Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3230382e302f32302d3234203d3e203236363131.roa
File:                     3139302e3132372e3230382e302f32302d3234203d3e203236363131.roa (raw, json)
Hash identifier:          HYAl4yGf8tOZoneRUjJWnXQkRQk/d4Mj0/pCKA7XOCo=
Subject key identifier:   E5:45:91:38:5D:9B:42:B0:99:7C:D5:36:97:54:8C:77:87:5D:B5:E3
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       771D95D76F00937F9D7B8BABEEE42F001F0E7DC5
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3230382e302f32302d3234203d3e203236363131.roa
Signing time:             Tue 04 Feb 2025 18:05:17 +0000
ROA not before:           Tue 04 Feb 2025 18:00:17 +0000
ROA not after:            Tue 03 Feb 2026 18:05:17 +0000
asID:                     26611
IP address blocks:        190.127.208.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1d:95:d7:6f:00:93:7f:9d:7b:8b:ab:ee:e4:2f:00:1f:0e:7d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Feb  4 18:00:17 2025 GMT
            Not After : Feb  3 18:05:17 2026 GMT
        Subject: CN=E54591385D9B42B0997CD53697548C77875DB5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c1:9a:8e:4f:89:a0:23:5a:a4:d3:c7:ed:65:
                    f8:11:bc:8b:18:d1:3a:a0:b3:30:54:72:a7:3c:f2:
                    ab:42:bf:c4:66:25:56:a7:37:c5:11:0b:cb:32:60:
                    3d:28:06:6c:f7:ef:07:11:61:95:89:61:1f:3a:95:
                    d5:d0:e1:70:ee:75:a7:b8:59:92:ba:da:9e:83:b6:
                    83:e8:c6:11:78:81:4f:91:a3:87:54:2a:49:42:9b:
                    37:c3:da:0d:23:c7:ee:42:7e:d0:ba:6b:19:79:90:
                    46:ba:8f:77:be:9c:b9:70:92:ca:44:92:1d:e0:0c:
                    bb:67:00:c7:c4:a3:2c:76:f0:d5:09:35:64:05:cf:
                    98:3c:b4:30:96:5c:fa:0a:3c:0c:19:40:31:92:73:
                    bd:74:54:2b:56:4f:2c:56:36:32:48:d3:65:f9:84:
                    05:50:de:a3:1f:99:f1:1b:a4:af:cb:0e:e8:2d:3b:
                    6c:45:94:45:6f:fe:ad:09:09:5a:7a:91:f7:49:db:
                    25:50:ef:12:92:de:60:af:fa:cd:ec:8e:a4:f7:2f:
                    23:d3:ec:5a:da:4c:52:38:0e:c4:9a:c2:1e:f5:03:
                    5a:b6:07:99:48:20:0f:c0:2e:93:32:e8:b9:32:a9:
                    9a:73:cc:c3:8f:7a:65:b8:c8:a7:7e:a5:7e:f7:aa:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:91:38:5D:9B:42:B0:99:7C:D5:36:97:54:8C:77:87:5D:B5:E3
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139302e3132372e3230382e302f32302d3234203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.127.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a1:4f:13:7b:e9:90:ab:eb:21:b4:03:a2:f3:90:6c:dd:61:22:
         57:13:db:5f:55:80:7a:09:7e:ed:2d:00:a3:2b:22:d0:84:d8:
         f4:fd:6a:4c:e2:63:98:b7:d8:8b:ca:7b:ae:88:92:3c:4b:c2:
         af:df:a6:89:40:d2:13:76:61:9e:ba:95:3c:2e:fd:b5:63:39:
         6b:bd:56:9a:1f:da:15:52:05:84:a6:1a:33:62:18:93:f8:dd:
         49:2c:2a:9e:f5:b0:cc:06:dd:36:e6:e7:e0:41:de:c1:22:2d:
         18:39:6c:de:f7:74:24:bc:b8:43:62:81:f5:9f:2f:e4:2c:19:
         6f:76:14:b6:11:d2:1f:19:b3:64:b6:37:ff:9f:57:48:31:89:
         4f:07:0e:cd:f0:6e:a0:5e:39:ec:81:dc:25:72:ed:0d:1a:d1:
         b9:b0:46:dc:2d:0c:0f:57:16:89:8d:aa:00:76:e6:b6:50:25:
         0a:45:1c:18:12:01:f2:eb:37:03:86:24:b7:b9:3e:0a:75:66:
         f5:22:39:da:56:24:50:90:3e:4d:9f:a1:65:34:28:52:7f:fe:
         a9:6e:f1:21:f7:da:0f:43:c0:e3:f5:12:44:8b:4e:bf:ba:8d:
         fc:68:08:05:30:22:dc:46:65:cb:e0:c7:49:42:b2:12:d4:0d:
         3e:9c:b2:f9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdx2V128Ak3+de4ur7uQvAB8OfcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNTAyMDQxODAwMTdaFw0yNjAyMDMxODA1MTdaMDMxMTAvBgNV
BAMTKEU1NDU5MTM4NUQ5QjQyQjA5OTdDRDUzNjk3NTQ4Qzc3ODc1REI1RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwZqOT4mgI1qk08ftZfgRvIsY
0TqgszBUcqc88qtCv8RmJVanN8URC8syYD0oBmz37wcRYZWJYR86ldXQ4XDudae4
WZK62p6DtoPoxhF4gU+Ro4dUKklCmzfD2g0jx+5CftC6axl5kEa6j3e+nLlwkspE
kh3gDLtnAMfEoyx28NUJNWQFz5g8tDCWXPoKPAwZQDGSc710VCtWTyxWNjJI02X5
hAVQ3qMfmfEbpK/LDugtO2xFlEVv/q0JCVp6kfdJ2yVQ7xKS3mCv+s3sjqT3LyPT
7FraTFI4DsSawh71A1q2B5lIIA/ALpMy6LkyqZpzzMOPemW4yKd+pX73qntnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU5UWROF2bQrCZfNU2l1SMd4ddteMwHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMDJlMzEzMjM3MmUzMjMwMzgy
ZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEvn/Q
MA0GCSqGSIb3DQEBCwUAA4IBAQChTxN76ZCr6yG0A6LzkGzdYSJXE9tfVYB6CX7t
LQCjKyLQhNj0/WpM4mOYt9iLynuuiJI8S8Kv36aJQNITdmGeupU8Lv21YzlrvVaa
H9oVUgWEphozYhiT+N1JLCqe9bDMBt025ufgQd7BIi0YOWze93QkvLhDYoH1ny/k
LBlvdhS2EdIfGbNktjf/n1dIMYlPBw7N8G6gXjnsgdwlcu0NGtG5sEbcLQwPVxaJ
jaoAdua2UCUKRRwYEgHy6zcDhiS3uT4KdWb1IjnaViRQkD5Nn6FlNChSf/6pbvEh
99oPQ8Dj9RJEi06/uo38aAgFMCLcRmXL4MdJQrIS1A0+nLL5
-----END CERTIFICATE-----