Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
File:                     3139302e302e3233322e302f32312d3234203d3e203238303733.roa (raw, json)
Hash identifier:          kPC76g6o3IPVCOWKuwP97E6aYyh7WxZ619l2M78P5+w=
Subject key identifier:   B4:15:82:DB:E8:94:55:B0:2D:C5:40:1C:D6:3F:0D:38:99:65:B0:85
Certificate issuer:       /CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
Certificate serial:       6BE38E8CD5A6AC3F77F55AA96263B88556FB010E
Authority key identifier: 70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa
Signing time:             Tue 05 Mar 2024 17:46:14 +0000
ROA not before:           Tue 05 Mar 2024 17:41:14 +0000
ROA not after:            Tue 04 Mar 2025 17:46:14 +0000
asID:                     28073
IP address blocks:        190.0.232.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e3:8e:8c:d5:a6:ac:3f:77:f5:5a:a9:62:63:b8:85:56:fb:01:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0
        Validity
            Not Before: Mar  5 17:41:14 2024 GMT
            Not After : Mar  4 17:46:14 2025 GMT
        Subject: CN=B41582DBE89455B02DC5401CD63F0D389965B085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:77:51:ff:f4:0a:d5:e8:74:59:5c:26:50:c5:
                    ab:7e:e5:e4:5f:bb:cc:54:d4:cc:0c:55:e6:af:31:
                    f3:c2:ae:b0:c2:9b:c7:20:86:6e:39:2d:98:ec:e0:
                    b4:4d:8c:ac:bf:81:51:2e:5b:3f:87:63:c0:c4:8d:
                    79:fc:de:2c:1c:b1:0b:ba:e2:a2:d2:f5:90:ef:a6:
                    e0:51:5a:e2:ce:50:48:c6:3c:cb:79:c5:82:01:3a:
                    11:70:81:03:66:71:92:0a:ca:1e:86:27:e5:fd:ac:
                    39:a2:20:04:d8:79:01:e6:f9:88:29:12:d5:89:ac:
                    3f:3d:51:83:01:79:3e:99:82:36:28:0a:6f:77:da:
                    3d:18:a9:93:6a:65:21:2f:1c:61:67:ca:32:ed:17:
                    7d:45:cf:a7:16:99:6b:92:d3:84:79:d6:a3:4c:b2:
                    93:35:34:c6:f7:f9:4c:be:4a:24:09:66:18:3b:80:
                    58:b2:b6:87:d8:0d:3f:9a:5e:88:ca:cf:89:3d:a5:
                    87:67:09:09:2f:43:24:4f:93:4e:33:ba:61:b6:9d:
                    ed:d8:c4:51:5b:49:89:8b:7c:de:dd:97:e2:04:b1:
                    8d:23:83:5a:48:6a:a7:65:ef:4f:b4:8b:c1:db:f6:
                    fc:d7:fe:73:8a:fc:5d:cb:26:19:46:36:83:62:79:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:15:82:DB:E8:94:55:B0:2D:C5:40:1C:D6:3F:0D:38:99:65:B0:85
            X509v3 Authority Key Identifier:
                keyid:70:B8:61:6E:6A:6A:A7:F5:8E:40:97:B0:8F:A8:C0:B7:97:D5:EE:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/70B8616E6A6AA7F58E4097B08FA8C0B797D5EEC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B08645AA0B60218E88EA23A5386DE2D8372CB6C3CC3C618013A67E2B57446E89/0/3139302e302e3233322e302f32312d3234203d3e203238303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         12:97:a5:2f:29:89:8a:8e:3f:ba:bc:80:36:53:92:6a:87:1c:
