Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
File:                     3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa (raw, json)
Hash identifier:          mim23TYpgu/m16r/BzfLZunLWSsSncNbwJMTkK+pzlU=
Subject key identifier:   D5:75:FD:E5:9C:FB:D8:DE:F9:24:0E:25:4D:99:4E:2A:26:14:AF:E9
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       4EFAC491CCDDF0047B755A0BDB29639C6D8E0FFE
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa
Signing time:             Tue 04 Feb 2025 18:36:10 +0000
ROA not before:           Tue 04 Feb 2025 18:31:10 +0000
ROA not after:            Tue 03 Feb 2026 18:36:10 +0000
asID:                     52278
IP address blocks:        190.105.250.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:fa:c4:91:cc:dd:f0:04:7b:75:5a:0b:db:29:63:9c:6d:8e:0f:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb  4 18:31:10 2025 GMT
            Not After : Feb  3 18:36:10 2026 GMT
        Subject: CN=D575FDE59CFBD8DEF9240E254D994E2A2614AFE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:43:aa:6b:75:71:b7:8c:ca:d8:8f:05:0c:
                    f0:de:50:a6:e8:e7:49:80:6e:36:59:cb:29:56:df:
                    b3:c7:8f:17:75:ce:5a:4b:c9:d1:c0:e2:3e:84:06:
                    97:23:67:02:64:00:23:69:23:5c:6c:30:cf:cd:aa:
                    13:b6:0f:92:be:36:8e:ed:c0:42:ca:8d:fd:6f:52:
                    6f:40:4e:72:67:13:ea:d0:a0:d1:8d:3d:22:e2:fd:
                    66:e5:c7:75:fe:9a:83:34:00:6b:92:8f:50:ba:b6:
                    60:d1:22:e4:81:e5:7e:58:62:b3:68:93:e8:90:ac:
                    71:79:22:01:02:52:ec:68:e0:e6:4b:9b:e5:cf:e1:
                    02:8c:72:76:f8:56:cb:6b:fd:25:49:17:ea:68:ab:
                    c5:23:23:71:c8:5f:ee:9a:3d:9a:d1:8d:e7:85:8f:
                    78:fd:f8:99:8e:21:5e:69:7d:78:45:28:ff:41:62:
                    c6:a3:12:53:2b:30:92:c5:19:51:be:4f:5e:09:f9:
                    d7:96:c1:42:0d:00:0d:e5:43:d6:dd:15:7d:94:e6:
                    14:de:0a:35:af:5b:4d:0a:99:7d:97:c3:ae:46:08:
                    df:23:19:d7:5d:e5:b9:97:9a:b5:a2:20:c5:0b:4e:
                    65:d3:6b:73:24:e3:65:12:80:8b:f0:a8:aa:84:f8:
                    02:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:FD:E5:9C:FB:D8:DE:F9:24:0E:25:4D:99:4E:2A:26:14:AF:E9
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/3139302e3130352e3235302e302f32332d3233203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:15:88:d8:f3:a8:46:a6:8c:ea:a7:3c:c8:87:a5:1e:2a:8d:
         f5:a3:69:52:0f:09:70:04:9f:56:3b:42:64:a7:7a:cc:a7:93:
         fd:6b:c1:b9:28:96:74:d9:3d:4a:95:39:77:57:86:c2:15:ca:
         45:f0:cd:34:0c:9f:4b:24:d3:fb:e8:32:4e:cc:b6:80:8b:1d:
         22:99:33:38:ba:ae:0c:63:ec:a7:45:8e:d3:c2:86:95:8f:78:
         22:a2:8c:a9:9a:1a:e9:84:a7:71:58:20:0d:82:6a:45:6e:ba:
         60:4f:9d:6c:11:2d:cc:d4:3f:4f:e9:f3:9c:c7:76:9d:fc:3d:
         ad:b8:ce:b0:59:ab:a2:33:e9:4a:26:4a:4f:82:1e:c7:5d:22:
         b6:39:ec:9d:a3:23:f9:df:39:1c:04:b3:52:c9:01:ec:16:21:
         5d:57:72:7b:ec:20:1b:b7:22:8f:41:36:9c:08:63:8f:39:31:
         6e:7c:ee:44:be:c6:68:e3:fa:fa:a2:ef:b5:b8:e6:2c:ff:f1:
         2a:59:36:67:a1:f2:97:e8:f4:02:2b:32:23:58:40:0e:72:70:
         14:fd:2f:05:fc:42:c3:43:ca:94:50:fa:86:1d:9b:6f:dd:81:
         ac:2a:06:5c:eb:4b:40:51:c1:e9:6b:f7:7e:ed:b9:0a:c0:44:
         c4:a5:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----