Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133362e302f32312d3234203d3e203134373534.roa
File:                     3139302e3134392e3133362e302f32312d3234203d3e203134373534.roa (raw, json)
Hash identifier:          wPK9osRMmGVIHVAzzrNEVu9k8znah30PBn+B2TiIS/I=
Subject key identifier:   BA:5B:53:1C:E4:20:32:75:8A:D6:EF:67:74:85:BD:5E:12:1C:1C:30
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1106DAB03D1BA0098FDF9D216162A75972F54864
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133362e302f32312d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:24 +0000
ROA not before:           Tue 04 Feb 2025 18:50:24 +0000
ROA not after:            Tue 03 Feb 2026 18:55:24 +0000
asID:                     14754
IP address blocks:        190.149.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:06:da:b0:3d:1b:a0:09:8f:df:9d:21:61:62:a7:59:72:f5:48:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:24 2025 GMT
            Not After : Feb  3 18:55:24 2026 GMT
        Subject: CN=BA5B531CE42032758AD6EF677485BD5E121C1C30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:5e:2f:31:3c:5d:4e:94:dc:f7:2b:3f:89:
                    af:b4:f9:69:3a:4b:20:4b:11:68:8d:96:59:60:ae:
                    e7:01:6d:c0:e5:88:dd:83:76:54:e1:98:60:63:90:
                    a7:ac:49:7d:b1:64:aa:5a:45:92:b1:a2:3d:37:23:
                    47:96:4e:d5:76:46:22:16:ab:ea:ef:c5:c5:35:df:
                    b1:f3:c9:64:d5:81:65:f5:16:c1:80:9f:d0:f7:2f:
                    88:b5:77:1f:49:4d:18:97:9a:2a:ea:f0:f2:d9:3c:
                    b1:19:0e:a4:86:d1:81:b1:3c:81:a8:6f:3d:74:a1:
                    39:45:af:27:ca:19:e1:e1:0b:86:31:4d:d6:3d:cf:
                    e8:90:e3:e3:38:47:f2:a1:cd:cd:55:dd:1a:15:3e:
                    de:f6:e3:7a:23:2e:59:a6:8e:46:83:2d:9e:e8:9c:
                    0b:09:d3:a7:d2:4b:8f:fc:35:c0:b0:4d:16:9d:1d:
                    0c:12:32:e3:a2:33:e1:8a:55:a8:68:c7:04:eb:ed:
                    0d:9d:62:f8:55:da:fa:7f:d5:fd:3d:ea:da:93:54:
                    0d:c2:ea:76:e6:e8:3f:6b:77:05:a4:7e:47:95:9c:
                    2c:a8:cc:f3:71:7c:15:cd:bf:91:6a:22:09:f5:17:
                    1f:36:2c:5a:75:4d:2b:51:b4:fa:18:38:d5:d3:b0:
                    eb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5B:53:1C:E4:20:32:75:8A:D6:EF:67:74:85:BD:5E:12:1C:1C:30
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3133362e302f32312d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:d3:bf:9e:c8:e7:12:3e:3e:9b:cd:05:63:b1:50:71:12:3e:
         d5:7b:57:4b:ae:43:4a:cd:d9:1e:47:73:0b:00:a1:97:4b:ae:
         ca:4a:76:9f:d4:34:0e:53:9c:65:7d:56:61:22:e9:8e:e2:28:
         24:2f:7c:bd:87:f7:9c:b2:5d:51:f3:d4:ec:5c:e3:cf:50:6f:
         fe:ce:11:b6:99:1c:50:b7:f4:7a:a3:64:03:07:22:0e:c4:10:
         c8:79:0a:9b:2d:b5:8c:8d:04:1f:dd:b3:ff:6c:da:6b:38:01:
         60:d5:e2:e8:68:5f:bc:b1:a5:f6:5d:c6:01:c0:73:0a:85:3f:
         bb:f4:a7:32:57:09:3a:d6:ab:04:fb:46:50:59:31:72:d4:94:
         66:5f:dd:42:3c:0b:b0:b0:31:a6:9e:74:4e:e5:13:c7:6c:5d:
         59:a8:ee:97:03:c1:7e:3e:6f:43:ae:12:bf:02:38:9b:fc:25:
         ae:fe:df:0b:23:e9:6b:1e:08:9e:4c:76:e5:b2:5f:53:af:c1:
         26:8d:53:b4:0c:6b:b7:cb:bb:0b:41:7c:b5:f6:a4:da:48:81:
         dd:d5:a2:b3:46:d0:60:49:a0:13:b7:fd:60:6e:ce:ac:9a:c8:
         2e:29:20:0b:e6:fd:5c:6d:17:aa:95:45:95:1c:51:88:98:d2:
         06:6a:ad:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----