Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa
File:                     3139302e38302e302e302f31372d3234203d3e203139383633.roa (raw, json)
Hash identifier:          4UdDWc56j9Fu418FQ2AmQnyw1R9gGstDOZzO+n/e1GA=
Subject key identifier:   E4:36:C8:3E:82:61:F5:AE:AD:0D:AC:DB:47:65:50:17:3A:BB:65:A9
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       70485132CB84BA930581395FD9FC6D6169DBCF50
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa
Signing time:             Tue 04 Feb 2025 18:01:28 +0000
ROA not before:           Tue 04 Feb 2025 17:56:28 +0000
ROA not after:            Tue 03 Feb 2026 18:01:28 +0000
asID:                     19863
IP address blocks:        190.80.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:48:51:32:cb:84:ba:93:05:81:39:5f:d9:fc:6d:61:69:db:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Feb  4 17:56:28 2025 GMT
            Not After : Feb  3 18:01:28 2026 GMT
        Subject: CN=E436C83E8261F5AEAD0DACDB476550173ABB65A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6a:80:81:dc:4b:a0:dc:2c:2d:51:14:35:83:
                    83:6b:4a:fd:39:bf:a7:d4:13:48:e6:fc:80:fc:da:
                    24:5c:fb:c7:a9:b4:49:43:c1:1b:cf:b6:5f:3b:29:
                    0d:f2:eb:3b:4b:0d:34:76:1c:05:eb:f6:a9:a9:39:
                    4c:15:2e:d2:10:14:d8:83:27:2c:7f:5b:7b:b3:54:
                    01:8b:e6:30:36:63:d2:0d:7a:b3:9d:1f:25:25:f0:
                    7f:b4:9d:df:aa:77:b9:18:41:d5:07:5c:81:70:ad:
                    0d:4d:e4:ee:a1:cd:7a:1a:4f:50:ce:bd:53:06:fc:
                    25:74:14:83:f5:69:b0:5f:5a:fa:24:fc:84:85:d1:
                    57:54:66:b7:7a:ca:b8:60:ed:b5:4e:29:42:51:96:
                    3a:8f:ca:75:f6:59:d9:7f:7e:c8:04:30:57:ed:f9:
                    59:83:78:a8:ff:0b:35:2a:99:03:27:4a:aa:fb:51:
                    ad:89:96:93:5b:d9:b9:a8:be:5b:dd:57:93:87:c2:
                    ef:87:f7:3a:ef:6a:a1:8e:73:56:23:db:b1:d8:50:
                    d8:d0:84:14:95:aa:ed:04:c5:ce:f4:7d:60:0e:1c:
                    20:19:90:84:2e:2d:37:0f:cd:ab:c8:67:f8:d7:7f:
                    25:83:77:2f:d7:2c:0d:5d:72:b3:59:79:a2:fe:cf:
                    3f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:36:C8:3E:82:61:F5:AE:AD:0D:AC:DB:47:65:50:17:3A:BB:65:A9
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/3139302e38302e302e302f31372d3234203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.80.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:18:0c:1c:15:34:1e:02:7b:5a:f0:5d:b4:42:8c:b0:cd:
         9d:a4:ee:59:62:ff:dc:87:b4:ab:34:7b:7f:98:a9:83:6b:1b:
         9f:04:ad:80:b9:a3:91:21:50:92:4c:8b:f5:37:7f:43:8d:24:
         c9:57:cb:16:59:ba:73:32:36:83:d3:9a:b4:7c:82:ad:75:b7:
         46:50:ed:35:ee:39:cd:ea:69:58:19:d7:69:02:83:ac:5a:dd:
         6e:3c:38:f4:35:22:b7:e1:cf:53:2e:c2:ef:90:0e:b0:3c:c9:
         52:e2:f9:61:ce:ed:3d:9d:e6:72:4d:0f:15:4f:b7:69:94:f0:
         2e:6a:36:43:c9:a4:06:21:a5:6f:48:6d:16:67:be:ee:c8:e2:
         fa:11:b9:84:8a:96:ae:0b:bd:25:b5:a6:08:3e:cb:4a:ab:64:
         2d:96:4b:ac:6c:18:34:b1:f5:8c:49:be:e1:80:ce:1c:62:c0:
         a6:af:f8:3c:54:02:0b:1b:d2:3b:56:cb:18:52:3e:b1:bd:72:
         2c:96:e4:43:9b:68:5a:d5:b9:b4:3b:a5:af:6a:ed:26:e3:d2:
         4c:ac:81:01:d1:23:ed:fb:b8:89:d2:ad:77:35:31:e9:f9:12:
         59:3c:19:cd:74:77:df:08:21:d8:85:75:a3:08:a0:38:b8:87:
         83:81:25:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----