Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32302d3234203d3e203235363230.roa
File:                     3139322e3232332e39362e302f32302d3234203d3e203235363230.roa (raw, json)
Hash identifier:          OsB6KoPCUoh/QJuvKcpA4ee7oy+ceKi8MMJd2WrpSH8=
Subject key identifier:   26:E2:71:40:8C:C4:31:8E:2B:37:8B:0F:BE:B9:4C:6F:D8:BA:F3:7D
Certificate issuer:       /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial:       6D7553BA41B6F5AD83CB765F4180B96E7A88CE5F
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32302d3234203d3e203235363230.roa
Signing time:             Wed 29 May 2024 18:20:00 +0000
ROA not before:           Wed 29 May 2024 18:15:00 +0000
ROA not after:            Wed 28 May 2025 18:20:00 +0000
asID:                     25620
IP address blocks:        192.223.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:75:53:ba:41:b6:f5:ad:83:cb:76:5f:41:80:b9:6e:7a:88:ce:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
        Validity
            Not Before: May 29 18:15:00 2024 GMT
            Not After : May 28 18:20:00 2025 GMT
        Subject: CN=26E271408CC4318E2B378B0FBEB94C6FD8BAF37D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:8e:72:2a:e1:f1:19:e2:2d:f2:ce:e6:e9:
                    93:04:0a:20:2e:04:4c:ab:b2:11:5f:da:c2:a0:b3:
                    b5:ea:38:8f:be:76:35:52:4c:fb:9a:34:e9:0b:da:
                    9b:4b:76:22:d9:bb:16:0a:d9:10:77:4c:c2:57:77:
                    84:27:32:b9:10:0b:89:f1:ed:73:97:c5:79:4d:6b:
                    8d:a6:7e:64:8b:35:8b:31:ac:1e:3d:c7:de:9c:65:
                    7c:40:c2:1b:68:cc:7e:ec:23:f3:5d:53:db:02:88:
                    e4:7d:7f:60:ab:b1:9e:93:e0:73:da:19:03:b8:dd:
                    e3:6f:2c:b5:96:20:16:ed:7f:e8:d8:eb:61:0f:6e:
                    76:7a:e9:82:91:6b:9a:7e:6d:7a:0f:ac:b3:0d:e9:
                    77:48:2f:5f:37:17:25:93:59:48:80:76:af:e3:41:
                    64:ca:9f:3e:be:f6:ac:25:80:6b:2e:f7:52:67:41:
                    e8:fd:49:64:d0:73:c2:42:77:66:fb:33:0a:cb:3c:
                    d4:c5:48:24:f5:98:d6:b6:2b:87:14:c0:fd:04:41:
                    5f:2e:79:d8:67:fe:3b:2e:18:e6:1c:23:b6:19:77:
                    a2:45:7a:ba:00:16:20:e1:d2:7d:c7:28:4b:92:cd:
                    f3:c0:dc:85:1a:26:8e:a9:06:e0:a7:c8:3b:88:81:
                    b3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E2:71:40:8C:C4:31:8E:2B:37:8B:0F:BE:B9:4C:6F:D8:BA:F3:7D
            X509v3 Authority Key Identifier:
                keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3139322e3232332e39362e302f32302d3234203d3e203235363230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.223.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:a1:a6:73:17:95:a0:55:2b:da:bc:c3:6c:32:44:e4:59:
