Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
File:                     3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa (raw, json)
Hash identifier:          TH1LsJ6XTZW6ccMNao9f2VLBt51Kc3z/mmw0pHMf/FE=
Subject key identifier:   D1:E3:DB:6E:90:85:B6:01:02:E8:BB:C4:8F:60:A0:9C:A8:7F:23:13
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       1B3856F727D93DCFD7079BDA6A36A06EE3176441
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:24 +0000
ROA not before:           Tue 04 Feb 2025 18:50:24 +0000
ROA not after:            Tue 03 Feb 2026 18:55:24 +0000
asID:                     14754
IP address blocks:        190.149.154.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:38:56:f7:27:d9:3d:cf:d7:07:9b:da:6a:36:a0:6e:e3:17:64:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:24 2025 GMT
            Not After : Feb  3 18:55:24 2026 GMT
        Subject: CN=D1E3DB6E9085B60102E8BBC48F60A09CA87F2313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:49:88:41:e1:ac:20:f0:95:53:ef:da:90:
                    d0:8b:2a:25:a3:19:3e:54:3e:6b:0d:dd:c5:6c:17:
                    55:fc:88:13:68:63:2f:92:05:e0:06:87:9a:73:27:
                    4d:6f:6c:d4:f7:6d:5a:ae:2c:93:06:ab:37:81:69:
                    3c:61:a0:05:07:d7:e5:61:1e:86:e3:ec:5b:25:79:
                    65:a3:fb:ff:f9:be:18:fa:2e:53:3c:e5:6f:ba:d2:
                    cd:44:6f:fd:42:4c:34:e3:19:87:7a:bc:20:0b:88:
                    c8:c7:1b:bb:6e:79:06:21:02:07:71:68:e9:0c:06:
                    29:7c:5b:b1:42:41:64:0a:a5:21:98:69:03:05:6d:
                    2d:b9:a5:77:dc:6a:d7:2b:61:3d:61:35:86:06:a8:
                    72:60:ee:2e:25:28:db:b5:db:0c:d7:c3:60:8b:45:
                    4a:c5:0a:b5:d7:4d:84:5f:93:76:01:da:38:c1:90:
                    1b:71:51:a5:41:30:6d:1a:1c:d1:78:5e:8e:21:db:
                    e8:f0:99:fc:73:ed:8b:34:0c:ed:61:22:b3:42:8e:
                    be:f5:ae:7d:57:a3:a9:d2:ea:32:7e:43:a3:54:90:
                    70:42:62:41:44:3a:7e:e3:3a:e4:15:2c:56:c2:17:
                    95:71:e5:3e:9e:88:81:44:c7:c3:04:db:e0:1a:86:
                    b6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:E3:DB:6E:90:85:B6:01:02:E8:BB:C4:8F:60:A0:9C:A8:7F:23:13
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/3139302e3134392e3135342e302f32332d3234203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.149.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:90:46:29:0c:1a:d2:46:f0:d6:c2:d2:50:2f:98:cb:8b:
         f1:2f:44:91:58:e0:f9:25:e3:d3:20:16:cb:d6:41:7b:e1:b7:
         0b:5c:26:f6:a3:64:b6:a9:07:f6:16:79:c4:a5:48:5c:0a:ba:
         80:86:0f:bf:ae:54:71:2f:dd:e1:23:e1:d4:46:7d:f6:13:b9:
         04:ca:5a:e0:a9:d8:f6:a7:1d:b3:53:36:d5:0d:89:de:7c:29:
         39:3a:f4:56:3f:1f:71:d4:21:d8:21:0d:68:15:82:87:75:47:
         af:5f:2b:16:3c:ac:08:cc:54:e1:bb:e4:09:25:64:8e:a6:c9:
         35:06:2a:c0:2f:02:fb:29:54:73:1c:c8:cc:4a:44:e6:96:33:
         95:2a:66:3e:fc:e0:57:78:56:02:78:83:0d:63:1e:69:c7:9b:
         55:4c:f1:fa:c4:d9:db:89:0c:92:09:e5:16:db:96:b1:a7:73:
         ff:70:98:bc:94:af:66:cd:50:87:5f:f3:56:83:ab:95:d7:39:
         f9:5b:02:ee:70:09:c7:9e:d2:0c:05:f6:75:10:6c:f3:66:e2:
         6c:0c:ed:68:4c:5c:ae:73:8a:f6:73:85:04:2f:74:eb:12:d9:
         c6:b1:b6:2e:7e:43:ab:dd:98:e2:51:ed:61:ed:71:d8:8f:11:
         fe:9f:fe:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----