Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa
File:                     3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa (raw, json)
Hash identifier:          /aSIv9nk2GdPmG5IYTVNUB+GdyNuft5XTe89mJkkMiU=
Subject key identifier:   24:D3:61:28:C4:AD:6E:16:35:3A:A2:74:9F:6B:05:12:A2:05:4A:EA
Certificate issuer:       /CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
Certificate serial:       24DD6B8C0D9C527CE71A0851FE4062C145854184
Authority key identifier: 11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa
Signing time:             Tue 23 Jul 2024 15:50:02 +0000
ROA not before:           Tue 23 Jul 2024 15:45:02 +0000
ROA not after:            Tue 22 Jul 2025 15:50:02 +0000
asID:                     264645
IP address blocks:        190.104.96.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dd:6b:8c:0d:9c:52:7c:e7:1a:08:51:fe:40:62:c1:45:85:41:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11731D6A881F91008CAFED3BA0E6AEC61E625CF2
        Validity
            Not Before: Jul 23 15:45:02 2024 GMT
            Not After : Jul 22 15:50:02 2025 GMT
        Subject: CN=24D36128C4AD6E16353AA2749F6B0512A2054AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:1b:af:26:9a:83:d3:1f:a7:2e:33:43:02:
                    22:6b:90:d9:2c:c8:78:c3:1d:3f:0a:46:34:5d:98:
                    94:aa:05:3a:4b:c0:0a:a0:f1:db:a7:ea:ca:d5:37:
                    9d:96:51:d7:fe:83:f8:24:2e:48:f1:e0:0e:25:eb:
                    93:cb:fd:37:bb:ae:16:65:72:5b:39:71:c4:1c:2a:
                    64:90:6e:43:59:02:7e:90:4d:59:f3:f4:45:d0:fd:
                    29:1c:23:89:e1:ca:6f:c2:c1:8f:af:14:40:59:0b:
                    33:f4:70:bc:a3:92:19:91:a9:66:33:c9:1f:2a:4b:
                    2b:82:24:45:82:56:1c:6f:15:6f:98:9a:fe:98:9b:
                    70:ba:fa:92:df:38:9e:0e:dc:ef:e4:d9:ba:51:11:
                    36:69:03:53:0d:42:b2:f6:ee:c8:a2:3e:d5:9b:ab:
                    3e:55:3a:c9:49:b6:6c:a0:95:36:7c:6b:64:26:c3:
                    eb:25:fe:2c:f0:d7:27:a7:bf:6f:81:07:63:43:b1:
                    c1:66:b5:da:fc:e8:7e:85:4b:76:ed:43:00:12:71:
                    5a:f9:6a:bb:2e:ff:c8:b5:7f:9e:b4:22:b3:4d:72:
                    5e:56:63:60:34:11:42:b2:c0:97:9c:f8:60:cb:cd:
                    34:0b:9c:2b:ee:63:89:28:7e:fd:2d:23:0f:ac:6c:
                    05:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D3:61:28:C4:AD:6E:16:35:3A:A2:74:9F:6B:05:12:A2:05:4A:EA
            X509v3 Authority Key Identifier:
                keyid:11:73:1D:6A:88:1F:91:00:8C:AF:ED:3B:A0:E6:AE:C6:1E:62:5C:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11731D6A881F91008CAFED3BA0E6AEC61E625CF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DAC61416E5C1955F22AFA699DD855184F60984B825A2C0CA30C8E9ACCEFEEE1/0/3139302e3130342e39362e302f32312d3231203d3e20323634363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:d7:6f:15:a6:58:6b:fa:2e:b8:f5:1f:14:d1:50:7f:43:
         4e:f6:0b:4e:bf:55:f3:d3:fa:78:62:b5:5f:03:5b:bf:ff:a6:
         37:e8:e2:be:34:2f:eb:c7:26:67:30:62:f1:a4:a4:3b:74:36:
         00:1a:a0:9e:be:89:64:8b:f5:d3:0b:63:31:b2:e3:08:d4:d5:
         16:7f:fc:7b:b0:f6:57:63:c9:ea:3d:13:82:4c:18:e5:d5:81:
         b7:81:bc:a3:e8:0a:e2:93:e6:d2:32:a4:17:2b:3b:bd:a9:a4:
         ac:f4:f0:ac:d3:32:b6:ae:a0:06:d6:fe:2d:dc:59:c8:3d:c2:
         d2:d2:e9:c0:25:a9:13:63:1d:fe:51:47:65:97:ce:e2:3b:d0:
         e8:85:5b:f1:21:9f:ce:de:ed:5a:a2:9a:82:ce:ad:1a:2a:af:
         1f:7b:50:ec:8c:a3:71:e2:33:98:6b:32:cc:9b:57:3d:1b:0f:
         b2:36:71:c5:26:7e:70:26:60:a6:72:e2:a3:45:0a:0b:16:18:
         f8:e9:e7:48:d1:6e:d1:e9:d0:8a:3b:ce:5c:38:0c:e1:71:4f:
         61:3f:99:66:d3:06:49:4c:94:56:51:5b:45:98:45:72:82:86:
         ff:ff:83:71:43:b3:97:e2:08:e0:73:3d:05:65:ac:77:38:22:
         8a:bd:b3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----