Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3139302e3231312e3134302e302f32322d3234203d3e20323634363539.roa
File:                     3139302e3231312e3134302e302f32322d3234203d3e20323634363539.roa (raw, json)
Hash identifier:          GTrZ/dtl+Orvfyv8exzPBks1HgJ59H3KlqGgwwq5hpQ=
Subject key identifier:   15:B8:DD:50:EA:36:2D:9F:44:D8:2E:8F:A9:74:EE:9A:02:99:92:F5
Certificate issuer:       /CN=2FE17014E75975FCF1540FF846074AB18777F866
Certificate serial:       47070656BF5C143D173ED5CE6CFBC05655A9FCEE
Authority key identifier: 2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3139302e3231312e3134302e302f32322d3234203d3e20323634363539.roa
Signing time:             Tue 05 Mar 2024 17:54:13 +0000
ROA not before:           Tue 05 Mar 2024 17:49:13 +0000
ROA not after:            Tue 04 Mar 2025 17:54:13 +0000
asID:                     264659
IP address blocks:        190.211.140.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:07:06:56:bf:5c:14:3d:17:3e:d5:ce:6c:fb:c0:56:55:a9:fc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FE17014E75975FCF1540FF846074AB18777F866
        Validity
            Not Before: Mar  5 17:49:13 2024 GMT
            Not After : Mar  4 17:54:13 2025 GMT
        Subject: CN=15B8DD50EA362D9F44D82E8FA974EE9A029992F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f3:79:16:1f:a5:7e:96:8b:9b:aa:75:1b:2a:
                    77:9b:d5:e0:75:5d:34:97:c9:ff:71:9e:7c:23:63:
                    a8:25:c5:6a:19:bc:f4:b3:55:bb:0d:5f:7b:c5:40:
                    b7:b8:91:ca:c1:ba:42:76:37:49:f6:32:0f:71:d3:
                    b1:78:f9:a8:7d:fd:59:c7:7b:e9:fb:3c:c0:11:fd:
                    21:5f:a8:13:04:af:e3:e8:ed:e0:0f:51:33:6c:e0:
                    03:4e:11:18:b4:2f:42:86:2d:eb:39:55:38:28:c3:
                    b2:cb:c1:d7:b1:50:b4:7e:c7:68:bd:89:67:a0:4c:
                    6f:9e:3f:16:dd:fa:93:6f:c3:28:32:26:69:fa:c2:
                    57:3f:53:8f:7f:83:f4:2c:42:9e:8b:fe:59:1a:ef:
                    ea:0f:d6:88:ee:09:55:d8:0e:72:58:de:0d:6b:db:
                    45:ec:fc:a2:5c:92:22:90:05:6a:ec:38:a6:cc:9c:
                    b9:cd:34:ae:4e:5e:6d:7e:b9:ea:00:32:b1:6d:44:
                    1c:f3:8f:4d:e0:73:e4:61:40:8f:b2:de:a7:a1:37:
                    55:34:2d:89:c2:97:d8:83:c3:0d:2a:a3:a2:8b:32:
                    23:6d:33:e1:11:75:5d:f2:23:e0:ee:27:2d:84:c3:
                    90:de:7f:db:80:0d:fa:ad:b3:d3:83:35:e7:ea:29:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B8:DD:50:EA:36:2D:9F:44:D8:2E:8F:A9:74:EE:9A:02:99:92:F5
            X509v3 Authority Key Identifier:
                keyid:2F:E1:70:14:E7:59:75:FC:F1:54:0F:F8:46:07:4A:B1:87:77:F8:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/2FE17014E75975FCF1540FF846074AB18777F866.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2FE17014E75975FCF1540FF846074AB18777F866.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C761092FF4F4177DB34837A5B09415B478BD4FDB01C797383F0E83A899DC480A/0/3139302e3231312e3134302e302f32322d3234203d3e20323634363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:bd:4a:b8:8d:2b:36:8d:e3:a6:f1:ff:81:bb:99:a7:7b:
