Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa
File:                     3139302e39392e3132382e302f31372d3234203d3e203130323939.roa (raw, json)
Hash identifier:          ZK4qyceaoFbWM6U7Lf1VGDJ6D+2AoHwwlgQIZMXU70o=
Subject key identifier:   B9:81:97:5C:76:F7:F2:DA:46:48:DF:E5:EF:64:A2:DE:DB:4D:78:CB
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       3454697155996AC74ADD52043EBC77C246D4579D
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa
Signing time:             Tue 05 Mar 2024 18:01:06 +0000
ROA not before:           Tue 05 Mar 2024 17:56:06 +0000
ROA not after:            Tue 04 Mar 2025 18:01:06 +0000
asID:                     10299
IP address blocks:        190.99.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:69:71:55:99:6a:c7:4a:dd:52:04:3e:bc:77:c2:46:d4:57:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Mar  5 17:56:06 2024 GMT
            Not After : Mar  4 18:01:06 2025 GMT
        Subject: CN=B981975C76F7F2DA4648DFE5EF64A2DEDB4D78CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:80:c7:86:69:a3:04:c5:df:a7:27:ed:37:
                    52:f9:cf:29:4c:b2:06:4e:96:56:21:ad:30:02:b1:
                    68:11:93:04:80:82:d0:31:77:cf:fe:16:f6:18:41:
                    15:ac:f9:f4:b1:63:e9:73:35:9e:4f:2b:63:22:29:
                    f7:f2:c3:d7:06:37:62:55:a9:14:62:1f:af:9c:53:
                    b6:d4:65:d3:8c:15:a2:e7:d0:8e:58:92:b8:88:ff:
                    f3:ee:1f:de:2d:67:58:09:72:a1:04:51:65:39:2b:
                    73:9d:d4:87:f7:2c:17:ab:bf:f0:64:bc:23:78:03:
                    51:17:b9:a7:9c:28:24:a8:02:ed:f3:f9:1d:d7:f4:
                    55:e2:9a:6e:fc:78:f0:67:9e:56:6b:b7:97:3e:f8:
                    53:d1:45:12:16:e4:93:03:51:92:26:21:2f:07:56:
                    f0:6a:3f:1e:bf:20:80:fa:73:d7:23:c4:b6:7c:aa:
                    53:1f:20:b2:5b:65:39:2e:54:ef:4f:4d:84:b6:87:
                    bb:04:bd:ec:66:19:56:b9:5e:7e:66:ac:81:0d:a2:
                    02:0f:eb:05:fe:ca:87:3c:f0:e0:0e:b3:9d:64:4d:
                    74:44:11:74:e2:32:2a:78:54:52:a8:0a:8f:63:4a:
                    6e:d2:46:5a:5f:20:84:2e:df:78:1a:64:b0:16:08:
                    32:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:81:97:5C:76:F7:F2:DA:46:48:DF:E5:EF:64:A2:DE:DB:4D:78:CB
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3139302e39392e3132382e302f31372d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5d:ec:85:a3:b3:83:0b:1d:38:37:fc:08:99:e4:c4:f3:19:13:
         94:ab:65:04:5d:2d:f0:74:d0:a0:1f:75:6b:2f:ae:04:58:07:
