Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136332e302f32342d3234203d3e20323632313731.roa
File:                     3139302e39332e3136332e302f32342d3234203d3e20323632313731.roa (raw, json)
Hash identifier:          0JGXXMvozuAzoMIz46H6Dssu6rfSNKFEqP5lcXPYnYo=
Subject key identifier:   E5:27:D7:85:92:40:53:B9:DD:89:9E:D8:85:72:BD:91:A6:AF:05:F7
Certificate issuer:       /CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
Certificate serial:       190EF83BA75566635332D9AA9EFF4D5C900993E5
Authority key identifier: 8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136332e302f32342d3234203d3e20323632313731.roa
Signing time:             Tue 04 Feb 2025 18:00:41 +0000
ROA not before:           Tue 04 Feb 2025 17:55:41 +0000
ROA not after:            Tue 03 Feb 2026 18:00:41 +0000
asID:                     262171
IP address blocks:        190.93.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0e:f8:3b:a7:55:66:63:53:32:d9:aa:9e:ff:4d:5c:90:09:93:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8A7CC5FFD8D1658A91082F639688D68DA93899
        Validity
            Not Before: Feb  4 17:55:41 2025 GMT
            Not After : Feb  3 18:00:41 2026 GMT
        Subject: CN=E527D785924053B9DD899ED88572BD91A6AF05F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:0c:13:b9:1a:7f:a4:27:4c:75:33:05:6b:
                    89:94:75:ac:b3:c0:39:71:c1:41:b0:32:c4:18:a4:
                    9e:48:b3:70:52:b4:2f:92:3a:6b:d2:d3:cc:ea:4e:
                    80:7c:b8:9f:ab:f5:b6:a0:80:23:e9:37:a6:12:91:
                    b3:45:65:ba:fb:93:61:da:aa:12:ca:3d:b4:17:f5:
                    ba:f7:87:4c:fb:98:7b:2f:3d:5a:4f:a0:49:0d:f2:
                    7f:f0:d1:75:88:8b:dd:7d:7d:af:42:e3:e3:1a:ff:
                    43:d7:0b:f7:6f:ab:00:97:82:72:9e:6d:64:2e:81:
                    e5:06:94:88:67:e5:fe:c3:75:9f:68:bc:4c:5b:d9:
                    1e:6f:36:01:49:6d:64:de:d8:ee:ca:20:85:ee:29:
                    46:b4:e0:a5:55:87:5e:98:95:f5:ca:9c:05:4e:4a:
                    49:fe:77:4f:5c:4e:a6:8c:2c:c9:87:f1:fd:db:db:
                    e5:f8:28:dc:01:96:3b:ac:5a:72:72:25:cb:d2:7d:
                    fa:ec:e8:e7:a5:6d:16:73:ad:98:31:2f:9d:22:da:
                    0f:bf:60:ca:39:a3:aa:87:14:19:4c:ce:47:cd:c2:
                    29:61:8c:ae:39:75:76:1c:d2:4b:03:2e:74:c7:a2:
                    64:e4:8d:1f:b4:fc:6b:e4:1c:09:26:c2:b5:8d:41:
                    cd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:D7:85:92:40:53:B9:DD:89:9E:D8:85:72:BD:91:A6:AF:05:F7
            X509v3 Authority Key Identifier:
                keyid:8D:8A:7C:C5:FF:D8:D1:65:8A:91:08:2F:63:96:88:D6:8D:A9:38:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D8A7CC5FFD8D1658A91082F639688D68DA93899.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7F0352D5D5B79DFE55B5AC2A0730D58C8055ACCA3AC64D7A183EC654FE479B50/0/3139302e39332e3136332e302f32342d3234203d3e20323632313731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:34:49:c9:db:13:31:ed:8f:16:21:e6:22:f2:65:09:c9:97:
         b4:88:5f:6d:5a:01:85:70:fa:98:bc:4e:c4:e0:64:6c:89:db:
         80:30:02:4c:53:64:e5:d3:49:b1:b3:0e:11:f2:7f:6b:de:bf:
         75:6f:13:1b:28:21:aa:b2:01:f9:15:1c:44:86:ba:c5:7d:40:
         14:6a:7c:8a:57:32:f3:27:b7:eb:12:b9:e9:89:e7:ad:83:cd:
         2d:dc:74:79:e1:d9:ad:04:f5:c0:25:5f:fd:18:04:98:df:1b:
         ba:5d:62:6a:3a:c5:3b:b5:1d:44:bd:54:6e:9c:7f:c5:47:d0:
         c7:9d:40:5a:45:f5:bd:0c:e1:1a:42:13:77:f0:1e:90:5d:a3:
         57:c3:2a:05:af:40:c6:4e:4f:b9:98:18:c2:35:41:45:80:78:
         a0:30:f3:f2:5a:e6:1e:b7:1b:d9:d2:11:ef:59:dd:50:b3:0f:
         f6:bd:58:f4:e8:cb:1b:d5:f5:fd:95:3a:9b:88:df:1e:6e:d7:
         4a:d2:9f:30:58:20:c7:27:19:5b:0a:37:4d:15:ac:f0:3d:0e:
         80:63:84:47:05:42:85:0b:2f:f6:fb:fe:27:88:88:1f:90:5f:
         3b:ac:38:f2:92:55:e5:d8:87:7a:01:12:b3:f6:06:64:44:95:
         52:54:5f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----