Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa
File:                     3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa (raw, json)
Hash identifier:          0wf0kulHnyNxCVe0uTjIX6AX63zEd2nhGnwmP65fJ4Q=
Subject key identifier:   E3:DA:8D:AD:E9:0D:FE:61:2F:53:68:7B:9C:D3:F8:4A:F6:DB:19:ED
Certificate issuer:       /CN=35583A052563DF8180BE45295D67FAA5A3A18996
Certificate serial:       7C8EDAC6E2BA23155C0F551C13E872C83841B3EB
Authority key identifier: 35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa
Signing time:             Tue 04 Feb 2025 18:18:45 +0000
ROA not before:           Tue 04 Feb 2025 18:13:45 +0000
ROA not after:            Tue 03 Feb 2026 18:18:45 +0000
asID:                     52354
IP address blocks:        190.122.158.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:8e:da:c6:e2:ba:23:15:5c:0f:55:1c:13:e8:72:c8:38:41:b3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35583A052563DF8180BE45295D67FAA5A3A18996
        Validity
            Not Before: Feb  4 18:13:45 2025 GMT
            Not After : Feb  3 18:18:45 2026 GMT
        Subject: CN=E3DA8DADE90DFE612F53687B9CD3F84AF6DB19ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:d8:d6:ac:62:3e:d1:40:fd:f6:ba:4a:b5:
                    e2:27:47:c5:86:42:23:45:8d:c3:82:6c:a9:72:9d:
                    01:14:89:f2:0c:a7:ed:8d:b6:ec:22:6b:89:cf:55:
                    a0:77:95:09:96:72:b5:2a:22:3c:77:e2:17:b5:7d:
                    6f:e5:19:61:9f:7e:8b:98:c7:fa:ce:ce:a9:37:ba:
                    22:de:47:f5:fb:56:c8:c9:00:ee:86:d2:2a:25:f5:
                    0d:3a:b2:f0:16:5f:a0:5b:88:f3:10:1e:86:52:e5:
                    ce:3d:91:65:12:d9:6e:47:67:e1:54:b0:d6:70:d1:
                    2e:3f:6f:b7:2e:42:04:2e:3a:cc:cd:0d:d9:bb:9e:
                    d9:00:b9:58:14:91:12:22:5f:11:8f:45:da:9e:f5:
                    8c:88:e2:d7:47:fa:92:af:86:ac:b6:c8:55:b5:36:
                    f9:a7:b3:58:03:8d:4e:e5:18:9c:3f:df:58:29:da:
                    32:14:eb:93:03:cd:5e:da:d7:58:69:15:38:e6:39:
                    9e:fc:2c:2e:04:3f:a8:93:22:64:0a:40:e3:4b:75:
                    cf:66:52:b0:af:a4:37:f3:a2:d6:69:00:c7:3a:49:
                    51:4c:cd:da:8e:ce:95:32:00:31:8a:71:f3:22:54:
                    22:99:27:1d:f0:cd:af:ec:6f:e5:21:4a:5f:44:a7:
                    09:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DA:8D:AD:E9:0D:FE:61:2F:53:68:7B:9C:D3:F8:4A:F6:DB:19:ED
            X509v3 Authority Key Identifier:
                keyid:35:58:3A:05:25:63:DF:81:80:BE:45:29:5D:67:FA:A5:A3:A1:89:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/35583A052563DF8180BE45295D67FAA5A3A18996.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35583A052563DF8180BE45295D67FAA5A3A18996.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0605569D230FA3823AA6BD3D450DAC2A253EFE0BD696D74BCC1EF72EF07C0F7B/0/3139302e3132322e3135382e302f32332d3234203d3e203532333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:14:1c:43:ae:5c:43:ad:26:08:31:42:90:9a:9c:8c:a7:bf:
         78:9e:b1:f2:e0:a3:a4:41:df:0f:93:89:01:83:8c:4b:9e:8e:
         45:69:ab:ca:e0:ba:ff:43:7c:33:0b:cc:8e:f6:da:21:15:79:
         9f:7b:55:4c:0b:fc:08:7f:3f:0b:aa:cc:a3:e9:af:51:0e:3b:
         90:c8:bd:7b:5d:af:e8:6c:a9:7f:aa:03:8d:8c:f1:18:61:8d:
         fc:28:bb:a4:32:06:84:78:4c:99:69:36:c0:eb:42:d2:2b:95:
         ff:47:73:ae:25:6c:86:e6:3a:a7:f0:79:ca:2d:1b:91:92:19:
         fc:9a:0b:30:39:ab:5c:fd:3c:d3:f8:36:bf:d0:ed:68:0d:15:
         fc:29:e4:84:e8:58:0a:98:3b:e6:11:d0:22:9e:e1:6f:d8:9e:
         65:f0:95:c5:62:62:84:45:7f:2e:19:c0:3f:7c:06:b9:5c:c5:
         27:10:07:02:65:f3:bd:24:8e:11:19:d8:cd:66:8c:8a:df:28:
         d2:8b:1a:5a:15:10:d4:aa:39:f1:8d:8c:4a:35:66:03:46:06:
         ab:93:20:60:16:f7:eb:80:98:33:67:9d:df:00:dd:34:55:6f:
         9f:10:d3:b1:1a:67:5f:79:9f:bd:6a:8c:50:ea:88:d1:ed:9b:
         89:94:99:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----