Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa
File:                     3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa (raw, json)
Hash identifier:          Da/FhVOippoSfahQ9D7nFHi/sSLScnkZw512t331e+A=
Subject key identifier:   57:8C:4D:48:D2:19:C2:83:DC:31:8C:91:5F:15:3D:24:B3:7D:18:9B
Certificate issuer:       /CN=29B391F5577514E30F64EDF6E361905CA08CF572
Certificate serial:       5291E03DAF7F746AE997B6903C9578D0BF54159D
Authority key identifier: 29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa
Signing time:             Tue 04 Feb 2025 18:13:00 +0000
ROA not before:           Tue 04 Feb 2025 18:08:00 +0000
ROA not after:            Tue 03 Feb 2026 18:13:00 +0000
asID:                     27680
IP address blocks:        190.108.128.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:91:e0:3d:af:7f:74:6a:e9:97:b6:90:3c:95:78:d0:bf:54:15:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29B391F5577514E30F64EDF6E361905CA08CF572
        Validity
            Not Before: Feb  4 18:08:00 2025 GMT
            Not After : Feb  3 18:13:00 2026 GMT
        Subject: CN=578C4D48D219C283DC318C915F153D24B37D189B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4f:f6:8a:3c:bb:fb:b3:31:f8:54:10:f7:73:
                    36:ed:98:33:ff:8b:b2:31:13:7d:82:d5:f2:4c:f5:
                    38:5f:be:68:9c:12:c6:d2:c7:8f:d7:ee:77:81:84:
                    e9:f5:6e:58:76:a6:86:17:22:72:bc:8f:24:83:b0:
                    72:6e:41:38:4f:3e:c6:cd:4e:37:ee:fa:14:73:1e:
                    2a:37:db:07:53:00:b2:be:99:a7:eb:62:f2:16:48:
                    4d:c4:d8:d1:dc:0d:16:be:51:84:91:fa:5f:b9:9c:
                    a6:ef:19:4e:55:7d:b6:2a:93:82:1d:01:00:e1:58:
                    fc:db:eb:09:3b:c3:d8:5d:52:b3:db:d0:ce:65:ca:
                    ad:e9:81:f6:08:e8:1d:d1:4a:3a:70:68:40:60:0f:
                    c6:c9:41:5b:57:94:e2:c7:ac:7c:a7:6a:dd:58:e3:
                    3c:f2:04:04:3a:3d:0c:ad:ab:2d:cf:df:30:57:0e:
                    48:44:4e:bc:1b:a9:f6:f4:74:1c:a5:9b:6f:46:a9:
                    4e:1f:8c:0b:a1:c2:20:fd:1c:a9:b3:60:b6:26:b0:
                    7e:6f:53:6a:85:03:48:23:c6:07:b0:20:d5:18:5f:
                    d2:b5:78:bd:39:5c:b6:78:cd:59:8f:56:6f:77:01:
                    56:2d:73:79:65:0b:15:84:d2:f4:2d:50:6b:ef:46:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8C:4D:48:D2:19:C2:83:DC:31:8C:91:5F:15:3D:24:B3:7D:18:9B
            X509v3 Authority Key Identifier:
                keyid:29:B3:91:F5:57:75:14:E3:0F:64:ED:F6:E3:61:90:5C:A0:8C:F5:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/29B391F5577514E30F64EDF6E361905CA08CF572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/29B391F5577514E30F64EDF6E361905CA08CF572.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7C0CEFC626A9497234DD7A29F57CA3F8FBAB5C6E605A40ADAB1E09A0393DA16/0/3139302e3130382e3132382e302f31382d3234203d3e203237363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2c:51:67:dd:42:37:61:0f:80:b5:6d:0f:0e:78:00:34:f3:f2:
         d6:75:f7:a7:fc:60:a7:db:34:c5:c9:3f:57:80:c2:c9:b9:a2:
         36:14:1a:40:67:4a:4c:79:b1:12:2c:25:8d:80:b0:a4:a5:7b:
         19:fb:16:f1:4d:ad:2e:70:31:28:35:34:26:1e:31:3c:a8:c8:
         34:19:d0:c3:03:5b:be:54:eb:aa:a3:68:21:2e:84:92:c9:49:
         4d:4e:b3:0d:4a:d9:45:6f:47:02:39:02:4f:64:ae:b9:45:73:
         18:2d:e9:b1:a3:2c:01:80:b1:aa:c4:b7:cb:b1:36:4c:5c:25:
         3c:a3:4f:70:49:d7:79:f9:cb:62:38:8a:e2:02:03:c2:26:44:
         27:bc:6b:48:c7:42:60:4e:70:a4:e8:b3:b6:14:50:4f:72:ef:
         d9:54:45:02:5f:7d:64:c4:2d:89:c2:e6:e4:6e:1d:86:1c:c7:
         cd:2a:b6:b4:04:f2:e3:ac:3f:63:6b:40:89:56:4a:0d:20:4d:
         69:29:d3:b6:2d:b6:d0:94:97:53:1d:62:01:ed:57:4e:2a:38:
         34:72:01:d9:50:b3:9c:3c:16:c7:73:07:fa:27:c7:96:93:d5:
         ef:2a:18:81:f4:ed:10:05:02:4c:1f:fe:da:c5:78:c2:58:0f:
         ca:7b:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----