Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa
File:                     3139302e302e36342e302f31392d3234203d3e203436313938.roa (raw, json)
Hash identifier:          YeuJ25K9JuBdwqA/gbzk6SjpXtOxfuOgg29vtEWL7+k=
Subject key identifier:   43:9C:9C:48:06:5F:79:40:37:59:10:77:FB:34:35:FF:FB:23:94:E3
Certificate issuer:       /CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
Certificate serial:       63B50C43FBC1B71F4915D3A122F5F63860A87A50
Authority key identifier: 66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa
Signing time:             Tue 05 Mar 2024 17:42:05 +0000
ROA not before:           Tue 05 Mar 2024 17:37:05 +0000
ROA not after:            Tue 04 Mar 2025 17:42:05 +0000
asID:                     46198
IP address blocks:        190.0.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b5:0c:43:fb:c1:b7:1f:49:15:d3:a1:22:f5:f6:38:60:a8:7a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66F604BB2B8BBD86285218D11ACC299B77615CEF
        Validity
            Not Before: Mar  5 17:37:05 2024 GMT
            Not After : Mar  4 17:42:05 2025 GMT
        Subject: CN=439C9C48065F794037591077FB3435FFFB2394E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:32:4e:2d:89:8e:5d:d1:92:17:11:67:4f:
                    8a:21:1b:9f:1d:7d:a0:8d:d2:6c:5a:31:14:6b:ce:
                    37:da:00:5a:42:5d:c6:55:18:fe:28:4d:e6:c9:ad:
                    52:03:82:04:60:cd:8a:d9:f1:37:18:02:50:d8:de:
                    d4:3f:69:87:d0:ba:9d:cb:f1:fb:7f:81:77:de:b2:
                    e9:76:5d:89:46:e8:f6:37:e2:7e:d3:25:d5:8d:17:
                    66:9e:ed:5e:27:b1:55:c4:e9:7c:3e:1a:46:e3:41:
                    5c:9a:44:6d:f2:ab:88:00:8f:aa:1f:28:9b:eb:c9:
                    32:8e:e8:35:e4:5f:13:99:d1:e1:50:02:02:82:84:
                    2a:a0:31:72:cb:29:04:ec:73:cf:88:91:f7:ee:0f:
                    d6:d7:5e:83:98:ca:5f:42:8a:26:92:b9:79:52:ab:
                    68:9c:6b:58:7c:90:17:68:c4:91:07:f2:3d:6f:c4:
                    32:84:5f:07:90:90:fd:de:56:be:04:b6:3f:9f:30:
                    40:ae:8d:7d:9e:ed:f6:5d:c0:d0:eb:26:2d:38:d8:
                    38:c8:93:68:45:b0:0a:bc:a8:08:f9:dd:d2:57:93:
                    c7:f0:32:31:7e:ab:69:55:37:85:3a:66:94:f6:25:
                    6e:d6:43:ac:ef:d8:58:29:6d:72:05:18:4e:92:e3:
                    6e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:9C:48:06:5F:79:40:37:59:10:77:FB:34:35:FF:FB:23:94:E3
            X509v3 Authority Key Identifier:
                keyid:66:F6:04:BB:2B:8B:BD:86:28:52:18:D1:1A:CC:29:9B:77:61:5C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66F604BB2B8BBD86285218D11ACC299B77615CEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D46D73A5BD31569A5875F945F3B77B4D56BA89D58C178D387D0621132E4C988C/0/3139302e302e36342e302f31392d3234203d3e203436313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:23:72:a8:8b:84:a3:52:47:ad:97:4c:0b:21:12:76:3e:b3:
         10:4a:7d:b0:7a:65:11:80:62:6e:47:d7:c8:5a:83:55:20:7b:
         d1:1b:a6:a5:35:66:54:5b:d5:28:10:b6:38:74:d4:ae:f2:92:
         75:33:66:42:ab:ef:75:a0:88:79:7e:c8:3e:fa:c6:32:a7:62:
         60:6b:39:80:25:b0:ab:57:22:53:66:e2:1c:88:03:77:6d:9e:
         8b:df:0c:98:ca:c6:a2:00:de:c9:d2:98:e4:a4:3f:9d:f6:03:
         28:b4:c9:9a:29:50:a9:af:08:c2:04:31:af:5a:68:f9:37:69:
         07:27:1e:4f:f2:73:fe:a4:06:36:68:56:cc:6d:2a:22:56:0f:
         fd:cf:f2:5e:41:c1:0d:15:a4:14:cc:40:be:cc:d8:77:51:27:
         83:d3:f9:83:3d:ef:ab:17:6f:ad:aa:91:2e:f6:23:3f:25:c6:
         07:d5:64:e7:4e:ff:3f:ae:06:71:5b:f0:71:81:b3:74:b0:8e:
         0d:a6:c0:5c:5f:4f:9d:a3:75:c7:12:17:f1:5c:c6:7c:11:1f:
         e1:91:90:a7:54:e7:ee:21:11:9b:47:55:28:a4:58:cd:8c:27:
         4c:8b:8f:ea:9a:85:28:e9:db:50:6c:49:3a:2d:e9:86:0c:cc:
         3b:55:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----