Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/3139302e3131332e36322e302f32342d3234203d3e20323731393032.roa
File:                     3139302e3131332e36322e302f32342d3234203d3e20323731393032.roa (raw, json)
Hash identifier:          jyzOqocwKTa92AtKPhfbqHaZUY4oqqs0hiEY/bQ+O/M=
Subject key identifier:   02:94:11:C9:3C:45:92:0D:5C:F4:64:80:48:39:E6:1E:00:B7:F5:EA
Certificate issuer:       /CN=87AC62AE265709E076C293C39997BE5CEA35A360
Certificate serial:       01AC6B99DE424EC339A0C7F9904648E7F076EC30
Authority key identifier: 87:AC:62:AE:26:57:09:E0:76:C2:93:C3:99:97:BE:5C:EA:35:A3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87AC62AE265709E076C293C39997BE5CEA35A360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/3139302e3131332e36322e302f32342d3234203d3e20323731393032.roa
Signing time:             Tue 05 Mar 2024 18:19:31 +0000
ROA not before:           Tue 05 Mar 2024 18:14:31 +0000
ROA not after:            Tue 04 Mar 2025 18:19:31 +0000
asID:                     271902
IP address blocks:        190.113.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ac:6b:99:de:42:4e:c3:39:a0:c7:f9:90:46:48:e7:f0:76:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC62AE265709E076C293C39997BE5CEA35A360
        Validity
            Not Before: Mar  5 18:14:31 2024 GMT
            Not After : Mar  4 18:19:31 2025 GMT
        Subject: CN=029411C93C45920D5CF464804839E61E00B7F5EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:28:96:47:0f:e2:9e:23:ae:ad:12:48:3e:99:
                    26:67:bf:9d:5e:63:9f:f9:ae:00:7f:0d:79:a2:52:
                    bd:10:04:32:0e:da:f6:e0:7c:76:13:ba:40:2a:79:
                    91:b2:f2:25:a2:85:14:82:c9:21:ef:40:66:fd:95:
                    68:11:65:2f:8d:ee:bd:35:b9:a7:45:e3:26:42:41:
                    3a:0a:da:9c:78:11:fe:ca:02:0b:1c:a3:76:57:0b:
                    31:c4:44:4a:59:bf:c5:50:32:8c:51:90:79:6b:10:
                    9e:4d:5d:c5:ba:df:c3:95:1d:b7:3a:6a:38:3b:63:
                    e8:7f:af:ba:42:8b:a6:41:4b:99:83:f4:6f:af:06:
                    1a:a8:76:2e:e1:b9:74:14:24:55:b5:a5:cc:e7:6a:
                    c2:39:69:13:13:b6:b9:37:54:5b:cf:28:f3:59:aa:
                    94:2e:cd:ec:76:d9:fa:26:21:88:b5:c7:77:4b:99:
                    3f:47:ba:ab:49:a7:7f:0b:04:2c:ce:c8:aa:93:bd:
                    b8:76:87:7d:a0:89:24:93:9d:b0:41:12:8a:22:11:
                    69:c2:48:43:01:80:64:9e:39:c8:1c:94:bb:5a:71:
                    b7:1e:f3:45:2a:68:3b:e8:c8:a3:2d:5d:3d:5c:c4:
                    0e:10:0b:71:9a:2e:84:df:bf:f1:4c:1e:58:c0:a6:
                    48:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:94:11:C9:3C:45:92:0D:5C:F4:64:80:48:39:E6:1E:00:B7:F5:EA
            X509v3 Authority Key Identifier:
