Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230302e302f32312d3234203d3e203131303134.roa
File:                     3139302e3130342e3230302e302f32312d3234203d3e203131303134.roa (raw, json)
Hash identifier:          uuSx/5KTIZAbcIsBjG/bLp5sJcNoRefrdHD6qk/puCA=
Subject key identifier:   60:3B:D9:8A:46:63:D5:B9:D9:A8:9B:F5:99:21:F7:A7:4A:1E:0A:DF
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       4FCA9EF2E1DB456A927E1E5406E98471AA1200FB
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230302e302f32312d3234203d3e203131303134.roa
Signing time:             Tue 04 Feb 2025 18:25:00 +0000
ROA not before:           Tue 04 Feb 2025 18:20:00 +0000
ROA not after:            Tue 03 Feb 2026 18:25:00 +0000
asID:                     11014
IP address blocks:        190.104.200.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:ca:9e:f2:e1:db:45:6a:92:7e:1e:54:06:e9:84:71:aa:12:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Feb  4 18:20:00 2025 GMT
            Not After : Feb  3 18:25:00 2026 GMT
        Subject: CN=603BD98A4663D5B9D9A89BF59921F7A74A1E0ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:21:54:6b:21:a2:c3:fa:b9:54:9d:28:c0:
                    f2:54:82:2f:09:a8:a9:92:fa:f1:f5:bb:de:b1:1d:
                    af:f6:3d:70:63:8f:bb:87:21:aa:61:c8:85:c6:0f:
                    dd:93:cc:cd:83:96:b8:ec:9d:e0:38:5d:0d:d3:c9:
                    a1:4f:2c:b9:97:79:d8:7e:84:8a:3a:08:e3:af:cf:
                    44:44:b0:0e:f1:0a:26:52:01:2f:72:d6:96:2b:35:
                    fa:3d:2c:ee:48:5a:10:40:cc:67:b2:12:47:c4:61:
                    94:d6:24:3e:6e:20:53:46:af:a9:ec:44:e2:ec:f4:
                    8b:d3:12:0f:7b:8e:2f:71:15:b3:1f:38:80:c8:4e:
                    f0:b0:c6:53:4d:eb:a3:14:9e:10:04:64:b4:91:1c:
                    c5:70:b0:6e:02:09:9f:b0:4e:f7:06:6f:62:21:e5:
                    b1:2e:e6:44:fb:3f:0d:22:ff:2c:44:20:53:7c:f2:
                    69:f5:6f:bf:93:bb:65:fe:7e:eb:cf:0b:c4:d0:f4:
                    5c:10:0d:1d:e8:3b:6e:df:99:39:d7:70:79:d7:21:
                    9d:9c:ae:33:97:73:d7:5d:e8:71:94:c0:82:23:eb:
                    2c:c0:29:4f:b5:d0:21:59:ca:48:b4:77:30:a9:fd:
                    5e:9d:4c:af:7c:56:c6:39:c8:ed:ec:d7:56:b3:0e:
                    aa:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:3B:D9:8A:46:63:D5:B9:D9:A8:9B:F5:99:21:F7:A7:4A:1E:0A:DF
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3139302e3130342e3230302e302f32312d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:a9:4a:08:fc:8b:c1:0a:14:38:05:df:c5:06:4a:70:bd:22:
         84:07:6d:9a:b4:d1:d8:3d:61:ec:4f:87:9a:06:ea:d3:c8:28:
         b6:bf:8d:63:d2:3e:a6:94:24:39:e5:b6:73:2c:02:2e:a6:79:
         5d:82:6b:80:a2:f7:74:cd:fa:6a:e1:4e:22:df:12:18:96:82:
         89:4b:62:81:d6:ce:15:5f:74:c8:8b:36:a2:f7:a1:19:81:62:
         b3:e6:83:34:f3:f5:74:db:20:8a:02:77:cc:e2:43:51:f9:5a:
         61:41:b5:28:f5:b4:4e:6c:78:f8:b2:6a:c3:4d:ba:22:4f:82:
         56:7b:85:b8:bf:a5:f8:14:7c:35:23:20:4e:2f:1a:a7:a1:0f:
         ee:34:9b:d9:e8:a6:eb:c9:71:3c:88:de:07:ea:79:2d:04:51:
         ba:4a:e6:a8:eb:d5:36:96:93:ff:56:61:0d:43:b0:5c:75:23:
         7c:bc:c4:8b:29:da:ea:2e:a9:6a:dd:c1:c4:71:8f:06:65:af:
         7f:45:51:ea:01:ba:36:ae:78:73:b0:83:c2:71:49:a5:7d:90:
         64:e6:a4:11:02:7e:17:38:4c:ec:54:e5:9c:bd:34:56:c2:d1:
         c3:71:8e:43:33:29:fc:10:d8:b1:7f:2b:17:11:4a:1f:0b:e1:
         1e:4d:d1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----