Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa
File:                     3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa (raw, json)
Hash identifier:          DoNcVdJWZ0lsq3Wx5+NBini1oGM27TRpJmlBDdDB/Xg=
Subject key identifier:   73:A7:93:8B:28:DF:99:9D:F7:BC:AA:1E:57:34:3C:92:41:25:1D:2B
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       6AB9EF414FD3AE77DC38B5394BA513B49020287D
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:12 +0000
ROA not before:           Tue 04 Feb 2025 18:50:12 +0000
ROA not after:            Tue 03 Feb 2026 18:55:12 +0000
asID:                     14754
IP address blocks:        190.143.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b9:ef:41:4f:d3:ae:77:dc:38:b5:39:4b:a5:13:b4:90:20:28:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:12 2025 GMT
            Not After : Feb  3 18:55:12 2026 GMT
        Subject: CN=73A7938B28DF999DF7BCAA1E57343C9241251D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:4a:20:31:28:59:4d:29:ed:ff:a7:82:f1:
                    03:a1:c4:76:08:c9:ef:f6:cc:da:83:66:26:08:ef:
                    68:c0:0c:a0:6a:97:1e:54:e5:28:a9:10:3f:8a:71:
                    d0:ea:0a:b8:34:e3:31:60:20:b8:97:58:a6:07:ec:
                    44:28:f4:8d:49:6b:08:fb:f9:61:20:da:44:5b:cc:
                    02:32:f9:2c:8d:a1:b4:ab:59:6b:99:da:30:1f:41:
                    57:75:10:f5:a4:c7:ce:24:4c:a2:e5:db:79:0f:70:
                    2a:cc:f9:d0:2c:8e:88:d8:ec:39:bd:82:1d:75:8f:
                    7a:24:43:57:77:d7:c4:d7:97:d6:d8:1e:6a:08:9f:
                    4e:81:6f:93:9f:38:c9:ec:93:04:23:96:9b:5a:85:
                    b4:c7:d5:f3:c6:db:6e:cb:2f:52:45:d9:2e:ec:ca:
                    24:52:d3:b9:62:15:93:de:f2:cd:3a:3f:76:c1:a3:
                    f4:bd:13:df:52:29:26:ee:a2:11:f7:6a:51:90:81:
                    8b:a2:11:7d:72:df:c6:e1:bd:dc:d0:67:a8:da:c7:
                    cb:33:42:6a:66:5a:9d:f7:31:5c:11:97:09:88:cf:
                    9e:94:45:c8:0b:7a:bc:48:fc:ee:ef:87:49:6e:20:
                    ae:ec:37:29:5d:b1:fd:67:14:23:ec:02:d8:f4:a2:
                    28:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:93:8B:28:DF:99:9D:F7:BC:AA:1E:57:34:3C:92:41:25:1D:2B
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134332e3132382e302f31382d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:17:a8:79:47:f6:e3:c5:bd:8d:28:ed:f0:47:c6:36:94:21:
         ad:5f:8a:68:cd:4e:63:4c:c2:3d:07:20:b8:b1:c3:ad:74:fe:
         1c:f8:70:1e:c2:a6:02:d5:0a:d4:d0:19:c5:0e:3e:86:bc:a9:
