Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e3231312e3133362e302f32322d3234203d3e203237383834.roa
File:                     3139302e3231312e3133362e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          8via3lK19g7/OwWapmc52hxSKDABaGonJqo46Yk6+TM=
Subject key identifier:   E1:8B:A4:F9:C0:83:73:F1:3E:1E:7B:76:25:DB:8B:BD:0B:84:17:75
Certificate issuer:       /CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
Certificate serial:       2E5F6553C15DB7D782E54328B387A99F709A0118
Authority key identifier: 42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e3231312e3133362e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 05 Mar 2024 18:12:35 +0000
ROA not before:           Tue 05 Mar 2024 18:07:35 +0000
ROA not after:            Tue 04 Mar 2025 18:12:35 +0000
asID:                     27884
IP address blocks:        190.211.136.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:5f:65:53:c1:5d:b7:d7:82:e5:43:28:b3:87:a9:9f:70:9a:01:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4275A1F1BC69282CD0F4BD33F1201556C66CFD58
        Validity
            Not Before: Mar  5 18:07:35 2024 GMT
            Not After : Mar  4 18:12:35 2025 GMT
        Subject: CN=E18BA4F9C08373F13E1E7B7625DB8BBD0B841775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:b4:98:31:91:58:91:33:ac:61:88:f3:18:
                    94:e0:0c:cb:f4:e4:05:99:2c:78:c9:59:2d:e1:9e:
                    f3:ed:c9:86:ef:7a:46:38:6b:79:33:4a:a0:14:5d:
                    ce:7d:79:eb:dc:97:e3:6e:7f:52:c7:f8:3d:80:0d:
                    09:94:8d:19:b7:4d:78:b6:e6:62:d9:28:0b:8b:65:
                    25:d1:a1:43:e2:ae:7a:67:72:47:ff:40:c9:15:db:
                    65:82:af:02:0a:04:f2:52:e6:3e:00:e4:de:1d:36:
                    f0:69:80:63:7b:c4:d5:2b:2e:c7:35:ef:ca:e5:e8:
                    74:8c:ef:d1:e6:3b:b3:da:ec:77:4b:c0:d4:1c:c5:
                    ae:f3:f6:0c:50:12:4a:8a:8b:6a:23:18:b3:8d:1b:
                    95:fe:95:6c:fb:a2:50:3e:c1:cb:c1:e7:1e:99:d8:
                    ca:de:c2:ab:8c:02:57:ff:3c:be:e6:8b:c2:1e:3a:
                    ee:c3:a6:bf:11:e4:90:32:88:80:7c:68:54:ea:3f:
                    3c:54:0e:7d:ae:37:b3:40:bf:d7:a9:44:c2:e4:84:
                    8e:4e:95:f0:38:6a:04:0a:0a:ff:00:43:e2:a5:2d:
                    c0:50:af:bb:06:d0:1f:83:61:15:9d:3a:90:32:20:
                    5b:63:3a:84:a9:6b:ef:27:72:f6:81:57:07:da:c1:
                    48:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8B:A4:F9:C0:83:73:F1:3E:1E:7B:76:25:DB:8B:BD:0B:84:17:75
            X509v3 Authority Key Identifier:
                keyid:42:75:A1:F1:BC:69:28:2C:D0:F4:BD:33:F1:20:15:56:C6:6C:FD:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4275A1F1BC69282CD0F4BD33F1201556C66CFD58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D425E3D0D39D3B791BBAB46F7A1CA12216B2B3153818B7F5AC119883A15C3607/0/3139302e3231312e3133362e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:23:9e:f8:74:65:ef:14:e0:da:0b:4e:c3:40:bb:3f:fd:6d:
         eb:a6:40:96:e8:d9:9e:4f:10:b0:d4:36:4d:d7:b0:7d:f9:f0:
         b5:95:8f:a1:c2:4b:7d:eb:22:34:3a:27:62:83:e2:bb:0b:16:
         b3:7b:d3:bf:91:0a:a4:60:9e:b4:e2:cd:71:4e:ea:e6:ef:51:
         b4:76:8d:8b:f6:3b:49:75:9a:02:26:c6:b8:b8:0e:10:9c:13:
         d0:18:ba:6c:14:bd:9a:54:a9:bd:15:b1:6a:fb:27:16:ac:a5:
         43:38:aa:54:78:03:85:a9:fc:1b:66:ee:5d:5d:1c:8a:95:51:
         56:88:d7:f3:f5:c8:94:65:60:52:42:e2:84:89:2b:3e:52:a3:
         61:4c:12:07:0c:b4:6e:34:25:24:d5:98:f3:2e:6c:c2:df:f5:
         ce:36:d6:24:22:77:9c:44:7e:a5:2f:d4:f3:d2:f1:ff:bd:fd:
         e8:66:f8:0a:a2:4b:6a:07:6a:6a:dd:33:82:7e:69:59:ba:16:
         97:22:ff:87:45:a5:bf:b3:cc:39:6a:25:b2:89:a2:7f:3c:f7:
         46:5e:02:e8:63:e6:59:74:49:03:1c:e7:d5:ab:6d:2b:70:b9:
         da:10:68:9b:35:4c:82:a1:1f:b6:a6:91:ae:da:f9:bf:4a:d6:
         94:35:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----