Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa
File:                     3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa (raw, json)
Hash identifier:          QG9aSQYHHCL3bznih1sX+In4X1goEh0Kzh0z0Mklxus=
Subject key identifier:   8F:80:59:37:B1:8F:5E:5A:7A:3B:B2:95:22:3A:E8:35:F9:10:F7:37
Certificate issuer:       /CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
Certificate serial:       3CEE8A268B28A2FE9673F331A9FCDE9219F70755
Authority key identifier: 17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa
Signing time:             Tue 04 Feb 2025 20:04:08 +0000
ROA not before:           Tue 04 Feb 2025 19:59:08 +0000
ROA not after:            Tue 03 Feb 2026 20:04:08 +0000
asID:                     36040
IP address blocks:        190.210.140.128/27 maxlen: 27
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ee:8a:26:8b:28:a2:fe:96:73:f3:31:a9:fc:de:92:19:f7:07:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7
        Validity
            Not Before: Feb  4 19:59:08 2025 GMT
            Not After : Feb  3 20:04:08 2026 GMT
        Subject: CN=8F805937B18F5E5A7A3BB295223AE835F910F737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:35:53:4b:b0:f9:1e:64:d9:f9:d6:6c:94:
                    5d:63:09:cf:8b:05:83:cb:36:40:d6:50:64:60:3a:
                    5c:69:47:1d:88:7d:05:32:02:7f:be:3f:15:22:a2:
                    01:a2:25:92:da:c0:84:25:d6:ea:bc:5f:08:66:92:
                    a5:e3:d4:67:88:04:25:37:f4:5c:71:c6:67:06:9d:
                    c6:e1:75:57:76:bc:30:3a:e4:6c:a9:94:94:09:38:
                    fb:43:2b:1c:10:a7:db:33:cf:79:1b:74:bd:c5:1c:
                    d0:9a:43:fd:08:2f:91:5b:fd:e3:6a:3d:a6:b1:cd:
                    d9:eb:d4:36:bc:99:76:71:cf:48:cc:90:08:5a:e8:
                    f1:73:c1:95:8c:17:cb:12:51:65:33:59:76:c3:6c:
                    a8:b5:48:bd:da:ca:11:a5:e6:a3:2f:af:e8:7b:63:
                    66:d5:a9:14:e0:e2:1a:4b:e8:17:2f:b5:fd:e7:9c:
                    2b:e8:d7:5b:32:26:91:f7:4a:19:af:12:07:a4:7d:
                    23:0a:d6:01:08:93:a2:cf:cb:1d:2d:05:32:a0:83:
                    e3:00:b1:96:09:db:5c:ec:94:35:37:bc:93:48:17:
                    9e:f2:6d:7b:c2:fe:0f:5b:4a:7b:2f:0c:48:76:e9:
                    f9:17:fa:b6:2c:6e:eb:1c:ca:34:9b:b2:80:ad:9f:
                    e4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:80:59:37:B1:8F:5E:5A:7A:3B:B2:95:22:3A:E8:35:F9:10:F7:37
            X509v3 Authority Key Identifier:
                keyid:17:1F:14:D5:AE:EC:89:F4:AE:41:04:C0:F6:09:DE:27:7D:1D:3C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/171F14D5AEEC89F4AE4104C0F609DE277D1D3CD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C1382B1A4CCAB66DA618B1EF9AB4C63086EAAA18E7F0C95BD941803C46F5D567/0/3139302e3231302e3134302e3132382f32372d3237203d3e203336303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.140.128/27

    Signature Algorithm: sha256WithRSAEncryption
         40:72:7f:e3:08:0d:9c:bf:55:1d:3c:b6:84:31:20:b2:c1:21:
         5d:77:8e:d6:64:b9:53:dc:c8:76:47:39:bb:5c:06:da:c6:6a:
         74:ee:cf:e7:cb:22:1b:b3:e0:1c:79:fd:31:ff:5b:6b:75:9f:
         f0:fb:9d:b4:00:87:be:d0:68:0b:31:0f:81:19:aa:c5:32:5f:
         19:3c:95:e0:10:de:ef:3f:dd:23:49:ef:85:0b:94:95:de:ae:
         52:e6:ea:5f:9e:02:a7:e8:a9:8b:74:36:2b:e3:d0:80:60:42:
         10:57:8f:7b:e3:fd:cd:aa:11:f6:8c:e2:07:ac:5f:bc:73:4b:
         f6:4c:d1:51:eb:07:65:5d:e0:9b:65:4a:45:22:5d:69:3a:49:
         be:1b:5e:06:48:83:06:50:a7:8a:84:e3:06:23:21:82:dd:9f:
         23:94:0e:c8:45:f5:15:7b:23:09:f1:22:dd:c3:55:b1:0b:17:
         5e:70:21:45:62:94:e0:0a:12:31:a0:f2:18:e6:0d:06:0c:fd:
         97:81:87:9e:ac:ff:d9:4f:78:f2:e5:00:3b:5d:13:89:10:7d:
         1b:83:59:f2:d0:d1:9b:d0:e0:b0:ba:0c:8c:7b:16:cd:c4:c7:
         41:96:95:a2:73:e7:17:3a:71:95:cc:f7:45:14:e9:f2:f1:b6:
         d4:af:32:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----