Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa
File:                     3139302e3139372e35362e302f32312d3231203d3e203130323639.roa (raw, json)
Hash identifier:          rWy4Jwu5FbaTSP4+rwMKsbbXFsBCZtuPM9h6Ay0aW80=
Subject key identifier:   6D:00:DE:83:80:66:03:C8:1D:44:E1:FA:9E:72:46:89:75:46:AD:99
Certificate issuer:       /CN=50E9A62B71889867BD936A05F05874C0F48E8492
Certificate serial:       4891A99974FB6291E3A143E45B8CEB216FE121A7
Authority key identifier: 50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa
Signing time:             Tue 04 Feb 2025 18:12:26 +0000
ROA not before:           Tue 04 Feb 2025 18:07:26 +0000
ROA not after:            Tue 03 Feb 2026 18:12:26 +0000
asID:                     10269
IP address blocks:        190.197.56.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:91:a9:99:74:fb:62:91:e3:a1:43:e4:5b:8c:eb:21:6f:e1:21:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50E9A62B71889867BD936A05F05874C0F48E8492
        Validity
            Not Before: Feb  4 18:07:26 2025 GMT
            Not After : Feb  3 18:12:26 2026 GMT
        Subject: CN=6D00DE83806603C81D44E1FA9E7246897546AD99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e1:3e:5b:15:e8:24:94:8b:cc:e0:bc:e2:a6:
                    2b:0e:53:69:b4:1a:12:2b:3a:64:ce:69:ef:5f:56:
                    d0:59:96:7c:e0:39:6e:0b:ad:69:d5:b9:f5:8a:c3:
                    8b:3d:c9:76:f5:c3:e9:a8:54:2e:23:52:28:f8:bb:
                    1c:79:bb:64:0f:40:51:b0:e0:09:0f:bf:21:7a:70:
                    b7:0b:25:76:98:aa:da:36:60:49:49:c0:a1:b4:40:
                    90:92:c9:38:c6:47:96:10:5c:41:0d:97:d5:2b:33:
                    7f:d3:c9:f8:84:c8:9f:73:53:37:ff:02:de:fa:43:
                    34:ef:31:94:d6:22:92:26:a6:0c:67:90:38:e7:16:
                    09:8e:6b:b9:47:ed:07:14:bd:39:b9:1e:e0:32:d9:
                    1e:a4:ea:b4:c0:70:dc:1c:d9:db:cb:96:0b:1d:2b:
                    8e:37:e8:ac:21:aa:9f:33:ba:9e:9f:8c:96:06:3a:
                    13:92:1a:00:b1:4e:1c:17:77:39:77:89:e1:80:c0:
                    eb:f5:12:3a:9e:f1:59:fb:b2:bb:52:8e:88:81:fb:
                    0b:e7:2c:32:b0:b7:e4:dd:7d:d2:59:32:a6:59:f4:
                    f2:76:c8:23:d9:a0:26:78:e9:c3:4d:0a:21:4e:6d:
                    3c:72:93:2b:64:f6:d7:c7:91:ee:6e:7a:0d:9b:9a:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:00:DE:83:80:66:03:C8:1D:44:E1:FA:9E:72:46:89:75:46:AD:99
            X509v3 Authority Key Identifier:
                keyid:50:E9:A6:2B:71:88:98:67:BD:93:6A:05:F0:58:74:C0:F4:8E:84:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/50E9A62B71889867BD936A05F05874C0F48E8492.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/50E9A62B71889867BD936A05F05874C0F48E8492.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301DE5EA01456F36520AAEE4363805E069B712ECFC7C157A399B597FF1A824E1/0/3139302e3139372e35362e302f32312d3231203d3e203130323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:27:21:e9:ca:5f:33:1d:fc:2a:85:5f:c7:22:92:67:ad:61:
         7c:27:8f:e0:82:a3:5c:59:6a:e4:4c:9f:4d:cc:aa:a5:89:e9:
         61:79:82:79:9c:2b:4e:90:87:dd:47:92:86:dc:2f:7f:cd:39:
         3f:d2:61:64:bc:62:0a:67:1a:28:1d:61:36:f9:75:15:89:42:
         e0:38:c6:76:1e:97:78:2a:65:74:0c:e5:f8:b3:55:d7:d7:54:
         df:e0:6d:fa:76:79:2a:69:33:dd:d6:97:ec:7d:d2:c9:93:4d:
         74:47:3c:bc:90:a2:a1:c6:4f:dc:36:13:0b:fd:ac:80:e0:23:
         06:e8:16:a7:35:a1:68:23:cc:55:27:e7:bd:65:4c:67:f4:e0:
         0a:64:0f:43:48:2f:07:6c:73:e2:56:a8:fb:8f:d3:fc:96:6b:
         e1:4e:2f:90:73:ed:9a:f2:49:8a:36:d7:54:79:a1:f7:4f:00:
         31:e8:aa:7e:66:58:83:f7:cb:2c:34:5e:65:86:73:c2:4f:34:
         3c:d9:8a:7d:ed:fd:74:cc:1a:f9:3c:27:6d:66:bf:f6:dc:e2:
         df:0e:71:8c:1b:c5:55:10:77:64:f7:ce:e7:79:7b:c2:81:e7:
         a4:d1:e9:27:7a:4f:bf:9d:28:f6:3e:7f:55:47:02:ec:f3:2c:
         7b:ae:e7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----