         d4:fe:dd:c8:58:16:5a:e1:21:84:10:2b:e3:d9:b4:de:a1:61:
         89:03:6d:5f:7a:e1:06:1a:52:46:88:3b:01:39:3a:19:4d:27:
         f3:dc:7b:4c:c6:60:ea:37:24:89:59:b7:53:4e:80:6c:85:9e:
         db:42:bf:32:c9:74:4e:1f:7c:1b:7a:53:aa:32:55:76:13:8b:
         8b:88:af:91:a4:13:c6:28:18:29:d7:21:25:10:11:86:e3:82:
         0e:41:42:61:79:83:f1:16:5c:1e:ed:8c:18:9d:82:8a:54:d3:
         5f:07:cb:32:c4:25:39:68:c6:9c:2b:93:a7:da:f7:1c:80:c6:
         01:1a:fc:9b:af:d4:0b:5b:0e:2b:73:73:01:29:e2:3f:08:6b:
         b2:99:26:26:3b:49:4b:d3:54:2b:d9:f1:b0:40:09:0c:74:63:
         f7:32:ec:a4:f8:e7:59:b5:9d:72:98:ed:91:df:9b:ce:a0:57:
         c1:ca:2f:e4:89:c3:79:6e:d4:4f:ce:2b:27:8b:f9:e6:f3:56:
         e0:8d:8b:62:d5:33:23:2f:9b:00:3d:51:58:0b:84:0d:96:46:
         0b:26:15:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNFRpcVWZasdK3VIEPrx3wkbUV50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU1NTJFREEzQkY4QTVCNkNBREM1MzNFNDAzNTM3QjZE
QzcyOTkzODAeFw0yNDAzMDUxNzU2MDZaFw0yNTAzMDQxODAxMDZaMDMxMTAvBgNV
BAMTKEI5ODE5NzVDNzZGN0YyREE0NjQ4REZFNUVGNjRBMkRFREI0RDc4Q0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPYDHhmmjBMXfpyftN1L5zylM
sgZOllYhrTACsWgRkwSAgtAxd8/+FvYYQRWs+fSxY+lzNZ5PK2MiKffyw9cGN2JV
qRRiH6+cU7bUZdOMFaLn0I5YkriI//PuH94tZ1gJcqEEUWU5K3Od1If3LBerv/Bk
vCN4A1EXuaecKCSoAu3z+R3X9FXimm78ePBnnlZrt5c++FPRRRIW5JMDUZImIS8H
VvBqPx6/IID6c9cjxLZ8qlMfILJbZTkuVO9PTYS2h7sEvexmGVa5Xn5mrIENogIP
6wX+yoc88OAOs51kTXREEXTiMip4VFKoCo9jSm7SRlpfIIQu33gaZLAWCDIlAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUuYGXXHb38tpGSN/l72Si3ttNeMswHwYDVR0j
BBgwFoAUnlUu2jv4pbbK3FM+QDU3ttxymTgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRUMzNzk4MzFEMkFFN0E1RDU2QUY2QTkwRDlBRjkxNUZC
NjM3N0VFOUZGOUIyQTI1RkU5MDk3MDBFOEEzQzdGLzAvOUU1NTJFREEzQkY4QTVC
NkNBREM1MzNFNDAzNTM3QjZEQzcyOTkzOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTU1MkVEQTNCRjhBNUI2Q0FE
QzUzM0U0MDM1MzdCNkRDNzI5OTM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUVDMzc5ODMxRDJBRTdBNUQ1NkFGNkE5MEQ5QUY5MTVGQjYzNzdFRTlG
RjlCMkEyNUZFOTA5NzAwRThBM0M3Ri8wLzMxMzkzMDJlMzkzOTJlMzEzMjM4MmUz
MDJmMzEzNzJkMzIzNDIwM2QzZTIwMzEzMDMyMzkzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEB75jgDAN
BgkqhkiG9w0BAQsFAAOCAQEAXeyFo7ODCx04N/wImeTE8xkTlKtlBF0t8HTQoB91
ay+uBFgH1P7dyFgWWuEhhBAr49m03qFhiQNtX3rhBhpSRog7ATk6GU0n89x7TMZg
6jckiVm3U06AbIWe20K/Msl0Th98G3pTqjJVdhOLi4ivkaQTxigYKdchJRARhuOC
DkFCYXmD8RZcHu2MGJ2CilTTXwfLMsQlOWjGnCuTp9r3HIDGARr8m6/UC1sOK3Nz
ASniPwhrspkmJjtJS9NUK9nxsEAJDHRj9zLspPjnWbWdcpjtkd+bzqBXwcov5InD
eW7UT84rJ4v55vNW4I2LYtUzIy+bAD1RWAuEDZZGCyYVnw==
-----END CERTIFICATE-----