Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
File:                     3139302e352e3132382e302f31392d3234203d3e203136353932.roa (raw, json)
Hash identifier:          VJlCe6hkx+/PkVf1RU6ldjeemY/Bo9ebky2kBX246qk=
Subject key identifier:   91:6A:B7:91:B9:0C:28:31:7D:C8:2C:AE:F0:E9:B7:86:98:5C:14:96
Certificate issuer:       /CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
Certificate serial:       775B2D63C5E8194D181CC57F9758A5CCE065E5A1
Authority key identifier: 31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa
Signing time:             Tue 05 Mar 2024 17:45:04 +0000
ROA not before:           Tue 05 Mar 2024 17:40:04 +0000
ROA not after:            Tue 04 Mar 2025 17:45:04 +0000
asID:                     16592
IP address blocks:        190.5.128.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5b:2d:63:c5:e8:19:4d:18:1c:c5:7f:97:58:a5:cc:e0:65:e5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C
        Validity
            Not Before: Mar  5 17:40:04 2024 GMT
            Not After : Mar  4 17:45:04 2025 GMT
        Subject: CN=916AB791B90C28317DC82CAEF0E9B786985C1496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:6a:c6:ee:08:af:76:38:f6:fc:02:5f:67:
                    96:ac:4c:a0:4f:d6:c5:f4:8c:b7:f2:e1:09:52:3d:
                    4f:8d:57:ef:58:e5:07:18:8d:c4:12:a2:87:4b:c1:
                    26:f1:1f:43:1a:f4:d2:b6:62:5f:88:87:92:46:f0:
                    52:a6:93:23:4c:cd:c0:ec:75:c1:b0:e5:15:72:6e:
                    0a:a8:f4:c5:8a:00:e3:e2:b6:7c:68:15:f5:4f:e4:
                    5b:5f:77:26:f8:ac:a5:f8:d6:55:dc:cd:80:fe:d5:
                    5a:9e:6a:c3:97:da:5b:4d:3b:2c:7e:9f:c8:ff:c8:
                    c3:23:8e:0f:d4:97:38:f0:48:0d:f2:28:40:af:03:
                    88:9b:56:18:01:6b:ca:4c:90:c9:68:c2:3e:67:ef:
                    ae:a2:2b:f1:58:c9:1a:fc:75:1f:20:c9:36:4b:70:
                    d8:d1:f6:71:00:55:9a:84:63:34:37:45:4c:51:20:
                    f1:a1:e4:c1:8e:5c:c7:68:9c:15:ce:e9:1a:0a:87:
                    06:2b:b6:30:b7:85:2f:09:12:df:57:b0:33:b7:63:
                    a7:4a:82:3a:9b:ec:19:a8:15:54:6c:37:0e:7d:32:
                    e4:f0:44:fa:a6:d7:23:b6:a7:2c:19:0b:3b:5b:e7:
                    76:b1:05:91:71:a2:ff:c3:13:26:f7:3e:5f:68:65:
                    70:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:B7:91:B9:0C:28:31:7D:C8:2C:AE:F0:E9:B7:86:98:5C:14:96
            X509v3 Authority Key Identifier:
                keyid:31:22:D3:2E:B1:7F:7A:44:AF:15:7A:CD:3F:E6:23:4C:B2:DF:D0:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3122D32EB17F7A44AF157ACD3FE6234CB2DFD01C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B2A3B2D3D61DB4D94A49BF1CCEE1F83789EBDEBFCE2CEEF8F669A0A0AB44B839/0/3139302e352e3132382e302f31392d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:49:f7:ae:7d:b2:a8:4d:cd:43:f9:d9:e5:cc:5f:8c:87:ff:
         92:fd:66:be:88:2b:19:6f:83:9e:5e:5d:75:91:56:73:92:78:
         e5:6e:ca:fb:6b:da:f8:d8:45:6a:e2:c8:15:2b:4a:63:d1:4c:
         7d:61:c9:60:ac:3a:70:20:b2:db:ed:5e:3b:58:38:5b:67:f5:
         f4:49:eb:ba:a4:45:ca:9b:a8:50:e1:72:21:74:09:64:97:c0:
         d1:6f:c3:8a:48:b9:86:6c:de:99:bf:aa:1a:52:e3:09:d1:7a:
         0a:a6:79:76:cc:40:5e:08:bb:46:0a:4d:b0:7c:31:8d:3b:10:
         96:34:f2:21:fb:3f:12:30:e9:26:52:b9:77:70:e4:a6:5d:eb:
         e0:06:59:91:64:33:b7:e1:6d:2f:19:d2:24:fd:a6:36:b2:0e:
         b9:74:03:9f:40:9b:a1:f3:ab:90:c7:16:c9:42:5a:11:79:4b:
         7b:8f:94:9d:12:45:a5:84:e3:9f:ec:f6:39:a2:24:4a:3b:f8:
         11:14:f4:26:c4:dc:73:3d:88:6b:61:b2:ea:3d:ca:ba:bb:ea:
         93:66:9f:78:6c:dc:64:d2:42:b2:d5:d1:e0:00:ea:9a:1b:ea:
         15:ea:50:dc:9c:bd:a0:44:41:5f:98:a9:b5:fe:ee:0f:24:de:
         22:61:28:2a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUd1stY8XoGU0YHMV/l1ilzOBl5aEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzEyMkQzMkVCMTdGN0E0NEFGMTU3QUNEM0ZFNjIzNENC
MkRGRDAxQzAeFw0yNDAzMDUxNzQwMDRaFw0yNTAzMDQxNzQ1MDRaMDMxMTAvBgNV
BAMTKDkxNkFCNzkxQjkwQzI4MzE3REM4MkNBRUYwRTlCNzg2OTg1QzE0OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChpWrG7givdjj2/AJfZ5asTKBP
1sX0jLfy4QlSPU+NV+9Y5QcYjcQSoodLwSbxH0Ma9NK2Yl+Ih5JG8FKmkyNMzcDs
dcGw5RVybgqo9MWKAOPitnxoFfVP5Ftfdyb4rKX41lXczYD+1VqeasOX2ltNOyx+
n8j/yMMjjg/UlzjwSA3yKECvA4ibVhgBa8pMkMlowj5n766iK/FYyRr8dR8gyTZL
cNjR9nEAVZqEYzQ3RUxRIPGh5MGOXMdonBXO6RoKhwYrtjC3hS8JEt9XsDO3Y6dK
gjqb7BmoFVRsNw59MuTwRPqm1yO2pywZCztb53axBZFxov/DEyb3Pl9oZXApAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUkWq3kbkMKDF9yCyu8Om3hphcFJYwHwYDVR0j
BBgwFoAUMSLTLrF/ekSvFXrNP+YjTLLf0BwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CMkEzQjJEM0Q2MURCNEQ5NEE0OUJGMUNDRUUxRjgzNzg5
RUJERUJGQ0UyQ0VFRjhGNjY5QTBBMEFCNDRCODM5LzAvMzEyMkQzMkVCMTdGN0E0
NEFGMTU3QUNEM0ZFNjIzNENCMkRGRDAxQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMTIyRDMyRUIxN0Y3QTQ0QUYx
NTdBQ0QzRkU2MjM0Q0IyREZEMDFDLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjJBM0IyRDNENjFEQjREOTRBNDlCRjFDQ0VFMUY4Mzc4OUVCREVCRkNF
MkNFRUY4RjY2OUEwQTBBQjQ0QjgzOS8wLzMxMzkzMDJlMzUyZTMxMzIzODJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzYzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAW+BYAwDQYJ
KoZIhvcNAQELBQADggEBAGdJ9659sqhNzUP52eXMX4yH/5L9Zr6IKxlvg55eXXWR
VnOSeOVuyvtr2vjYRWriyBUrSmPRTH1hyWCsOnAgstvtXjtYOFtn9fRJ67qkRcqb
qFDhciF0CWSXwNFvw4pIuYZs3pm/qhpS4wnRegqmeXbMQF4Iu0YKTbB8MY07EJY0
8iH7PxIw6SZSuXdw5KZd6+AGWZFkM7fhbS8Z0iT9pjayDrl0A59Am6Hzq5DHFslC
WhF5S3uPlJ0SRaWE45/s9jmiJEo7+BEU9CbE3HM9iGthsuo9yrq76pNmn3hs3GTS
QrLV0eAA6pob6hXqUNycvaBEQV+YqbX+7g8k3iJhKCo=
-----END CERTIFICATE-----