         8f:d5:38:87:ab:ea:90:09:cb:a4:4a:ec:c7:a4:d4:70:8a:22:
         6f:e5:53:de:1d:ea:f8:02:fa:36:8d:4d:e7:06:97:e5:7f:12:
         32:2a:fa:3c:e9:1a:fb:c8:b4:52:30:82:47:7c:f2:51:cc:61:
         38:8e:6b:1c:5b:5b:6d:5f:df:5d:99:5f:26:c1:18:ed:37:3b:
         91:9d:1f:2c:6d:e8:5d:48:d2:8a:de:8c:5f:d7:dc:5d:70:a5:
         07:e4:42:fa:0c:cf:c1:8b:8f:6b:e8:c0:8e:c3:23:9e:ca:c1:
         44:c2:26:e8:d6:25:ab:53:ac:f1:a9:4b:9a:c8:09:ec:ff:34:
         d8:d5:2a:ba:1e:fa:4d:df:81:4b:f6:8f:0b:98:e9:62:97:28:
         a1:68:f5:f2:35:51:71:19:84:f6:30:5e:d3:da:5e:ba:0b:55:
         ad:ad:de:a8:46:f3:7a:35:09:fb:81:bc:2f:0d:a5:6d:d7:78:
         30:81:8a:c9:52:3b:a2:e8:64:2e:5b:9a:46:98:7b:0c:e2:ff:
         f3:a3:fd:6e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUarnvQU/TrnfcOLU5S6UTtJAgKH0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzBCMDY3RjQ3MDVFREYxNkM2M0VENTFCOUY4OTQ2Nzg3
QjA3RjIzNzAeFw0yNTAyMDQxODUwMTJaFw0yNjAyMDMxODU1MTJaMDMxMTAvBgNV
BAMTKDczQTc5MzhCMjhERjk5OURGN0JDQUExRTU3MzQzQzkyNDEyNTFEMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGkogMShZTSnt/6eC8QOhxHYI
ye/2zNqDZiYI72jADKBqlx5U5SipED+KcdDqCrg04zFgILiXWKYH7EQo9I1Jawj7
+WEg2kRbzAIy+SyNobSrWWuZ2jAfQVd1EPWkx84kTKLl23kPcCrM+dAsjojY7Dm9
gh11j3okQ1d318TXl9bYHmoIn06Bb5OfOMnskwQjlptahbTH1fPG227LL1JF2S7s
yiRS07liFZPe8s06P3bBo/S9E99SKSbuohH3alGQgYuiEX1y38bhvdzQZ6jax8sz
QmpmWp33MVwRlwmIz56URcgLerxI/O7vh0luIK7sNyldsf1nFCPsAtj0oiiZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUc6eTiyjfmZ33vKoeVzQ8kkElHSswHwYDVR0j
BBgwFoAUMLBn9HBe3xbGPtUbn4lGeHsH8jcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNTQ2NEM5QjhBRDkyQTU1NDQ2RjFEQjU5Q0YwMkM3Mjg3
QkUyRTAyMzk3MzZEQkEyRTZBQUVFQzg1MUUzNUM4LzAvMzBCMDY3RjQ3MDVFREYx
NkM2M0VENTFCOUY4OTQ2Nzg3QjA3RjIzNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMEIwNjdGNDcwNUVERjE2QzYz
RUQ1MUI5Rjg5NDY3ODdCMDdGMjM3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjU0NjRDOUI4QUQ5MkE1NTQ0NkYxREI1OUNGMDJDNzI4N0JFMkUwMjM5
NzM2REJBMkU2QUFFRUM4NTFFMzVDOC8wLzMxMzkzMDJlMzEzNDMzMmUzMTMyMzgy
ZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGvo+A
MA0GCSqGSIb3DQEBCwUAA4IBAQAdF6h5R/bjxb2NKO3wR8Y2lCGtX4pozU5jTMI9
ByC4scOtdP4c+HAewqYC1QrU0BnFDj6GvKmP1TiHq+qQCcukSuzHpNRwiiJv5VPe
Her4Avo2jU3nBpflfxIyKvo86Rr7yLRSMIJHfPJRzGE4jmscW1ttX99dmV8mwRjt
NzuRnR8sbehdSNKK3oxf19xdcKUH5EL6DM/Bi49r6MCOwyOeysFEwibo1iWrU6zx
qUuayAns/zTY1Sq6HvpN34FL9o8LmOlilyihaPXyNVFxGYT2MF7T2l66C1Wtrd6o
RvN6NQn7gbwvDaVt13gwgYrJUjui6GQuW5pGmHsM4v/zo/1u
-----END CERTIFICATE-----