Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa
File:                     3139302e38332e3132382e302f31372d3234203d3e203237363635.roa (raw, json)
Hash identifier:          PTxJLW9TKrneiyXCya9Iub4oT9mLanmLEaZ5MwY+lLw=
Subject key identifier:   33:93:E8:0B:81:9C:EE:18:69:37:C1:05:74:C1:D7:67:4A:D7:74:9A
Certificate issuer:       /CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
Certificate serial:       53DD46AEC740D3CB5394C39EC5CF7FFEB8E74AD7
Authority key identifier: 8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa
Signing time:             Tue 05 Mar 2024 18:15:10 +0000
ROA not before:           Tue 05 Mar 2024 18:10:10 +0000
ROA not after:            Tue 04 Mar 2025 18:15:10 +0000
asID:                     27665
IP address blocks:        190.83.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:dd:46:ae:c7:40:d3:cb:53:94:c3:9e:c5:cf:7f:fe:b8:e7:4a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BB193664B1A96C6F93C4770A2D63F64258E62B7
        Validity
            Not Before: Mar  5 18:10:10 2024 GMT
            Not After : Mar  4 18:15:10 2025 GMT
        Subject: CN=3393E80B819CEE186937C10574C1D7674AD7749A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ae:41:d8:d1:2c:ea:ac:09:b5:42:a7:08:63:
                    6c:fd:9e:6c:12:f9:91:1c:ee:90:5c:e8:37:d0:57:
                    d3:af:ad:c8:15:35:e9:16:45:a6:7a:7a:91:14:08:
                    b0:19:21:7e:af:14:a2:bc:80:4f:be:f1:b1:53:84:
                    78:04:a2:75:c4:cb:d4:a5:52:d3:16:d7:6e:45:44:
                    10:9d:a3:5e:3e:9b:49:69:94:09:a7:94:a9:bf:1c:
                    0d:d6:33:00:60:45:f8:8a:2c:43:5c:1f:e6:b1:df:
                    c8:36:94:ee:c9:47:fb:d5:af:9e:dd:2a:e3:72:d2:
                    a9:4f:13:a3:44:c8:cf:68:ef:5e:88:16:7a:00:9f:
                    30:03:48:fe:30:71:7e:82:22:4b:b8:ca:76:13:44:
                    0e:9e:4a:49:47:e6:d9:ea:74:c7:8d:0c:49:77:73:
                    e7:26:28:62:3c:5f:5f:ba:00:aa:dd:cc:8f:8d:1d:
                    27:67:5b:e1:bd:27:2c:25:3c:d1:b2:65:ea:2d:8a:
                    ef:d8:bb:56:a3:90:61:e6:22:7e:ce:aa:dc:3b:4f:
                    9a:6f:33:99:1e:4d:29:07:13:89:9c:f6:fc:06:dd:
                    82:a0:ff:c8:9a:dd:8f:20:1f:be:9f:14:e1:e7:56:
                    42:6f:04:d3:3f:4a:14:b6:f7:82:a2:6f:c8:76:b4:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:93:E8:0B:81:9C:EE:18:69:37:C1:05:74:C1:D7:67:4A:D7:74:9A
            X509v3 Authority Key Identifier:
                keyid:8B:B1:93:66:4B:1A:96:C6:F9:3C:47:70:A2:D6:3F:64:25:8E:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8BB193664B1A96C6F93C4770A2D63F64258E62B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F28F91A7B5DC5E773E42EE7690EC809E9137BC88E596A0ABCC4431BF4E2DE839/0/3139302e38332e3132382e302f31372d3234203d3e203237363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:3c:da:40:af:55:1a:bb:a6:8e:6b:8d:46:39:18:e8:e4:f4:
         3b:3b:4b:e6:07:57:d3:f7:e4:36:48:48:f1:10:bb:87:20:8a:
         d2:1b:30:0f:1f:b6:bd:b3:b5:c3:ec:f3:85:3c:71:e0:a1:fe:
         20:3f:5b:0f:c8:f7:2b:52:c4:7a:db:ce:37:51:42:d7:22:97:
         e0:af:01:3b:0d:7c:0f:6f:17:1f:d8:18:4e:32:30:94:ff:da:
         3f:a5:40:6e:19:2d:b3:cb:91:47:3d:b2:a5:e0:c2:4d:e0:82:
         65:14:3d:d6:08:70:1a:38:c8:24:8f:6b:7d:a4:62:c9:d0:50:
         1e:3c:68:1d:39:b9:07:f1:57:7a:8c:78:ed:54:7f:54:2e:1f:
         a2:ed:68:2d:cb:ce:ba:f1:21:31:95:7e:2f:b6:36:a7:fc:05:
         91:69:06:67:52:ea:b5:a4:89:f0:af:65:c4:e6:b3:6f:a5:33:
         8a:b9:df:a6:89:60:fe:e3:62:08:50:8b:46:24:96:08:8b:d8:
         1b:5d:7c:ea:9d:6c:84:19:41:77:97:aa:44:ad:7b:85:ef:90:
         d7:62:81:b5:8f:e6:1b:29:3c:df:52:78:40:22:1d:3c:7b:a7:
         df:55:04:52:47:df:fd:3d:29:a7:46:d7:e8:67:08:d5:e9:aa:
         55:3e:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----