Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa
File:                     3139302e35332e3139322e302f31382d3234203d3e203230323939.roa (raw, json)
Hash identifier:          7FK/o0opSQPxexHX/3MaXm5LlvZtjmiKOz5jZjMxWHM=
Subject key identifier:   09:22:C9:CC:BB:40:4A:4D:CC:DF:12:8A:A1:B7:DE:9D:00:73:83:87
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       61AA621A0D6ECA3D8D6490535EB9267F2B67BD3C
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:19:40 +0000
ROA not before:           Tue 05 Mar 2024 18:14:40 +0000
ROA not after:            Tue 04 Mar 2025 18:19:40 +0000
asID:                     20299
IP address blocks:        190.53.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:aa:62:1a:0d:6e:ca:3d:8d:64:90:53:5e:b9:26:7f:2b:67:bd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Mar  5 18:14:40 2024 GMT
            Not After : Mar  4 18:19:40 2025 GMT
        Subject: CN=0922C9CCBB404A4DCCDF128AA1B7DE9D00738387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:8f:58:34:05:89:6a:f4:ac:d9:7a:75:28:
                    25:f6:34:af:89:73:fa:22:37:00:6c:e2:46:c0:69:
                    e1:6b:c3:25:aa:bd:55:8d:90:9a:40:d0:ab:89:bf:
                    18:f5:31:d8:47:18:8b:46:9d:12:86:31:73:b1:f1:
                    95:c1:b8:29:15:a8:c0:f2:3a:d3:95:81:61:16:65:
                    10:e4:b1:b3:78:95:92:4e:78:f9:21:69:6e:6d:a9:
                    aa:0c:0d:f3:cf:6e:38:09:20:0d:59:2e:9a:29:73:
                    07:0f:08:6a:a7:25:d5:25:ba:27:b3:b1:87:96:94:
                    1e:d8:1d:08:a3:f4:6f:a1:57:5a:91:6a:0d:df:c3:
                    2a:0f:cf:81:c0:5a:bf:71:5f:c6:7f:dc:fb:ae:d5:
                    2a:b6:e3:23:a7:6e:84:09:a6:cd:a0:75:5f:32:29:
                    19:19:e6:a2:e6:1d:7d:0b:b2:ac:80:31:5e:6b:92:
                    64:5f:a2:1a:25:a7:0f:94:e7:3c:9a:18:79:86:52:
                    63:38:7c:3b:26:53:c9:22:1c:46:06:69:20:c9:67:
                    fb:f0:5b:8e:6c:f8:13:0b:de:6e:e9:b4:99:5d:47:
                    46:1f:24:66:57:6b:3d:55:f5:ae:5c:ff:e8:f0:61:
                    56:dc:99:23:f6:74:a2:fc:bf:3a:58:6d:e3:45:71:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:22:C9:CC:BB:40:4A:4D:CC:DF:12:8A:A1:B7:DE:9D:00:73:83:87
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e3139322e302f31382d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:d9:0b:24:6b:e5:36:bb:25:d8:6d:4e:09:45:87:c6:7b:
         18:6d:6d:86:9b:4c:a5:68:9f:b3:08:36:dc:92:2d:50:97:4e:
         9a:70:fe:25:00:f7:12:05:27:25:bb:5b:09:0d:a6:2f:2d:20:
         9d:89:78:bd:19:2f:47:5d:44:19:06:9a:e0:17:d5:d4:ba:d4:
         cb:cb:11:59:db:64:60:cd:94:bc:da:55:59:cd:66:82:3e:e4:
         cf:61:d8:30:f4:19:7e:d3:1f:b8:92:8e:18:11:f6:95:fe:f4:
         aa:9e:5c:dc:db:b6:c6:e8:d2:ee:dc:8e:77:d3:00:b0:94:60:
         d8:2e:ba:eb:6a:4b:f3:b7:4b:ee:ea:09:52:ed:45:4b:e2:5c:
         f2:cf:fe:bb:cf:57:8f:d8:a4:fe:03:3a:84:24:9f:5a:03:7f:
         30:50:12:3b:37:81:cc:57:e8:2d:49:39:02:3c:8a:6f:1f:61:
         2f:53:13:99:83:84:bd:ea:36:ef:a8:5d:a9:b7:5a:ab:bb:48:
         b6:60:84:87:1a:c1:41:a0:dd:bc:16:ae:e7:a2:e0:38:e6:6a:
         52:72:ac:8f:4a:41:18:15:02:e3:e3:bf:04:87:78:9e:44:5a:
         42:d3:b3:74:d9:a8:b3:f1:32:29:90:cf:16:2e:51:9c:df:a5:
         c7:5d:31:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----