Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa
File:                     3139302e39312e3134342e302f32302d3234203d3e203237363531.roa (raw, json)
Hash identifier:          3wp5d1UQElI4pxucGLmqgXhCMlpp2N2sMAnofwWpzHo=
Subject key identifier:   BA:A3:C0:90:B0:D6:67:54:34:D4:03:18:E3:B3:7A:2B:E5:DC:B0:BE
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       66C6F7CE6C03A0DEC6A508F6A06336EA40DBC046
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa
Signing time:             Fri 28 Mar 2025 20:13:14 +0000
ROA not before:           Fri 28 Mar 2025 20:08:14 +0000
ROA not after:            Fri 27 Mar 2026 20:13:14 +0000
asID:                     27651
IP address blocks:        190.91.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c6:f7:ce:6c:03:a0:de:c6:a5:08:f6:a0:63:36:ea:40:db:c0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar 28 20:08:14 2025 GMT
            Not After : Mar 27 20:13:14 2026 GMT
        Subject: CN=BAA3C090B0D6675434D40318E3B37A2BE5DCB0BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d2:c9:f8:84:b3:5f:b0:8c:aa:05:ce:49:af:
                    a1:ac:21:c9:aa:8b:0b:07:14:a8:56:37:27:c8:9c:
                    32:14:65:eb:b2:f5:9e:a4:ae:5d:0b:eb:a7:a3:45:
                    cf:0c:09:73:ab:4e:74:1b:3d:96:48:d0:c8:84:d5:
                    f3:38:d1:c0:51:f8:9f:31:1c:7a:1c:e3:fe:93:1d:
                    c3:ce:a6:bf:3a:fb:b7:fa:34:14:2c:99:85:5d:9d:
                    6b:3c:7d:d5:4d:7e:51:1a:bb:39:a8:06:b0:c6:13:
                    c0:64:3f:e9:91:a6:37:dd:c8:8d:f4:ac:ca:05:29:
                    06:64:c2:e8:5b:4c:e7:55:2b:79:06:06:3c:e7:59:
                    53:16:7c:ca:db:8d:20:88:25:7f:5b:1b:81:58:62:
                    28:78:98:92:52:d9:03:21:58:11:80:79:80:56:00:
                    db:2a:14:27:42:30:51:43:2f:7a:38:5e:2b:62:ff:
                    34:95:52:3a:01:e8:fc:4e:fd:15:84:ea:70:63:fd:
                    1f:5c:cb:f8:2d:53:4a:13:3e:3e:25:9a:e1:0c:8f:
                    01:fd:94:27:51:4b:10:9e:25:38:19:29:80:20:21:
                    74:88:d0:81:26:54:f4:84:d2:9d:2a:25:d0:cb:f6:
                    5f:5e:3f:56:e4:56:09:2c:f0:4b:dc:74:72:01:93:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A3:C0:90:B0:D6:67:54:34:D4:03:18:E3:B3:7A:2B:E5:DC:B0:BE
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3139302e39312e3134342e302f32302d3234203d3e203237363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:21:5a:84:1a:73:64:ef:79:05:0d:f7:f6:76:6d:9d:a9:e0:
         d8:ae:51:65:2e:e5:62:96:55:6c:d4:69:74:9c:5d:e1:79:27:
         27:5e:b1:ac:3a:ab:4a:3d:ee:9b:49:77:c9:4b:47:6e:e2:b0:
         e8:87:b8:f5:f7:58:c1:ad:93:18:8c:a5:7f:4b:47:65:53:30:
         86:c8:18:bb:07:f6:bc:0c:12:2b:27:ce:e4:24:6e:25:6d:b4:
         a6:d8:e4:4f:55:4d:73:6a:b8:09:00:7f:0d:d0:c4:f4:db:16:
         b9:bf:f6:62:ea:d6:c8:a3:b2:e0:05:ab:51:f8:11:a6:92:e3:
         5f:8a:ee:b9:1d:97:e3:06:f1:30:4e:cc:88:e9:82:76:d9:67:
         49:b0:f4:af:7f:d8:28:61:46:96:d0:ed:eb:cb:1a:c0:5a:e8:
         af:7e:06:a5:49:1c:c7:d1:51:67:35:65:92:52:db:71:05:7f:
         76:c2:ad:9f:eb:dd:a1:a0:36:c3:23:c4:22:7d:1c:39:01:05:
         f0:47:15:b8:cf:6e:7d:ee:dd:eb:60:aa:90:05:4a:c1:96:af:
         b5:a9:3b:b6:ce:c0:a5:47:54:cd:ec:c8:0a:df:59:ca:e7:26:
         d3:86:4e:3f:e1:65:c5:ae:64:52:41:43:a8:25:18:2c:ce:3c:
         39:a2:73:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----