         eb:70:9e:41:31:67:93:95:9b:76:d3:bf:0a:ce:17:34:65:0c:
         15:32:52:7e:ef:04:23:c5:97:24:e9:7a:a7:f5:e7:be:34:da:
         9b:31:ab:af:f5:ef:5e:fc:30:e6:68:b5:85:21:ca:76:c7:5c:
         93:63:33:6a:b6:f7:0e:68:55:99:14:77:57:0f:b7:af:db:50:
         f7:d4:ae:f5:ed:58:b4:0a:05:05:54:0c:26:62:67:d4:40:38:
         97:b1:fa:7f:53:55:43:b8:7f:97:ed:d5:a0:47:60:ab:d4:9c:
         90:da:fd:d5:d8:6f:94:30:00:b7:dc:ac:f1:b8:44:d4:91:67:
         39:59:7d:91:97:8a:a1:aa:da:5f:85:42:2d:08:a9:19:51:30:
         7b:cf:51:91:c7:29:6b:97:96:e9:3d:d1:ce:93:98:82:a0:54:
         d4:8e:59:f4:76:04:64:96:92:a2:f8:6b:a2:21:66:06:43:40:
         2f:fd:55:c4:16:03:46:52:a8:92:04:1d:b3:06:5d:48:cd:80:
         b1:75:c8:d8:77:50:b1:92:a6:72:14:9e:b8:be:85:a3:b9:d6:
         90:52:79:9c:35:5c:d7:e2:65:1f:16:d1:22:86:14:67:c1:b4:
         f2:d5:47:72
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUbXVTukG29a2Dy3ZfQYC5bnqIzl8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0E0NjY1NEQ2RjAyQ0VDNDFFQUE0MzM5NDk4NDg2QzYw
OUJGMzRFQzAeFw0yNDA1MjkxODE1MDBaFw0yNTA1MjgxODIwMDBaMDMxMTAvBgNV
BAMTKDI2RTI3MTQwOENDNDMxOEUyQjM3OEIwRkJFQjk0QzZGRDhCQUYzN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+45yKuHxGeIt8s7m6ZMECiAu
BEyrshFf2sKgs7XqOI++djVSTPuaNOkL2ptLdiLZuxYK2RB3TMJXd4QnMrkQC4nx
7XOXxXlNa42mfmSLNYsxrB49x96cZXxAwhtozH7sI/NdU9sCiOR9f2CrsZ6T4HPa
GQO43eNvLLWWIBbtf+jY62EPbnZ66YKRa5p+bXoPrLMN6XdIL183FyWTWUiAdq/j
QWTKnz6+9qwlgGsu91JnQej9SWTQc8JCd2b7MwrLPNTFSCT1mNa2K4cUwP0EQV8u
edhn/jsuGOYcI7YZd6JFeroAFiDh0n3HKEuSzfPA3IUaJo6pBuCnyDuIgbO/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUJuJxQIzEMY4rN4sPvrlMb9i6830wHwYDVR0j
BBgwFoAUOkZlTW8CzsQeqkM5SYSGxgm/NOwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wMEYxQjg1NTI5ODhBQzdCMjk5QzI3MDU2RjQ3MzNDMjMw
MzIxMkNBMkJBMDZCMkEyQ0YyQzVDODAzOENGRjJDLzAvM0E0NjY1NEQ2RjAyQ0VD
NDFFQUE0MzM5NDk4NDg2QzYwOUJGMzRFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQTQ2NjU0RDZGMDJDRUM0MUVB
QTQzMzk0OTg0ODZDNjA5QkYzNEVDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDBGMUI4NTUyOTg4QUM3QjI5OUMyNzA1NkY0NzMzQzIzMDMyMTJDQTJC
QTA2QjJBMkNGMkM1QzgwMzhDRkYyQy8wLzMxMzkzMjJlMzIzMjMzMmUzOTM2MmUz
MDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzNTM2MzIzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMDfYDAN
BgkqhkiG9w0BAQsFAAOCAQEALi6hpnMXlaBVK9q8w2wyRORZ63CeQTFnk5WbdtO/
Cs4XNGUMFTJSfu8EI8WXJOl6p/XnvjTamzGrr/XvXvww5mi1hSHKdsdck2Mzarb3
DmhVmRR3Vw+3r9tQ99Su9e1YtAoFBVQMJmJn1EA4l7H6f1NVQ7h/l+3VoEdgq9Sc
kNr91dhvlDAAt9ys8bhE1JFnOVl9kZeKoaraX4VCLQipGVEwe89Rkccpa5eW6T3R
zpOYgqBU1I5Z9HYEZJaSovhroiFmBkNAL/1VxBYDRlKokgQdswZdSM2AsXXI2HdQ
sZKmchSeuL6Fo7nWkFJ5nDVc1+JlHxbRIoYUZ8G08tVHcg==
-----END CERTIFICATE-----