Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/3139302e39372e3137322e302f32322d3234203d3e20323639393437.roa
File:                     3139302e39372e3137322e302f32322d3234203d3e20323639393437.roa (raw, json)
Hash identifier:          h31z5aJHLSEUyZHDQ4KfgPwdj1dUurc6J0UfVVT8gWk=
Subject key identifier:   1E:09:9B:CD:9A:20:76:84:98:33:6B:75:A5:AC:55:9B:64:DB:9D:50
Certificate issuer:       /CN=F6C5967562F136D595A8232FAABB144D451C5519
Certificate serial:       3FAE7E26C4646CE244684436D6962AF9FA690353
Authority key identifier: F6:C5:96:75:62:F1:36:D5:95:A8:23:2F:AA:BB:14:4D:45:1C:55:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6C5967562F136D595A8232FAABB144D451C5519.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/3139302e39372e3137322e302f32322d3234203d3e20323639393437.roa
Signing time:             Tue 05 Mar 2024 18:10:47 +0000
ROA not before:           Tue 05 Mar 2024 18:05:47 +0000
ROA not after:            Tue 04 Mar 2025 18:10:47 +0000
asID:                     269947
IP address blocks:        190.97.172.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ae:7e:26:c4:64:6c:e2:44:68:44:36:d6:96:2a:f9:fa:69:03:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6C5967562F136D595A8232FAABB144D451C5519
        Validity
            Not Before: Mar  5 18:05:47 2024 GMT
            Not After : Mar  4 18:10:47 2025 GMT
        Subject: CN=1E099BCD9A20768498336B75A5AC559B64DB9D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:ab:57:86:c3:4a:21:a1:27:d4:2d:0b:8e:
                    31:18:13:9c:2b:8e:e5:9a:d5:47:a0:20:7b:a0:99:
                    35:0a:fa:ee:9c:51:5a:ec:60:fb:c8:02:f9:1e:74:
                    81:8f:e0:51:35:e2:a7:01:7c:d6:c8:25:ed:b5:94:
                    4f:c0:70:38:19:9a:d3:bf:d3:9a:9c:1a:f2:77:91:
                    26:d2:f7:94:a7:21:41:f4:27:72:e8:a9:9a:83:01:
                    eb:65:93:4b:c6:82:a4:b0:c2:8c:fb:3a:31:c8:ae:
                    4d:33:e9:00:ea:14:e4:96:1b:ac:78:77:4c:8b:e1:
                    3c:ae:ad:db:ea:3f:f7:bd:8e:e1:77:39:4a:ec:28:
                    2f:5d:ee:ae:56:15:c5:f4:8d:22:a2:ee:27:17:50:
                    3b:82:8c:46:38:ab:30:73:4a:d1:ba:ae:2e:c7:ad:
                    5d:fb:b0:b5:94:46:22:e5:87:28:b2:63:c6:12:d7:
                    80:96:e5:4c:16:f6:2d:f2:fa:20:bf:39:5f:bf:8a:
                    e5:48:87:d6:bb:11:cf:2c:34:59:ff:37:a8:82:e8:
                    72:85:db:e9:ac:b2:09:f9:e3:a1:e3:21:92:e6:33:
                    8c:28:0e:3c:4c:fd:d2:0f:03:c4:18:55:ec:46:27:
                    31:95:fd:9c:dc:d3:4d:be:dd:4a:58:d4:1e:6a:38:
                    72:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:09:9B:CD:9A:20:76:84:98:33:6B:75:A5:AC:55:9B:64:DB:9D:50
            X509v3 Authority Key Identifier:
                keyid:F6:C5:96:75:62:F1:36:D5:95:A8:23:2F:AA:BB:14:4D:45:1C:55:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/F6C5967562F136D595A8232FAABB144D451C5519.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F6C5967562F136D595A8232FAABB144D451C5519.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E72357D9916041599530C01675F01171BAF7FA482A4C2C64A31D566A027ED19/0/3139302e39372e3137322e302f32322d3234203d3e20323639393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:dd:0d:4d:2b:7f:da:21:69:75:36:a7:b8:79:0b:f7:64:
         12:b0:17:1a:72:5f:21:a6:dd:b5:f3:ab:de:f3:a9:7f:43:18:
         14:68:a7:1e:97:45:6a:c9:5e:4e:06:7a:9c:f2:9d:79:85:ca:
         6c:c4:57:25:00:a3:28:26:64:c0:ac:34:89:86:0c:1f:e7:8f:
         b1:04:b8:43:3d:a4:a5:50:59:9a:f9:55:e5:dc:a1:4b:19:32:
         e3:d3:bb:83:d3:21:66:31:37:6a:12:45:b4:59:dc:44:ea:d2:
         49:66:59:0d:ce:8f:e2:59:a7:f6:94:77:5b:f3:0c:bf:6a:f3:
         4e:1d:fd:9b:4b:2b:46:32:d5:48:59:71:c9:5e:25:fc:6f:2b:
         dc:c7:6d:98:03:39:1c:ac:7d:e7:2d:ce:22:c2:30:33:c4:b6:
         ef:45:05:52:1d:1e:39:5f:fe:49:e9:a3:6e:fe:e2:b7:72:c4:
         57:98:7b:9a:28:bb:a0:0a:4e:06:78:2b:e8:79:fb:69:64:6b:
         5d:9e:bd:24:0b:a1:b0:01:88:0f:f7:3f:4d:06:7f:2f:d8:d5:
         aa:0a:4e:d8:58:19:66:ca:6d:31:aa:41:ad:ae:e1:51:41:9f:
         f1:6a:79:2b:6d:4a:bc:ab:f3:03:2a:61:0b:48:6f:c8:61:eb:
         46:3c:cc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----