Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa
File:                     3139302e35332e34382e302f32302d3234203d3e203230323939.roa (raw, json)
Hash identifier:          Lua6iONhePtXZQR80KbgBVdOQFH+w6oQBoIVbmJSlZ8=
Subject key identifier:   AF:9F:F4:65:EA:C0:54:66:49:53:9F:B3:43:FF:98:A8:9B:E2:50:75
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       211C8A2A63690E484900CD2097F801632F8BFE9D
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:19:42 +0000
ROA not before:           Tue 05 Mar 2024 18:14:42 +0000
ROA not after:            Tue 04 Mar 2025 18:19:42 +0000
asID:                     20299
IP address blocks:        190.53.48.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1c:8a:2a:63:69:0e:48:49:00:cd:20:97:f8:01:63:2f:8b:fe:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Mar  5 18:14:42 2024 GMT
            Not After : Mar  4 18:19:42 2025 GMT
        Subject: CN=AF9FF465EAC0546649539FB343FF98A89BE25075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:f8:c7:68:5b:c0:88:c5:bd:02:12:12:a6:
                    c9:a6:c3:be:48:aa:35:46:e7:95:8c:b2:90:8c:6d:
                    05:1a:ff:f6:04:6d:39:b6:db:a4:bd:30:4d:76:c9:
                    2a:c6:37:a9:28:10:c8:f2:68:35:88:f8:1c:b7:65:
                    9a:f2:a8:88:33:e0:7e:63:76:ac:48:91:11:20:e5:
                    38:c1:89:40:ec:21:52:b0:99:4d:b7:96:cc:db:dc:
                    eb:9b:f5:d6:68:29:ee:8d:af:a8:fe:71:b1:4b:38:
                    a1:f6:63:c2:82:57:4f:ec:12:83:f5:8f:48:ee:29:
                    33:66:7d:3c:26:1c:46:ba:b4:08:17:29:ba:0b:9a:
                    b7:64:1d:96:1f:15:4c:47:69:0a:c5:b7:53:10:f1:
                    40:a3:c5:e6:27:e6:5c:ee:b9:50:eb:86:d9:87:be:
                    d0:f5:78:89:63:31:ba:02:9c:72:84:e4:6b:1f:94:
                    0c:0c:94:79:40:e6:1d:f4:90:50:6c:84:19:7a:24:
                    bd:63:56:81:c4:62:16:b7:3c:15:5f:7d:d7:52:1c:
                    00:1a:a2:cf:f9:57:cd:db:d7:d8:bb:55:b5:ea:ee:
                    3d:f0:91:80:6f:93:2f:77:18:d4:bb:a5:ed:f1:20:
                    4a:e9:31:34:dc:bf:30:50:6e:3a:8d:82:13:ad:37:
                    fe:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9F:F4:65:EA:C0:54:66:49:53:9F:B3:43:FF:98:A8:9B:E2:50:75
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e35332e34382e302f32302d3234203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.53.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:af:35:ee:59:17:50:5d:43:a8:7e:98:30:67:ae:23:86:a7:
         17:46:1a:54:e1:a8:f0:86:1d:1a:1a:b2:ec:3f:0b:6d:66:04:
         7d:ca:81:79:73:63:8c:af:ef:a5:88:ea:ef:56:3c:fa:78:78:
         14:ee:ce:37:e4:31:68:af:10:d9:5b:d5:8b:98:70:a3:45:92:
         36:0a:d5:32:7d:4b:1e:98:02:47:af:2f:ed:fc:ee:74:6f:dd:
         1a:b0:6a:28:02:b7:fd:c1:ab:6f:b2:74:c4:51:1a:4b:27:84:
         bb:27:e0:7f:fd:e0:a1:06:1a:bc:a7:f0:04:d9:f4:87:8f:78:
         b9:82:a3:b2:ec:b7:df:37:a7:e3:ce:a3:ae:5a:eb:b2:dc:82:
         99:58:14:92:67:8a:4a:3c:58:50:9c:19:5b:1d:44:32:f5:55:
         ed:ab:ec:f9:a2:85:11:79:87:d9:cf:f2:ca:67:ba:e3:f1:3d:
         7a:ee:f7:e3:e5:20:cb:c8:69:33:35:58:47:a9:2a:6a:76:4f:
         b0:82:9b:00:99:16:93:14:10:a1:b2:42:2d:d7:82:99:17:6c:
         cc:59:e7:52:da:d5:71:89:8c:df:f9:75:86:d3:49:ba:14:dd:
         3f:c0:96:a9:32:8b:cd:26:83:00:85:78:7e:e7:2b:72:81:1f:
         96:ac:2f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----