Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e39362e302f31392d3234203d3e203532343638.roa
File:                     3139302e36312e39362e302f31392d3234203d3e203532343638.roa (raw, json)
Hash identifier:          Z6O/L3srIEyiYmvRmUzruKAcboNPf7g0F/KmOWfU9Wc=
Subject key identifier:   62:32:E6:E8:63:01:FF:F2:01:80:9B:03:5E:C8:79:EE:F4:76:5C:AE
Certificate issuer:       /CN=92FBC72BC92E884A25F6521C6E009627B0E74602
Certificate serial:       3FC30670FE6110383314B0B45BF23B1D5B550BD3
Authority key identifier: 92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e39362e302f31392d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 17:59:13 +0000
ROA not before:           Tue 05 Mar 2024 17:54:13 +0000
ROA not after:            Tue 04 Mar 2025 17:59:13 +0000
asID:                     52468
IP address blocks:        190.61.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c3:06:70:fe:61:10:38:33:14:b0:b4:5b:f2:3b:1d:5b:55:0b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92FBC72BC92E884A25F6521C6E009627B0E74602
        Validity
            Not Before: Mar  5 17:54:13 2024 GMT
            Not After : Mar  4 17:59:13 2025 GMT
        Subject: CN=6232E6E86301FFF201809B035EC879EEF4765CAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e6:1b:c7:af:09:35:bd:86:c8:7e:70:7e:db:
                    31:a2:15:df:36:35:ef:80:df:20:4b:07:75:b5:b9:
                    93:27:c5:26:13:3e:61:bf:09:eb:ae:70:a0:44:28:
                    76:7b:61:e1:8c:61:e4:79:f7:0e:d3:bd:26:e9:42:
                    d0:79:3d:47:4f:b5:84:3f:5a:29:9f:0b:b4:09:94:
                    a2:92:cd:17:f4:a4:26:1c:0b:de:1e:1a:cf:16:78:
                    9b:74:65:f0:c9:a9:57:0d:c5:32:e8:48:3e:61:1e:
                    d2:e2:91:7f:ce:f8:58:de:32:fa:7c:78:3f:7a:06:
                    d3:5e:55:66:de:15:cc:2b:5a:f4:03:7d:06:66:f8:
                    73:31:1b:99:47:8e:d9:14:22:54:57:f9:86:0d:b0:
                    5d:35:04:eb:dd:b5:77:a8:d6:e8:30:5b:fd:68:c4:
                    ef:78:ae:0e:6c:2c:2b:9b:f3:b2:9c:40:e0:ff:61:
                    d9:bb:5c:f0:b2:fa:dc:1a:d2:24:65:1a:a8:00:2a:
                    8c:74:61:76:72:dc:e6:81:ec:76:35:21:3b:dc:a4:
                    0b:e6:42:ba:9c:75:b6:f6:fb:12:83:03:93:01:77:
                    6e:58:ef:77:68:b5:60:c1:2c:5c:f1:6b:6d:43:70:
                    10:52:e8:4a:ed:8f:66:f3:f4:64:2a:d6:f8:29:94:
                    0e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:E6:E8:63:01:FF:F2:01:80:9B:03:5E:C8:79:EE:F4:76:5C:AE
            X509v3 Authority Key Identifier:
                keyid:92:FB:C7:2B:C9:2E:88:4A:25:F6:52:1C:6E:00:96:27:B0:E7:46:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/92FBC72BC92E884A25F6521C6E009627B0E74602.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0540AE71BFEB2A2076BF7DA19BA295A07228086207B510AC22056B301E8F4D4/0/3139302e36312e39362e302f31392d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         07:8a:0a:86:18:d1:29:c9:a7:d4:32:84:50:5b:77:03:4d:2a:
         18:4a:27:59:0b:36:a2:3d:f6:54:5e:c3:20:78:d5:8b:7f:b3:
         b2:67:1d:72:b1:8f:3a:5c:9d:d4:61:01:27:5e:c3:b1:bc:a9:
         98:1b:2a:76:88:bb:5b:e3:ca:94:cc:83:80:fe:e9:08:fd:c5:
         94:b2:69:38:32:cb:8b:23:72:be:51:3b:93:4d:e1:f2:01:ab:
         f4:5a:cf:61:07:a1:d2:33:36:6f:60:4b:c7:90:52:e8:4f:d6:
         0a:36:1c:c2:24:01:47:71:8c:c0:16:72:56:da:17:20:f1:f1:
         6d:b2:3e:df:36:48:98:63:60:77:ba:76:fe:95:78:17:6d:19:
         53:98:47:39:78:e1:8a:3c:2c:76:4d:d4:b9:47:44:d6:ef:37:
         c9:d9:60:57:46:ac:0a:fd:5b:99:e6:33:66:7e:bb:17:c6:79:
         c2:13:fa:93:d1:c2:1c:cb:cf:26:8b:0c:aa:a5:27:20:5b:6d:
         75:6e:36:c1:5d:b6:70:f7:c2:57:63:6e:d0:a9:3c:35:41:f3:
         a2:05:49:62:9b:cb:a8:1c:92:77:12:1b:53:ae:47:d4:53:a0:
         71:d6:4c:0e:f3:c5:74:bd:c6:0d:3a:b7:93:a8:62:d4:2c:2c:
         ea:17:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----