Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203131333135.roa
File:                     3139302e3139372e3139322e302f31382d3234203d3e203131333135.roa (raw, json)
Hash identifier:          wqOj6y8sCNt8BNiiCv3OALta3VZsymAeZ8nzuTv7BB4=
Subject key identifier:   30:D2:72:96:8A:E3:42:76:D7:65:1B:8B:70:33:71:28:62:73:9D:43
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       55CB8BCA0C76BDB149CEFE9DC0A25DE008C47F46
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203131333135.roa
Signing time:             Tue 04 Feb 2025 20:03:54 +0000
ROA not before:           Tue 04 Feb 2025 19:58:54 +0000
ROA not after:            Tue 03 Feb 2026 20:03:54 +0000
asID:                     11315
IP address blocks:        190.197.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:cb:8b:ca:0c:76:bd:b1:49:ce:fe:9d:c0:a2:5d:e0:08:c4:7f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:54 2025 GMT
            Not After : Feb  3 20:03:54 2026 GMT
        Subject: CN=30D272968AE34276D7651B8B7033712862739D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fb:99:fa:ba:83:a3:91:2c:68:c1:58:7c:23:
                    2e:04:6a:5a:c7:88:80:8c:24:62:25:49:32:6c:2a:
                    e6:97:bd:c0:2b:99:e4:fc:91:fa:c1:0b:ed:56:48:
                    3d:12:85:26:18:a7:b6:57:b8:88:71:27:76:6d:86:
                    58:d6:a3:1a:b0:6b:9c:5f:f5:ed:b4:74:ff:2f:44:
                    29:a1:51:6c:19:90:90:d5:e0:d8:bd:11:87:28:8d:
                    aa:f6:60:f5:f6:4d:0f:25:21:e4:e1:22:76:d1:17:
                    a0:21:3b:d0:22:7a:7c:8c:d2:b0:b3:1a:e2:41:0c:
                    f6:a2:f3:db:ab:fc:79:42:50:af:32:df:21:dd:a8:
                    6c:f6:f4:c6:00:9d:69:14:4b:ca:2c:1c:14:81:ee:
                    fb:5d:cc:aa:19:9e:a8:5b:fa:49:e1:de:76:3f:39:
                    a1:b9:27:d8:9a:af:b9:ef:c4:ee:46:92:0d:2f:77:
                    17:a2:ff:06:3d:81:bf:ff:bf:1d:4d:f6:21:7b:09:
                    94:19:0f:29:30:7d:e1:94:28:2c:5c:78:2d:f5:f3:
                    ae:d8:09:ea:e7:ec:f1:69:d9:fc:b5:88:7a:50:e7:
                    c5:2b:6d:d4:b8:cb:8b:9e:38:2a:48:8e:7a:25:12:
                    1c:ee:04:83:21:11:af:87:27:5d:47:a3:1f:10:49:
                    3b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:72:96:8A:E3:42:76:D7:65:1B:8B:70:33:71:28:62:73:9D:43
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/3139302e3139372e3139322e302f31382d3234203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.197.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         95:83:92:38:c7:f4:36:54:32:5d:18:76:8b:6c:cd:40:89:d7:
         40:52:be:e8:ad:bb:61:36:1b:9b:f1:b3:ce:71:1a:c5:bf:38:
         8e:ba:76:10:4e:49:2e:37:24:ca:f5:8a:d6:14:42:d2:60:8f:
         de:4b:84:ee:d2:98:82:ef:2b:3f:62:be:45:b7:23:09:fa:9a:
         4f:20:fe:6f:ca:39:59:5a:ae:e6:64:db:0a:24:81:b3:86:f3:
         b3:a5:d6:e8:a6:03:32:67:e6:55:e6:e8:57:6d:88:22:6c:13:
         7c:68:90:cf:e6:32:b3:01:c2:8e:ed:58:60:b8:96:bd:dc:51:
         38:00:d9:32:05:08:70:a2:d7:f8:b9:8b:97:35:e9:af:93:ec:
         a3:e6:46:ee:75:41:be:16:48:14:b6:d1:6c:cf:8a:56:6d:0c:
         81:df:f2:e7:fb:ec:74:c8:ac:32:7a:5c:59:5a:e2:e0:d1:92:
         70:89:e7:e9:74:6f:48:84:8e:1a:0b:04:e0:71:3f:27:a9:e7:
         96:f0:52:9c:85:fd:04:d1:02:7f:41:d2:bc:04:33:03:bf:72:
         65:15:af:48:93:ab:01:9e:f0:be:f0:d6:b2:82:3b:af:06:06:
         4d:34:e7:f6:f9:3f:ea:0f:0c:96:56:2c:a2:3e:97:09:f9:9e:
         04:e1:bd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----