Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa
File:                     3139302e38382e34302e302f32312d3234203d3e203532323333.roa (raw, json)
Hash identifier:          AJKzvRp7IbZpDXwsN+OUxYbSX7En/ALS7J349HcZOXk=
Subject key identifier:   F1:BD:86:FB:2E:B1:C8:27:79:78:BF:A4:52:86:D8:64:49:83:B0:39
Certificate issuer:       /CN=237D63DAE61C3211909C89DEBD463B26F873E44B
Certificate serial:       327B8AEDDEB3C03EBE0835112616CBC996B0AB25
Authority key identifier: 23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa
Signing time:             Tue 05 Mar 2024 17:42:03 +0000
ROA not before:           Tue 05 Mar 2024 17:37:03 +0000
ROA not after:            Tue 04 Mar 2025 17:42:03 +0000
asID:                     52233
IP address blocks:        190.88.40.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7b:8a:ed:de:b3:c0:3e:be:08:35:11:26:16:cb:c9:96:b0:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237D63DAE61C3211909C89DEBD463B26F873E44B
        Validity
            Not Before: Mar  5 17:37:03 2024 GMT
            Not After : Mar  4 17:42:03 2025 GMT
        Subject: CN=F1BD86FB2EB1C8277978BFA45286D8644983B039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:45:72:c2:f7:06:1e:48:99:4d:1f:92:bd:
                    f8:e5:ce:7c:ca:b4:b6:95:67:cc:85:82:42:fc:2e:
                    28:ea:52:97:e3:2e:f1:72:f0:2a:91:61:30:fb:10:
                    63:b5:f7:53:73:f2:22:e6:a2:6d:ab:0b:6e:58:62:
                    a3:a6:72:07:f7:62:71:c0:ca:1a:59:e4:db:a7:2e:
                    00:bb:ae:f8:ed:36:e1:cc:6c:39:31:ec:dc:b9:36:
                    89:a4:d2:4e:f6:e7:8a:ed:85:5f:a5:6b:4c:63:54:
                    eb:10:af:4b:4f:d1:7b:d6:92:71:df:c6:70:9f:18:
                    82:80:d4:b2:26:9e:1e:1f:64:1c:4f:4f:a9:04:f5:
                    0d:12:7a:f5:5b:3a:a5:aa:4f:d7:cd:3f:95:dd:81:
                    b2:82:6e:a8:85:11:e1:66:9c:22:d9:b1:c3:4a:48:
                    f0:7e:f7:40:29:91:e1:69:66:de:3c:99:9a:5f:95:
                    2b:e8:26:72:d8:6c:7a:c7:b4:5e:31:40:a5:28:47:
                    c0:27:28:06:8e:61:46:59:b0:7d:1f:28:ac:c5:ed:
                    64:00:e7:da:c7:1d:f6:0a:dc:97:35:06:1c:f7:6e:
                    45:e6:c7:7f:4e:95:4a:79:ef:36:7a:55:b1:e6:1d:
                    3f:f8:c6:e9:18:8c:c5:6d:90:65:4d:a9:69:39:7c:
                    c6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:86:FB:2E:B1:C8:27:79:78:BF:A4:52:86:D8:64:49:83:B0:39
            X509v3 Authority Key Identifier:
                keyid:23:7D:63:DA:E6:1C:32:11:90:9C:89:DE:BD:46:3B:26:F8:73:E4:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/237D63DAE61C3211909C89DEBD463B26F873E44B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/237D63DAE61C3211909C89DEBD463B26F873E44B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FCECC3D570D3DFE78A2EEC1CAF6F07E8AD1FD3A359CD6FA8735C1A880A05E9/0/3139302e38382e34302e302f32312d3234203d3e203532323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.88.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:02:39:0d:f7:8d:05:77:09:ce:79:9b:e3:18:63:fc:97:6f:
         00:6b:60:45:a4:0d:58:e4:70:05:fe:9c:a8:17:62:6d:ad:b8:
         81:3e:c0:11:d1:77:89:c2:57:9b:0d:66:00:56:50:cc:8d:0c:
         98:25:15:1d:8a:c4:5e:31:7d:ca:d2:04:07:df:f9:a8:02:4a:
         05:e0:d8:eb:7b:7d:e3:df:3a:cd:39:27:bb:4e:ef:de:cc:df:
         b3:88:68:81:34:dc:ff:0e:a5:6c:3f:b9:c6:bb:aa:cf:3c:04:
         90:0c:20:e7:91:92:2f:d1:88:62:22:6c:6b:99:5c:02:bc:13:
         83:8b:46:fe:62:f5:37:61:d8:2d:cd:aa:60:44:d8:91:e5:ff:
         3c:5c:8d:8b:e8:55:6c:b4:49:7a:2c:a9:b0:d0:ec:33:20:cb:
         f0:7b:44:06:02:a8:97:26:e0:77:59:ed:93:de:f7:01:9f:5e:
         9a:7b:cf:ac:6d:e4:2e:49:87:4b:93:80:c3:2c:c9:c2:d9:c3:
         a8:06:11:25:24:e3:64:99:43:1a:a6:69:6c:21:1e:c4:81:a6:
         53:97:e5:5b:c2:f0:37:e0:29:9f:fa:8b:e2:bf:45:4b:03:d4:
         08:d9:cd:ed:f3:21:90:f1:54:ee:42:8e:3d:88:c4:e4:7b:cd:
         53:47:8f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----