Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa
File:                     3139302e31352e3132382e302f32302d3234203d3e203237383431.roa (raw, json)
Hash identifier:          B3u+YRyEOyTT+Ft4Yj1dN9OkZC4jbOnOKXRi79USLrk=
Subject key identifier:   A9:C1:02:2F:CA:57:5A:DB:C9:F3:4C:FD:F1:7D:76:DD:94:5E:30:04
Certificate issuer:       /CN=12608F449BBF3F86819F95307654EF5D740A9084
Certificate serial:       23390983A1ACF77BF797568E85A6507F15D0DB43
Authority key identifier: 12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa
Signing time:             Tue 04 Feb 2025 18:16:09 +0000
ROA not before:           Tue 04 Feb 2025 18:11:09 +0000
ROA not after:            Tue 03 Feb 2026 18:16:09 +0000
asID:                     27841
IP address blocks:        190.15.128.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:39:09:83:a1:ac:f7:7b:f7:97:56:8e:85:a6:50:7f:15:d0:db:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12608F449BBF3F86819F95307654EF5D740A9084
        Validity
            Not Before: Feb  4 18:11:09 2025 GMT
            Not After : Feb  3 18:16:09 2026 GMT
        Subject: CN=A9C1022FCA575ADBC9F34CFDF17D76DD945E3004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:c9:09:a1:98:9e:9f:18:71:1f:02:35:a1:
                    ba:26:b9:24:37:39:b5:b2:16:41:6c:0f:a1:33:84:
                    89:59:d3:ee:87:9d:7b:72:eb:3b:76:c1:ef:74:6b:
                    48:23:53:d5:93:1a:c0:0e:50:43:8b:89:08:07:70:
                    a9:89:de:64:58:5c:9c:99:e0:dc:36:53:e2:8b:1b:
                    33:20:e6:9e:c1:e3:d6:e6:bd:26:c8:57:9f:17:31:
                    3e:eb:e5:61:cf:42:16:7f:f6:6f:e4:71:89:0c:52:
                    66:0f:00:19:4b:f7:d4:e2:ff:2e:38:52:15:b3:c6:
                    c4:95:49:49:cd:33:14:7a:63:3c:7d:20:1e:09:42:
                    e9:74:74:74:66:00:e7:50:8f:33:5a:1f:0b:54:cc:
                    98:a2:01:f1:1b:65:33:bf:87:4e:b8:25:3e:85:e8:
                    34:53:90:20:b7:1c:40:5a:aa:12:53:4f:86:7b:34:
                    bd:d1:95:02:74:80:21:7c:4b:b6:20:cd:ec:3f:10:
                    50:c9:db:82:06:0d:82:9f:93:e3:69:d3:5c:71:ff:
                    2c:91:b4:fb:a3:ea:02:48:96:bc:d3:c9:35:7f:af:
                    a5:42:61:b3:c1:d2:a1:18:b0:f8:2c:83:eb:61:b6:
                    80:40:94:8a:71:a7:3f:f7:64:15:bf:73:34:0f:d9:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C1:02:2F:CA:57:5A:DB:C9:F3:4C:FD:F1:7D:76:DD:94:5E:30:04
            X509v3 Authority Key Identifier:
                keyid:12:60:8F:44:9B:BF:3F:86:81:9F:95:30:76:54:EF:5D:74:0A:90:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/12608F449BBF3F86819F95307654EF5D740A9084.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/12608F449BBF3F86819F95307654EF5D740A9084.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD249A638DDF26FCCA4E323B7A36B7EA28290D4313369036F42DB54976722E49/0/3139302e31352e3132382e302f32302d3234203d3e203237383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         55:0a:85:d1:1f:f6:4d:4d:73:eb:9d:dd:3d:ff:e1:0f:13:f6:
         07:f1:2b:84:4f:53:e3:a0:0f:1f:1d:37:99:d0:cd:1b:73:ee:
         2f:bb:36:e8:44:dd:34:b5:ae:97:6f:c7:76:f3:39:b7:3c:f2:
         f8:b5:c4:e4:0b:83:dd:f4:0e:86:25:e6:53:47:94:af:3d:01:
         e8:03:6d:03:45:bb:ed:0f:17:49:10:1c:5c:7d:d1:65:7a:b7:
         00:91:95:46:66:fa:64:c0:aa:93:e3:be:ae:df:ed:70:84:67:
         25:7f:49:3a:0c:21:71:2c:7c:2e:72:92:f9:b1:a5:e8:ce:4c:
         06:40:55:a3:5c:94:86:07:6b:34:86:2b:93:7c:3d:2d:a0:e4:
         27:bb:3e:7a:f7:73:f3:67:37:aa:f2:9b:1d:28:d7:a6:d3:1b:
         9b:81:38:24:99:a0:6b:ed:92:20:b9:dc:0a:71:e9:4b:79:eb:
         3f:92:5a:d8:be:5f:c4:a8:af:42:55:61:ab:e9:0b:3b:4c:55:
         10:fc:18:6b:3a:a4:eb:86:17:22:52:f2:f9:f3:f6:e3:e4:2d:
         b2:2e:ef:18:2b:51:e6:75:4c:01:b4:da:d6:02:20:b2:cf:48:
         53:e9:41:52:26:07:80:dc:3b:58:52:d7:a4:fe:55:61:2f:85:
         21:b0:03:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----