                keyid:87:AC:62:AE:26:57:09:E0:76:C2:93:C3:99:97:BE:5C:EA:35:A3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/87AC62AE265709E076C293C39997BE5CEA35A360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87AC62AE265709E076C293C39997BE5CEA35A360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/3139302e3131332e36322e302f32342d3234203d3e20323731393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:c8:09:10:df:5f:d8:ce:cf:78:7e:f9:aa:74:4c:11:d4:
         cf:82:ed:d2:07:ad:ae:57:2d:85:30:15:c1:89:6b:4e:d9:b2:
         a6:ee:89:fa:e3:86:60:ce:89:07:ca:2f:4c:ae:fd:50:bc:90:
         43:32:9f:a1:a7:af:89:6f:b4:2e:bc:8f:f4:a1:df:23:ab:e6:
         a4:79:af:d7:eb:28:60:6a:69:45:1f:fe:a3:62:88:a2:9c:f4:
         3c:0a:d4:ab:08:bf:a4:5d:0e:7e:d6:22:fc:e6:ca:fa:a6:d2:
         f6:48:06:6b:e4:36:a2:1c:33:2e:24:a0:9b:ab:6d:c3:fa:1d:
         8a:42:ba:d6:c0:ee:fb:cb:6e:61:e8:d2:48:96:05:ae:6f:90:
         36:48:db:ea:ca:7d:e4:25:b6:bd:8c:71:9f:db:de:da:a9:88:
         58:28:c5:fe:fc:d1:48:28:70:5f:d2:2b:cd:6d:94:f3:5c:a4:
         40:80:ce:e0:a6:91:47:a5:ae:5d:1f:8f:53:cb:78:cd:e4:c4:
         25:c2:ee:4e:23:49:69:49:3d:18:5a:ef:84:1d:c0:9d:c1:5d:
         be:25:f9:db:98:ea:98:c1:8c:40:be:7c:ab:93:6f:32:c1:38:
         67:db:17:d7:1d:fe:b9:df:73:27:76:a5:ae:93:25:e8:47:8c:
         49:1e:93:e2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUAaxrmd5CTsM5oMf5kEZI5/B27DAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdBQzYyQUUyNjU3MDlFMDc2QzI5M0MzOTk5N0JFNUNF
QTM1QTM2MDAeFw0yNDAzMDUxODE0MzFaFw0yNTAzMDQxODE5MzFaMDMxMTAvBgNV
BAMTKDAyOTQxMUM5M0M0NTkyMEQ1Q0Y0NjQ4MDQ4MzlFNjFFMDBCN0Y1RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaKJZHD+KeI66tEkg+mSZnv51e
Y5/5rgB/DXmiUr0QBDIO2vbgfHYTukAqeZGy8iWihRSCySHvQGb9lWgRZS+N7r01
uadF4yZCQToK2px4Ef7KAgsco3ZXCzHEREpZv8VQMoxRkHlrEJ5NXcW638OVHbc6
ajg7Y+h/r7pCi6ZBS5mD9G+vBhqodi7huXQUJFW1pcznasI5aRMTtrk3VFvPKPNZ
qpQuzex22fomIYi1x3dLmT9HuqtJp38LBCzOyKqTvbh2h32giSSTnbBBEooiEWnC
SEMBgGSeOcgclLtacbce80UqaDvoyKMtXT1cxA4QC3GaLoTfv/FMHljApkhvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUApQRyTxFkg1c9GSASDnmHgC39eowHwYDVR0j
BBgwFoAUh6xiriZXCeB2wpPDmZe+XOo1o2AwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTgwQ0Y1RkFDQjg4RDQwNDA1MDhCRjlFQTBFMTVGMDc4
MDc4MjVDNkE3NkFGNkMzNkI2NkRDNTYxN0MzQzg1LzAvODdBQzYyQUUyNjU3MDlF
MDc2QzI5M0MzOTk5N0JFNUNFQTM1QTM2MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84N0FDNjJBRTI2NTcwOUUwNzZD
MjkzQzM5OTk3QkU1Q0VBMzVBMzYwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREU4MENGNUZBQ0I4OEQ0MDQwNTA4QkY5RUEwRTE1RjA3ODA3ODI1QzZB
NzZBRjZDMzZCNjZEQzU2MTdDM0M4NS8wLzMxMzkzMDJlMzEzMTMzMmUzNjMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMxMzkzMDMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvnE+
MA0GCSqGSIb3DQEBCwUAA4IBAQAMDsgJEN9f2M7PeH75qnRMEdTPgu3SB62uVy2F
MBXBiWtO2bKm7on644ZgzokHyi9Mrv1QvJBDMp+hp6+Jb7QuvI/0od8jq+akea/X
6yhgamlFH/6jYoiinPQ8CtSrCL+kXQ5+1iL85sr6ptL2SAZr5DaiHDMuJKCbq23D
+h2KQrrWwO77y25h6NJIlgWub5A2SNvqyn3kJba9jHGf297aqYhYKMX+/NFIKHBf
0ivNbZTzXKRAgM7gppFHpa5dH49Ty3jN5MQlwu5OI0lpST0YWu+EHcCdwV2+Jfnb
mOqYwYxAvnyrk28ywThn2xfXHf6533MndqWukyXoR4xJHpPi
-----END CERTIFICATE-----