Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
File:                     3139302e3135312e302e302f31372d3234203d3e2036343731.roa (raw, json)
Hash identifier:          ptkDez14YUC79whxdXBNCnqjaT2lwCMZNE5S+AoQKUo=
Subject key identifier:   02:9F:96:35:E1:09:98:65:E4:EE:8B:FB:88:8D:D7:6B:0C:5D:05:36
Certificate issuer:       /CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
Certificate serial:       0929F09A4891570646CA897D247C67B1046C0BBB
Authority key identifier: 3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa
Signing time:             Tue 05 Mar 2024 18:14:56 +0000
ROA not before:           Tue 05 Mar 2024 18:09:56 +0000
ROA not after:            Tue 04 Mar 2025 18:14:56 +0000
asID:                     6471
IP address blocks:        190.151.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:29:f0:9a:48:91:57:06:46:ca:89:7d:24:7c:67:b1:04:6c:0b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7
        Validity
            Not Before: Mar  5 18:09:56 2024 GMT
            Not After : Mar  4 18:14:56 2025 GMT
        Subject: CN=029F9635E1099865E4EE8BFB888DD76B0C5D0536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:93:53:5a:fc:6d:32:1f:d0:87:c2:1b:ed:
                    2b:c6:96:0d:2c:d7:be:3b:9c:ce:92:29:5d:d2:3d:
                    ab:c5:1f:50:7d:3e:3e:59:60:9a:83:bd:d3:77:27:
                    fd:38:b5:9c:61:20:9e:e3:9b:ca:c5:4c:c3:77:4e:
                    0e:50:39:23:48:6c:c3:e3:5c:40:30:18:9f:1a:f5:
                    f9:cb:31:38:3b:31:85:59:b1:61:37:4d:73:23:de:
                    4f:96:d2:dc:40:a3:b0:07:e2:be:33:19:31:88:66:
                    52:13:c6:5d:43:56:41:a9:ce:a7:ab:3b:3e:34:c7:
                    22:b5:ab:62:35:64:98:7a:16:ad:b8:d0:fb:47:80:
                    b2:78:e6:95:dd:cd:6e:0e:97:f1:33:0f:db:cd:82:
                    da:65:20:b0:92:bb:f6:c6:c8:77:fd:e0:e9:a9:a5:
                    2b:52:f1:48:38:6e:d4:0c:14:20:9f:b6:fa:88:68:
                    ab:2c:f1:31:7d:be:68:14:0f:3e:1d:05:d5:ce:2a:
                    61:34:c0:a9:d8:30:9f:0e:2d:5c:ac:4c:87:f7:29:
                    8a:9e:5f:78:50:df:23:ee:e0:9c:42:7f:9c:19:5d:
                    76:8e:69:18:5d:af:c9:ad:9b:24:10:be:6f:77:b3:
                    cd:da:85:00:25:db:3d:66:df:2f:1d:b1:76:3a:67:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9F:96:35:E1:09:98:65:E4:EE:8B:FB:88:8D:D7:6B:0C:5D:05:36
            X509v3 Authority Key Identifier:
                keyid:3F:DB:44:D1:8B:C1:6A:B0:39:C2:B1:B6:BD:38:66:AB:29:E1:22:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3FDB44D18BC16AB039C2B1B6BD3866AB29E122A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C862C92FE79571CDCE834A609053002A1212C9B70796AFAD01C6193D7F0DAAAB/0/3139302e3135312e302e302f31372d3234203d3e2036343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:39:9e:5a:91:e2:19:07:55:57:54:a9:a6:e6:c9:39:b6:ed:
         03:53:0c:c6:db:7b:af:cb:17:38:37:93:40:20:5b:b5:50:cd:
         58:be:88:b7:67:fd:6a:d0:59:09:e9:fb:2a:63:b2:72:56:bc:
         3d:e1:77:36:64:02:8b:18:6c:86:fb:33:39:83:e0:ba:38:f5:
         a7:9d:c1:e9:72:38:7e:ea:e3:b9:7d:c9:cd:cf:a5:6a:16:8f:
         27:68:55:0e:83:3f:2a:39:33:9c:67:b2:f5:eb:6a:64:1e:e0:
         82:f6:b7:b3:60:87:b0:80:31:1b:c2:4a:24:14:5c:d1:d9:47:
         f6:22:45:cf:67:8f:34:41:51:81:1a:ea:4b:b6:04:de:e0:aa:
         fe:b6:b3:9e:1d:d9:35:78:13:10:3e:0a:1e:e3:a7:28:90:7b:
         7a:6a:30:3e:ab:79:88:61:6d:bc:d8:2d:f6:d7:15:cc:02:38:
         f9:55:a6:59:91:83:ad:fa:b7:2e:cc:24:76:8d:b0:72:f9:ef:
         c2:64:db:11:8a:da:e5:34:30:0e:a9:42:0c:73:7a:7c:74:21:
         fb:71:25:58:d7:c9:89:f7:79:d9:6f:cd:be:f3:c2:00:f4:6e:
         1a:96:1f:f9:bb:cb:76:3b:d3:62:ba:b9:32:f4:16:ce:1a:36:
         49:49:1f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----