Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa
File:                     3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa (raw, json)
Hash identifier:          JNhO//VPBHRPL2GRLnCgf3VESmdQGvEy9bV6w1i1BNw=
Subject key identifier:   8A:09:8A:83:37:1D:E9:87:B8:C2:39:BC:7B:DB:00:E8:97:87:23:94
Certificate issuer:       /CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
Certificate serial:       7A60DEAB8EAB1D46BFF5473BB5948BC464211C05
Authority key identifier: D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa
Signing time:             Tue 11 Jun 2024 14:20:00 +0000
ROA not before:           Tue 11 Jun 2024 14:15:00 +0000
ROA not after:            Tue 10 Jun 2025 14:20:00 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:60:de:ab:8e:ab:1d:46:bf:f5:47:3b:b5:94:8b:c4:64:21:1c:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D90D4EBE37D6BB163A0862C08C60BF8163DA0194
        Validity
            Not Before: Jun 11 14:15:00 2024 GMT
            Not After : Jun 10 14:20:00 2025 GMT
        Subject: CN=8A098A83371DE987B8C239BC7BDB00E897872394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:bd:91:1f:0b:c7:74:ed:8f:35:75:34:36:
                    49:b9:89:6e:00:b5:0a:ed:66:14:f1:6e:d2:11:63:
                    4c:22:0e:1b:d2:2c:3f:e0:34:d0:dd:5d:26:7a:39:
                    bb:0d:7c:0b:4d:8f:92:1c:d3:85:fc:46:16:71:9c:
                    f1:8f:11:19:0d:93:28:bb:fe:ce:1b:98:ad:79:a4:
                    9a:93:cc:be:53:07:0c:0c:38:2a:7c:75:00:13:4b:
                    d0:cd:78:1f:a3:58:76:4c:de:d7:bc:31:f7:0b:72:
                    c8:de:62:ae:6b:cd:41:32:e1:c5:8f:59:5e:1f:91:
                    c2:d9:27:59:5c:34:40:8a:fc:20:c0:67:81:c5:95:
                    b5:99:f5:c0:e1:64:1a:ad:64:3a:ad:32:28:2e:e9:
                    37:be:b7:6d:34:56:9c:33:23:eb:c9:cd:86:71:ac:
                    05:86:5a:53:11:60:26:75:d0:60:ef:94:12:2f:2b:
                    70:c7:34:f8:8c:f6:6a:29:4a:70:af:aa:11:e3:5b:
                    a5:76:44:40:03:62:e1:2c:19:17:e3:ab:28:9a:d4:
                    8e:51:3e:9d:c3:35:c7:18:cb:a4:a3:5c:99:80:5f:
                    a6:af:ba:03:14:99:08:cb:3c:7c:7a:21:d0:dd:e5:
                    f2:a7:08:ea:79:99:6e:ed:36:1a:30:46:c0:d6:03:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:09:8A:83:37:1D:E9:87:B8:C2:39:BC:7B:DB:00:E8:97:87:23:94
            X509v3 Authority Key Identifier:
                keyid:D9:0D:4E:BE:37:D6:BB:16:3A:08:62:C0:8C:60:BF:81:63:DA:01:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D90D4EBE37D6BB163A0862C08C60BF8163DA0194.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A6CD0CCCB653DB5BC51D479B18736C53DC65CEC0DF039622A227EA1648EDCF80/0/3139302e3131342e3139322e302f31392d3234203d3e203237383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:00:5c:77:07:ef:28:06:84:b0:0e:94:61:1f:2a:eb:37:44:
         e1:25:a0:27:e6:81:93:37:1b:5e:28:f2:fb:6d:ea:3c:78:6b:
         dc:87:51:8e:9e:9e:3e:8b:06:df:35:f3:7d:5a:64:d9:86:a9:
         f6:6b:e1:6f:b3:0d:33:42:08:12:7b:88:1a:94:f7:c0:68:8c:
         1c:6f:c5:b9:0b:58:6e:7d:9d:f6:c3:25:5a:f8:8e:57:70:c3:
         0b:4a:e6:28:f1:cb:a8:e7:22:ae:6f:3f:cf:33:cc:ff:3f:c6:
         3a:23:06:c8:a1:c6:d3:c8:74:fe:73:d2:20:f3:31:38:78:df:
         02:80:c3:13:c6:43:d8:24:ff:1f:61:f9:63:cf:b3:6c:ad:c7:
         94:bc:a2:66:08:bd:de:da:c1:47:d5:19:ca:87:a4:72:eb:bb:
         ff:f6:e9:11:3a:98:d7:b8:7a:eb:64:64:0c:d8:62:f0:6a:c0:
         81:05:38:16:aa:d7:ba:0a:5e:54:9b:c4:49:52:a5:90:4d:a7:
         9d:5a:8c:68:78:8b:06:11:50:ec:47:67:fb:8e:cc:90:e2:09:
         3d:13:a4:59:e9:76:6b:25:91:f3:db:51:79:5e:d8:bc:90:16:
         b3:62:95:74:9e:d2:1f:fa:28:19:a0:f1:cc:0a:b7:2a:77:82:
         c6:af:28:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----