Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e31362e302f32312d3232203d3e203230323939.roa
File:                     3139302e39392e31362e302f32312d3232203d3e203230323939.roa (raw, json)
Hash identifier:          5hd0PjwbNH3A1sdqBv+PCnofwiwhveVJRTtsNPSnbY8=
Subject key identifier:   B6:2E:F3:49:52:7B:9E:71:F2:65:2F:F3:D8:D7:DE:8D:F1:D2:CE:E1
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       02634761B5B1326F70ED0449A4DA6AD215BDDDFA
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e31362e302f32312d3232203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:19:41 +0000
ROA not before:           Tue 05 Mar 2024 18:14:41 +0000
ROA not after:            Tue 04 Mar 2025 18:19:41 +0000
asID:                     20299
IP address blocks:        190.99.16.0/21 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:63:47:61:b5:b1:32:6f:70:ed:04:49:a4:da:6a:d2:15:bd:dd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Mar  5 18:14:41 2024 GMT
            Not After : Mar  4 18:19:41 2025 GMT
        Subject: CN=B62EF349527B9E71F2652FF3D8D7DE8DF1D2CEE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:33:c7:52:8d:ee:60:4e:68:0d:c9:91:53:ad:
                    16:bf:13:67:15:34:87:92:17:88:e4:79:ef:9e:79:
                    e3:c5:1f:4c:0f:44:2d:32:2f:5f:2a:67:d7:d0:a3:
                    f6:20:31:3a:0f:1d:ab:92:21:c7:83:bb:3b:ab:14:
                    98:3c:b4:aa:7a:b5:8d:f3:41:a9:0f:d5:68:18:10:
                    ea:b9:11:ae:8f:d0:7e:c3:38:da:36:e5:b3:09:00:
                    c9:55:9a:ed:01:f2:6f:5b:35:88:f4:e0:e5:04:a1:
                    84:df:de:6e:b6:fa:43:a8:5d:d9:1a:08:87:fd:91:
                    80:50:d2:86:0a:25:6f:8c:6e:9f:d0:92:6b:0e:b0:
                    4a:3f:ef:02:00:2f:3d:3a:37:5c:47:93:39:0d:a5:
                    de:11:bc:1a:44:fa:d7:6d:be:ab:20:4c:70:de:da:
                    47:fb:9d:df:9b:b7:97:df:68:d7:57:ca:13:ba:19:
                    0b:7f:3f:7e:16:39:57:5a:a3:5c:1f:8e:65:42:bc:
                    27:8a:fa:1c:78:42:05:59:a8:81:28:03:a3:61:0f:
                    6c:cf:2c:d5:ae:aa:c8:73:87:1c:9b:0f:e0:b1:06:
                    40:ec:17:6e:68:76:5e:f3:a3:76:0c:fb:8f:c7:63:
                    17:75:13:49:5b:f2:d0:9a:b8:05:fc:2a:91:ff:5b:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2E:F3:49:52:7B:9E:71:F2:65:2F:F3:D8:D7:DE:8D:F1:D2:CE:E1
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3139302e39392e31362e302f32312d3232203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         30:ba:fa:3d:67:ab:32:64:64:24:f8:14:71:5a:a7:54:b4:9d:
         01:90:9c:9f:8b:62:5e:5e:e7:73:f0:4d:e5:a3:a1:cf:24:db:
         7b:67:15:a9:89:0e:57:f3:5d:83:cf:67:f9:62:22:23:12:4d:
         b3:26:ee:c9:b9:bd:bb:11:97:05:96:5a:81:81:9a:bf:3b:39:
         83:e2:01:90:1d:9d:1e:97:69:b9:4e:9b:d4:63:d9:d6:c1:d1:
         b8:62:4e:2b:12:10:85:31:67:58:a3:a9:e0:4c:be:bd:86:49:
         36:bd:32:d2:31:df:60:ed:30:7e:91:2e:af:b1:0f:71:20:1e:
         70:59:15:61:be:a3:a4:19:a8:6d:44:8d:37:b8:6e:9d:41:e2:
         bd:5b:f4:06:36:8c:e3:35:2b:4f:0a:66:68:7e:10:85:ac:c8:
         e7:ce:1a:91:cf:19:0a:13:87:39:46:c9:3b:17:2a:6f:7f:54:
         bb:b3:56:e4:21:33:8d:7b:d9:7f:b7:e0:ad:1c:c7:fd:d6:b8:
         5b:e0:7e:98:96:9f:e3:36:e2:c0:58:2d:97:fd:59:a9:3f:7b:
         1d:d6:db:34:8c:58:88:78:05:1e:4b:a6:2a:2f:ad:d8:ef:64:
         79:1f:47:f3:34:b8:ff:50:49:e5:be:7c:5c:ad:8e:6e:06:29:
         1b:46:08:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----