Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
File:                     3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          5AdGufWKDO91EeR8yU8+BwpTnMz+7KaWOVEMbPpexso=
Subject key identifier:   DE:8D:BD:F4:5F:6F:69:E3:7A:06:E9:1F:58:DF:E0:7C:76:E3:64:9B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       6AD16EC2835E8C489B1E08531C8148962BF2A1DF
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa
Signing time:             Tue 04 Feb 2025 18:17:13 +0000
ROA not before:           Tue 04 Feb 2025 18:12:13 +0000
ROA not after:            Tue 03 Feb 2026 18:17:13 +0000
asID:                     262589
IP address blocks:        190.90.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:6e:c2:83:5e:8c:48:9b:1e:08:53:1c:81:48:96:2b:f2:a1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:13 2025 GMT
            Not After : Feb  3 18:17:13 2026 GMT
        Subject: CN=DE8DBDF45F6F69E37A06E91F58DFE07C76E3649B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:d0:79:c9:cc:5c:2f:ea:9e:de:de:fb:3c:
                    93:04:20:0f:98:30:05:c3:89:87:d0:f6:a5:fb:64:
                    90:35:c7:d0:72:65:e6:85:fa:ec:23:63:cb:b1:fd:
                    1c:27:4f:e5:a5:2b:31:2b:94:28:19:64:58:3b:84:
                    da:ae:81:e2:b5:20:94:ba:35:40:01:1a:9b:17:8d:
                    17:3d:92:64:20:2a:3a:43:43:1e:db:a0:15:ed:d6:
                    4f:ac:2f:76:cf:6e:89:12:4b:ba:3c:63:4e:b5:c0:
                    26:b3:d4:f9:74:e1:48:be:6b:5c:0d:cf:85:b8:e3:
                    74:c0:a6:ee:8c:bd:31:c6:d7:23:a4:8d:ec:49:10:
                    71:8c:4f:47:cd:ca:b2:bd:1c:93:fc:31:9d:0e:2e:
                    52:55:1a:f9:6f:85:ac:7a:16:9c:10:55:99:9d:b2:
                    85:cc:0b:fa:94:16:53:9c:a7:44:00:3d:3d:62:40:
                    c1:44:06:20:b0:22:63:0f:d3:7b:3c:ed:b4:26:c6:
                    8b:58:02:0f:f5:17:a1:d9:28:21:bc:25:f2:5e:5d:
                    e7:09:95:e9:f5:05:44:69:cf:8d:b2:80:a9:a6:1f:
                    9a:9f:46:2d:ad:02:f7:3b:4e:ed:2b:23:85:28:99:
                    7d:e2:2d:c8:ba:72:e4:38:30:ce:07:20:81:fa:80:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8D:BD:F4:5F:6F:69:E3:7A:06:E9:1F:58:DF:E0:7C:76:E3:64:9B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3134342e302f32312d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:09:eb:74:88:20:87:cf:1f:fd:f3:4b:17:f2:9f:19:e6:
         ee:48:7b:54:54:93:82:46:52:7f:79:67:42:98:9a:56:03:96:
         09:07:73:08:ca:88:24:1a:97:e4:fb:7b:c2:14:ad:ca:08:3a:
         d9:c9:ef:12:8b:2b:5d:80:31:ec:28:1b:af:f5:17:8b:4f:7a:
         53:b7:67:a8:95:48:19:d1:52:87:a3:33:5e:6d:f8:66:35:b6:
         f8:7f:67:6b:94:7e:d5:dd:3c:84:57:a7:b0:7b:fc:d6:85:29:
         6c:c4:1f:48:19:ed:f2:1a:84:a0:88:d2:b4:e7:ab:ea:66:65:
         8c:0a:b1:60:dc:af:04:0d:46:dd:ea:2c:d0:30:6e:55:bf:44:
         d2:66:e5:c0:8b:5f:5b:80:cb:4f:65:95:a3:46:ca:7e:7f:48:
         7a:df:d3:ff:02:62:89:70:20:17:b7:8e:25:3e:52:03:b5:fa:
         83:c3:a1:91:67:05:5d:c1:26:60:b0:f9:9c:89:49:23:20:c7:
         3f:4b:49:a4:eb:ec:e6:d8:ed:01:c7:72:1f:71:f7:ab:1a:d5:
         14:69:65:42:e8:eb:a8:b0:ee:f9:e3:78:df:fb:b5:84:27:32:
         7f:65:1b:ce:5b:c1:54:bf:30:58:e8:78:13:06:41:d4:cc:37:
         e0:64:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----