         c2:dc:05:7c:67:e7:8d:37:d5:e5:5b:1a:ba:cc:80:01:6f:7c:
         ae:5e:50:56:d0:4b:04:24:50:b5:74:18:4a:8b:c8:e0:c0:ed:
         61:3e:5c:6c:0f:97:9c:7d:6c:24:79:ef:60:6f:c0:fa:65:34:
         37:74:f8:8f:0e:ca:46:a9:fe:fe:5a:40:51:d6:e4:ec:d5:75:
         a1:99:86:81:ca:60:f3:6a:6b:11:9c:b9:d5:82:5c:f5:d5:5a:
         d9:1b:06:6e:eb:a9:c3:ef:81:ec:b2:23:69:d5:af:99:35:4f:
         1d:a8:56:37:33:ae:12:87:30:d2:1f:42:10:10:fd:7a:97:d0:
         35:46:ad:23:86:53:e5:b4:ee:9e:68:ce:f6:ff:49:0f:f7:2f:
         e0:50:18:9e:f7:48:bd:1e:73:fc:03:a0:a7:40:48:db:0e:21:
         cb:db:ac:b9:68:58:d9:df:8c:4b:dc:06:f9:5d:1d:e1:7c:f9:
         47:ee:7e:73:09:31:15:8c:a9:85:ee:71:94:83:8d:99:9e:a4:
         3d:62:01:ad:0b:aa:b8:e3:52:b0:a0:f3:42:1e:f4:48:bb:16:
         c7:f2:24:31:c0:f6:8f:1e:54:45:22:47:6f:35:f8:ec:a9:b8:
         0f:7b:af:c6
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUa+OOjNWmrD939VqpYmO4hVb7AQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBCODYxNkU2QTZBQTdGNThFNDA5N0IwOEZBOEMwQjc5
N0Q1RUVDMDAeFw0yNDAzMDUxNzQxMTRaFw0yNTAzMDQxNzQ2MTRaMDMxMTAvBgNV
BAMTKEI0MTU4MkRCRTg5NDU1QjAyREM1NDAxQ0Q2M0YwRDM4OTk2NUIwODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVd1H/9ArV6HRZXCZQxat+5eRf
u8xU1MwMVeavMfPCrrDCm8cghm45LZjs4LRNjKy/gVEuWz+HY8DEjXn83iwcsQu6
4qLS9ZDvpuBRWuLOUEjGPMt5xYIBOhFwgQNmcZIKyh6GJ+X9rDmiIATYeQHm+Ygp
EtWJrD89UYMBeT6ZgjYoCm932j0YqZNqZSEvHGFnyjLtF31Fz6cWmWuS04R51qNM
spM1NMb3+Uy+SiQJZhg7gFiytofYDT+aXojKz4k9pYdnCQkvQyRPk04zumG2ne3Y
xFFbSYmLfN7dl+IEsY0jg1pIaqdl70+0i8Hb9vzX/nOK/F3LJhlGNoNieTqFAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUtBWC2+iUVbAtxUAc1j8NOJllsIUwHwYDVR0j
BBgwFoAUcLhhbmpqp/WOQJewj6jAt5fV7sAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMDg2NDVBQTBCNjAyMThFODhFQTIzQTUzODZERTJEODM3
MkNCNkMzQ0MzQzYxODAxM0E2N0UyQjU3NDQ2RTg5LzAvNzBCODYxNkU2QTZBQTdG
NThFNDA5N0IwOEZBOEMwQjc5N0Q1RUVDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MEI4NjE2RTZBNkFBN0Y1OEU0
MDk3QjA4RkE4QzBCNzk3RDVFRUMwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjA4NjQ1QUEwQjYwMjE4RTg4RUEyM0E1Mzg2REUyRDgzNzJDQjZDM0ND
M0M2MTgwMTNBNjdFMkI1NzQ0NkU4OS8wLzMxMzkzMDJlMzAyZTMyMzMzMjJlMzAy
ZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzgzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO+AOgwDQYJ
KoZIhvcNAQELBQADggEBABKXpS8piYqOP7q8gDZTkmqHHMLcBXxn54031eVbGrrM
gAFvfK5eUFbQSwQkULV0GEqLyODA7WE+XGwPl5x9bCR572BvwPplNDd0+I8Oykap
/v5aQFHW5OzVdaGZhoHKYPNqaxGcudWCXPXVWtkbBm7rqcPvgeyyI2nVr5k1Tx2o
VjczrhKHMNIfQhAQ/XqX0DVGrSOGU+W07p5ozvb/SQ/3L+BQGJ73SL0ec/wDoKdA
SNsOIcvbrLloWNnfjEvcBvldHeF8+UfufnMJMRWMqYXucZSDjZmepD1iAa0Lqrjj
UrCg80Ie9Ei7FsfyJDHA9o8eVEUiR281+OypuA97r8Y=
-----END CERTIFICATE-----