Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa
File:                     3139302e39302e3138342e302f32332d3234203d3e203236363139.roa (raw, json)
Hash identifier:          7IIkT5tkX+xnKDkJ5EA6/QJvm7xHJKANCgl/Z05fud8=
Subject key identifier:   5E:9F:94:27:A7:19:4A:39:C0:38:F2:92:3B:D1:25:E7:7D:72:4E:6B
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       1B2AFE444FF677045066B63CEF2940BCA90F2C9C
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa
Signing time:             Tue 04 Feb 2025 18:17:21 +0000
ROA not before:           Tue 04 Feb 2025 18:12:21 +0000
ROA not after:            Tue 03 Feb 2026 18:17:21 +0000
asID:                     26619
IP address blocks:        190.90.184.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:2a:fe:44:4f:f6:77:04:50:66:b6:3c:ef:29:40:bc:a9:0f:2c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb  4 18:12:21 2025 GMT
            Not After : Feb  3 18:17:21 2026 GMT
        Subject: CN=5E9F9427A7194A39C038F2923BD125E77D724E6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:84:c8:8a:f6:52:06:3c:a8:1b:5e:9f:e9:
                    84:92:19:db:8d:7a:7f:25:fd:54:94:7a:67:ed:c1:
                    5a:05:ad:cc:8a:1e:a5:8f:59:6e:d5:8b:56:7b:5b:
                    05:af:54:de:1a:b9:38:01:08:f3:52:a1:ee:a1:ac:
                    d8:24:3d:ee:b0:f0:9e:a2:ad:5c:54:48:1d:32:34:
                    89:5a:33:3b:e1:0b:39:63:31:2a:e0:81:04:47:e7:
                    fa:4a:8f:c9:87:17:80:4b:d7:4a:1d:e4:dd:f7:29:
                    b7:cf:c2:ea:0c:90:ef:0c:cf:c3:c5:c6:7b:cc:6d:
                    44:a6:99:e0:16:4f:bd:c0:4f:66:0d:5a:87:af:e1:
                    80:76:88:40:e7:2e:62:41:c8:03:db:6b:21:57:a5:
                    87:91:04:17:6b:a9:17:7c:6a:e1:9f:bc:85:4f:67:
                    57:fb:b3:8e:64:8f:f2:98:75:0b:f1:6f:20:42:75:
                    f8:15:fe:a1:19:64:88:34:d7:8f:1a:4d:4d:de:9f:
                    e8:28:09:f9:41:fe:24:e8:27:32:31:8d:08:67:4e:
                    6a:a9:4b:dc:3e:58:ee:1c:8f:28:d4:4f:9b:16:e0:
                    5f:64:5a:64:f4:46:2a:31:e1:b0:fd:59:09:25:eb:
                    a1:a0:c9:99:7e:8f:61:d1:b2:41:55:18:8e:8c:c9:
                    46:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9F:94:27:A7:19:4A:39:C0:38:F2:92:3B:D1:25:E7:7D:72:4E:6B
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3139302e39302e3138342e302f32332d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:67:97:54:e8:9f:9e:9a:c5:0e:86:c3:a0:08:3c:fb:cf:e7:
         4e:29:68:86:b9:e9:6a:e7:4c:91:69:67:7a:b9:1a:25:ff:3e:
         30:2a:16:3b:58:51:76:fb:bd:ee:b9:93:5b:7d:d2:31:61:11:
         77:5f:34:cc:26:a5:57:66:e3:78:20:01:58:ed:b3:45:13:ad:
         41:56:0c:b7:c3:b5:43:a9:18:27:a1:b7:57:f3:66:13:c2:b5:
         9d:74:e8:75:75:1a:5c:77:8c:c7:c6:67:13:87:96:6e:73:1c:
         08:25:3a:1c:88:76:65:ea:6c:80:1d:f3:fe:39:24:01:ba:a9:
         de:df:11:15:2e:3a:00:45:9f:29:13:73:79:66:5e:b2:91:9c:
         cf:1d:f9:4c:56:d1:77:23:70:84:c7:66:91:71:01:a2:c3:cb:
         1c:5b:2e:8f:17:43:b9:7c:9e:f2:40:79:8b:f6:37:ac:a3:ec:
         63:3a:74:11:be:f2:b5:b2:97:2d:d2:92:5b:07:1e:80:2c:8a:
         d1:8c:5d:66:51:c1:84:2a:05:a1:cf:da:c4:39:1d:0c:4e:4d:
         71:7d:55:8f:3e:99:36:44:52:38:23:e5:48:b1:20:1a:66:29:
         30:21:cd:b0:02:d5:a3:24:39:41:3d:f9:76:1a:07:c9:5d:b5:
         4f:21:9e:f9
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGyr+RE/2dwRQZrY87ylAvKkPLJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JERTg4QzY1MzIwRDNFQkQ4RUQyRjU2OEQ4OTZGMzkz
NUU4N0NDNTAeFw0yNTAyMDQxODEyMjFaFw0yNjAyMDMxODE3MjFaMDMxMTAvBgNV
BAMTKDVFOUY5NDI3QTcxOTRBMzlDMDM4RjI5MjNCRDEyNUU3N0Q3MjRFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVbYTIivZSBjyoG16f6YSSGduN
en8l/VSUemftwVoFrcyKHqWPWW7Vi1Z7WwWvVN4auTgBCPNSoe6hrNgkPe6w8J6i
rVxUSB0yNIlaMzvhCzljMSrggQRH5/pKj8mHF4BL10od5N33KbfPwuoMkO8Mz8PF
xnvMbUSmmeAWT73AT2YNWoev4YB2iEDnLmJByAPbayFXpYeRBBdrqRd8auGfvIVP
Z1f7s45kj/KYdQvxbyBCdfgV/qEZZIg0148aTU3en+goCflB/iToJzIxjQhnTmqp
S9w+WO4cjyjUT5sW4F9kWmT0Riox4bD9WQkl66GgyZl+j2HRskFVGI6MyUZTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUXp+UJ6cZSjnAOPKSO9El531yTmswHwYDVR0j
BBgwFoAUy96IxlMg0+vY7S9WjYlvOTXofMUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xRkFFODRDOUQyRUE1QjlFNjgyNjM1NDNCQkQ0OThDM0Yx
Q0VGMUY4N0YzODM0MzQ2N0Y1NTE1RDYwMkI3NTI5LzAvQ0JERTg4QzY1MzIwRDNF
QkQ4RUQyRjU2OEQ4OTZGMzkzNUU4N0NDNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkRFODhDNjUzMjBEM0VCRDhF
RDJGNTY4RDg5NkYzOTM1RTg3Q0M1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUZBRTg0QzlEMkVBNUI5RTY4MjYzNTQzQkJENDk4QzNGMUNFRjFGODdG
MzgzNDM0NjdGNTUxNUQ2MDJCNzUyOS8wLzMxMzkzMDJlMzkzMDJlMzEzODM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2MzEzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb5auDAN
BgkqhkiG9w0BAQsFAAOCAQEAEmeXVOifnprFDobDoAg8+8/nTilohrnpaudMkWln
erkaJf8+MCoWO1hRdvu97rmTW33SMWERd180zCalV2bjeCABWO2zRROtQVYMt8O1
Q6kYJ6G3V/NmE8K1nXTodXUaXHeMx8ZnE4eWbnMcCCU6HIh2ZepsgB3z/jkkAbqp
3t8RFS46AEWfKRNzeWZespGczx35TFbRdyNwhMdmkXEBosPLHFsujxdDuXye8kB5
i/Y3rKPsYzp0Eb7ytbKXLdKSWwcegCyK0YxdZlHBhCoFoc/axDkdDE5NcX1Vjz6Z
NkRSOCPlSLEgGmYpMCHNsALVoyQ5QT35dhoHyV21TyGe+Q==
-----END CERTIFICATE-----