Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3139302e312e36342e302f31392d3234203d3e20323635373035.roa
File:                     3139302e312e36342e302f31392d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          tHzEQeH7YvRJUjIzcE7TfOnzV7kYt2zwK+X+LyhY82Y=
Subject key identifier:   DE:F3:81:B3:D4:49:F0:7E:65:74:DE:92:DE:87:DF:2F:EB:B1:59:30
Certificate issuer:       /CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
Certificate serial:       3C255AA992E074D036D72E288B40581E03495417
Authority key identifier: CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3139302e312e36342e302f31392d3234203d3e20323635373035.roa
Signing time:             Tue 05 Mar 2024 17:42:56 +0000
ROA not before:           Tue 05 Mar 2024 17:37:56 +0000
ROA not after:            Tue 04 Mar 2025 17:42:56 +0000
asID:                     265705
IP address blocks:        190.1.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:25:5a:a9:92:e0:74:d0:36:d7:2e:28:8b:40:58:1e:03:49:54:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFE34210764BCD42CB6C0FCD93828A016623EF1
        Validity
            Not Before: Mar  5 17:37:56 2024 GMT
            Not After : Mar  4 17:42:56 2025 GMT
        Subject: CN=DEF381B3D449F07E6574DE92DE87DF2FEBB15930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:c0:16:41:4f:90:14:48:1e:ae:71:b3:81:
                    e5:d0:73:84:60:b6:16:d4:a0:04:9a:bf:55:38:f6:
                    90:41:96:e1:48:15:8a:af:58:80:31:4f:4c:61:ad:
                    e8:8b:e4:ae:a7:cf:82:af:5d:fb:71:f5:d9:76:8f:
                    d6:ab:4e:52:54:e0:3b:40:bf:f3:6d:ff:fb:36:29:
                    69:8d:24:00:eb:0a:cc:f3:9b:04:15:a9:a1:d3:1b:
                    c2:78:f3:d7:4a:c1:b8:76:9c:b1:f9:23:be:93:e0:
                    f3:bc:fe:24:59:26:c2:f6:b6:eb:c9:e6:12:94:cf:
                    96:32:84:63:c7:1c:f8:59:f8:ff:93:cf:9d:54:cb:
                    26:3e:9b:2c:d1:78:2e:a6:1c:07:37:e2:50:89:18:
                    81:26:15:f5:c8:47:15:80:cb:79:ed:d1:18:fb:7b:
                    87:40:4b:cf:3d:8d:ce:44:74:17:c0:32:85:64:23:
                    1f:48:67:8f:d2:6d:e1:a1:ed:c7:a1:8c:f4:5a:2f:
                    f1:e4:dc:7f:d3:8b:b1:4a:68:a9:70:c5:9d:42:34:
                    ee:60:e0:dd:03:20:49:28:b3:dd:a2:4a:72:88:7f:
                    7e:ca:eb:5c:73:1d:44:05:6f:75:21:ce:4f:1d:b1:
                    93:a5:67:de:91:ee:2d:5f:21:6e:02:33:ac:74:d2:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:81:B3:D4:49:F0:7E:65:74:DE:92:DE:87:DF:2F:EB:B1:59:30
            X509v3 Authority Key Identifier:
                keyid:CE:FE:34:21:07:64:BC:D4:2C:B6:C0:FC:D9:38:28:A0:16:62:3E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFE34210764BCD42CB6C0FCD93828A016623EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE87875795D50155FE74C45EEB511607BD0543560BFE918140F25EE2548B34E5/0/3139302e312e36342e302f31392d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.1.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:b3:0a:29:75:c2:1d:e8:9f:31:c8:5d:63:22:d8:19:72:7a:
         e0:08:3c:88:a1:e2:b5:86:50:b3:c7:48:5e:18:86:fe:d0:41:
         11:df:b0:49:69:d1:9d:76:81:61:81:7b:b9:07:ff:39:23:7f:
         e1:e6:70:ae:0e:28:6d:5f:74:44:24:5d:50:4a:83:a8:e7:df:
         d7:a5:54:59:28:16:fa:45:e7:a8:a3:ae:d9:4e:13:94:9c:62:
         b1:d1:cb:36:07:32:4a:c6:b0:22:62:90:f9:60:eb:25:3a:9d:
         94:7c:94:74:6f:c7:59:15:46:aa:1c:a6:c5:9f:e8:af:68:c3:
         b6:a7:97:96:cb:38:8b:75:4e:da:46:24:a7:be:e1:e1:5c:c1:
         1d:5f:8c:72:f2:b4:98:04:59:52:2a:c5:b3:83:4f:bb:7d:88:
         91:84:2c:84:db:97:b0:6c:be:aa:2d:70:9b:7c:90:08:4e:67:
         88:cb:58:6f:76:3e:8d:29:3b:1d:9b:c5:a0:16:da:3e:f1:47:
         b0:e1:7a:ac:b5:c3:f1:92:16:17:b2:b4:4c:80:2d:4e:06:ab:
         a1:d9:e8:d6:38:77:98:97:8b:0c:22:38:57:01:6e:36:15:83:
         bb:6b:9c:93:89:01:da:f6:7f:ed:0b:41:ec:fb:bc:61:65:cf:
         4e:45:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----