Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa
File:                     3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa (raw, json)
Hash identifier:          4GBQLZBZnbtUqrHeTq/wXsV+atRlP6iryytx3GuMlzk=
Subject key identifier:   ED:2A:65:A3:DB:32:09:2E:D6:FB:A9:BC:26:83:89:75:5F:CA:EF:F4
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       3C2A36A0942713FF40076AF8C995C43EE57E5304
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa
Signing time:             Tue 04 Feb 2025 20:03:51 +0000
ROA not before:           Tue 04 Feb 2025 19:58:51 +0000
ROA not after:            Tue 03 Feb 2026 20:03:51 +0000
asID:                     11315
IP address blocks:        190.197.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:2a:36:a0:94:27:13:ff:40:07:6a:f8:c9:95:c4:3e:e5:7e:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:51 2025 GMT
            Not After : Feb  3 20:03:51 2026 GMT
        Subject: CN=ED2A65A3DB32092ED6FBA9BC268389755FCAEFF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:1e:46:8e:99:6f:04:c1:cd:41:61:a4:7f:
                    95:07:d5:03:42:5a:25:c9:67:8d:18:da:ec:12:84:
                    d6:67:f4:bc:5c:99:ec:2b:30:77:59:e6:5e:e5:36:
                    43:a2:93:32:d3:71:9a:34:a7:77:75:31:c5:3a:44:
                    e8:46:66:84:bd:fc:e6:67:ae:36:1f:45:cd:89:77:
                    9a:98:3d:4d:fe:c3:78:46:98:49:94:5e:6e:2f:0d:
                    fe:c7:aa:7d:f4:55:16:72:0d:c8:50:45:93:4e:62:
                    41:3b:f1:ed:2c:0a:a6:03:20:5a:54:3b:13:70:11:
                    69:a9:08:47:f2:7c:dd:d7:3a:7c:59:b6:1b:a8:2e:
                    e5:b3:f4:44:a9:bf:ef:38:46:7d:7d:2b:dd:75:39:
                    89:1b:30:10:11:62:c3:a6:5d:13:e8:50:a6:73:b1:
                    e9:f0:37:1a:e7:e3:ed:35:a2:03:57:c0:4b:08:b2:
                    f1:e8:eb:c0:df:10:16:49:fc:dd:fa:b8:8c:d1:b1:
                    61:3a:ed:fc:e2:83:44:f7:1b:6c:81:0a:75:6e:f8:
                    a2:2f:e1:54:98:e5:40:27:70:77:21:e4:d1:b5:8f:
                    3f:68:09:34:3e:f0:1d:5b:a3:d5:30:85:26:ff:ce:
                    93:db:6c:1a:f9:a0:35:33:9c:db:f9:aa:c4:43:25:
                    b7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2A:65:A3:DB:32:09:2E:D6:FB:A9:BC:26:83:89:75:5F:CA:EF:F4
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3132382e302f31382d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b9:a5:8c:3a:1d:94:3e:54:0c:83:4b:f6:2e:cf:06:1f:45:34:
         5c:40:8d:ce:59:59:95:00:17:cc:2b:ef:4a:49:71:75:1a:a5:
         9c:3b:9a:5c:6e:f1:ab:94:1c:3f:9a:1b:14:c2:84:d1:e9:c9:
         8d:ac:6f:70:41:06:f3:8c:3a:5f:ed:74:ea:21:1c:81:c4:60:
         e8:c7:d9:61:a3:fa:31:cd:2b:b4:4c:06:58:3a:b9:72:72:b8:
         e7:0e:1f:70:9e:25:8e:38:e3:3d:cf:3a:3e:4a:78:32:59:c8:
         d6:9f:6f:85:c1:42:40:a0:02:34:d4:52:72:4f:67:cb:68:24:
         d2:bc:9c:16:f4:0b:67:5c:5c:17:f7:82:72:a6:84:75:04:a4:
         68:c8:98:07:a1:f7:ad:bd:83:b7:ca:be:3b:ae:60:b8:85:b2:
         93:f7:7e:13:29:0e:ec:8e:11:37:a9:45:14:16:9a:9b:bf:04:
         f6:c7:82:f9:4c:e0:e2:f6:8b:42:d1:63:e4:0b:a0:8f:84:04:
         69:e7:39:18:de:38:4e:17:4b:27:3d:89:ac:e7:ca:60:4b:31:
         45:a7:70:32:4a:da:93:21:b0:78:bf:92:85:cd:cc:b4:20:cc:
         b7:86:f9:25:f7:f0:04:ee:8e:78:58:01:71:33:0f:a6:58:a0:
         6f:11:2d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----