:b8:88:fd:fe:61:0a:60:a1:6f:
                    ee:4e:02:4a:1c:3e:9b:5b:07:52:bb:ba:12:2a:18:
                    4b:c8:3a:5a:d1:6e:14:83:28:ce:f1:fc:80:1b:cd:
                    ca:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D2:A4:F7:FB:18:4C:17:FE:5B:33:50:7B:20:18:43:B8:3D:6C:0F
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e342e3132382e302f32302d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.4.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:08:42:f8:df:24:ed:18:28:67:8b:23:bc:d7:c9:30:02:8f:
         8d:0f:d3:f8:38:75:95:7b:e1:ba:e7:df:3c:a4:ee:52:ae:f0:
         18:3d:3f:71:fd:e3:80:c9:02:62:74:14:a1:8c:ab:89:49:20:
         fc:d3:16:09:3a:35:63:dd:5a:38:fd:55:ce:f5:d6:86:c2:2f:
         ef:f1:3f:e5:37:88:44:1c:31:a8:22:0a:04:7b:97:f2:96:02:
         ad:40:7f:3b:95:4b:aa:1a:93:93:ee:6a:23:0d:1d:de:21:3b:
         04:bc:17:66:92:3f:74:dc:f2:19:9c:31:22:ac:78:b4:53:47:
         23:0f:92:b5:18:d4:ae:b4:b7:a7:66:41:f6:61:0d:9a:9d:36:
         a8:f1:d2:67:46:65:0f:f3:65:b3:27:60:68:d7:ec:89:32:ec:
         f0:17:4d:1c:b0:cf:f8:1c:5b:c5:36:17:ef:23:15:ff:88:69:
         58:97:d2:ae:1e:b9:e6:d1:6f:56:1b:71:3b:ac:04:21:52:b4:
         b5:d4:8b:45:87:0a:0d:f4:25:83:cf:4a:1e:36:aa:b5:11:19:
         ca:d7:d3:be:5b:e6:1c:e1:ad:c6:9f:12:08:59:f6:4e:5a:92:
         a8:b7:25:62:09:b7:79:4d:41:28:84:17:7e:c7:63:54:a2:83:
         37:b6:4b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----