         45:6e:a6:a1:48:34:f8:83:e8:8e:9b:1e:2a:27:dd:a5:1b:ba:
         46:ae:83:6c:41:64:6c:55:b8:91:b9:4e:cf:b6:f0:e1:c7:05:
         e2:54:dd:9a:52:f7:09:4f:ff:b9:02:ab:99:f0:99:02:10:15:
         11:78:d3:10:35:14:dc:18:5b:ef:10:df:42:54:0b:58:8b:e1:
         ae:b9:b7:95:b5:75:04:e7:c3:a9:8c:c9:19:08:de:55:c3:17:
         38:7c:05:18:06:2a:a2:17:65:2f:2c:f9:51:f3:5e:d9:52:31:
         94:84:69:04:f8:b4:77:13:ad:18:39:b5:33:64:60:2e:99:5f:
         0f:b0:fb:10:bc:4a:ba:66:ac:e0:06:4c:4b:83:9f:7c:41:59:
         37:88:e7:f6:49:dc:55:d7:cd:54:b5:b9:42:2c:f1:01:2c:97:
         01:1d:5f:c9:08:ce:9a:62:0f:b7:3c:cf:8e:bf:d2:51:08:e7:
         ec:da:1b:df:a7:30:51:58:7f:e3:28:86:f5:9a:1c:2f:ec:18:
         1b:9a:94:f4:f8:5e:38:e1:2c:7d:19:3f:7e:58:88:ba:3f:49:
         60:66:2f:15:c1:2a:44:a4:9b:4b:f9:47:1a:19:70:d1:7c:37:
         39:44:39:0c
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIURwcGVr9cFD0XPtXObPvAVlWp/O4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZFMTcwMTRFNzU5NzVGQ0YxNTQwRkY4NDYwNzRBQjE4
Nzc3Rjg2NjAeFw0yNDAzMDUxNzQ5MTNaFw0yNTAzMDQxNzU0MTNaMDMxMTAvBgNV
BAMTKDE1QjhERDUwRUEzNjJEOUY0NEQ4MkU4RkE5NzRFRTlBMDI5OTkyRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC683kWH6V+loubqnUbKneb1eB1
XTSXyf9xnnwjY6glxWoZvPSzVbsNX3vFQLe4kcrBukJ2N0n2Mg9x07F4+ah9/VnH
e+n7PMAR/SFfqBMEr+Po7eAPUTNs4ANOERi0L0KGLes5VTgow7LLwdexULR+x2i9
iWegTG+ePxbd+pNvwygyJmn6wlc/U49/g/QsQp6L/lka7+oP1ojuCVXYDnJY3g1r
20Xs/KJckiKQBWrsOKbMnLnNNK5OXm1+ueoAMrFtRBzzj03gc+RhQI+y3qehN1U0
LYnCl9iDww0qo6KLMiNtM+ERdV3yI+DuJy2Ew5Def9uADfqts9ODNefqKb6zAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUFbjdUOo2LZ9E2C6PqXTumgKZkvUwHwYDVR0j
BBgwFoAUL+FwFOdZdfzxVA/4RgdKsYd3+GYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzYxMDkyRkY0RjQxNzdEQjM0ODM3QTVCMDk0MTVCNDc4
QkQ0RkRCMDFDNzk3MzgzRjBFODNBODk5REM0ODBBLzAvMkZFMTcwMTRFNzU5NzVG
Q0YxNTQwRkY4NDYwNzRBQjE4Nzc3Rjg2Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRkUxNzAxNEU3NTk3NUZDRjE1
NDBGRjg0NjA3NEFCMTg3NzdGODY2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzc2MTA5MkZGNEY0MTc3REIzNDgzN0E1QjA5NDE1QjQ3OEJENEZEQjAx
Qzc5NzM4M0YwRTgzQTg5OURDNDgwQS8wLzMxMzkzMDJlMzIzMTMxMmUzMTM0MzAy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM1Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK+
04wwDQYJKoZIhvcNAQELBQADggEBAGuWvUq4jSs2jeOm8f+Bu5mne0VupqFINPiD
6I6bHion3aUbukaug2xBZGxVuJG5Ts+28OHHBeJU3ZpS9wlP/7kCq5nwmQIQFRF4
0xA1FNwYW+8Q30JUC1iL4a65t5W1dQTnw6mMyRkI3lXDFzh8BRgGKqIXZS8s+VHz
XtlSMZSEaQT4tHcTrRg5tTNkYC6ZXw+w+xC8SrpmrOAGTEuDn3xBWTeI5/ZJ3FXX
zVS1uUIs8QEslwEdX8kIzppiD7c8z46/0lEI5+zaG9+nMFFYf+MohvWaHC/sGBua
lPT4XjjhLH0ZP35YiLo/SWBmLxXBKkSkm0v5RxoZcNF8NzlEOQw=
-----END CERTIFICATE-----