Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e39362e302f32302d3230203d3e2033383136.roa
File:                     3138362e3132312e39362e302f32302d3230203d3e2033383136.roa (raw, json)
Hash identifier:          mly2NLNS0ZQ4rKssep+KcdWIybI8VrJirb+WQ2ZU7W8=
Subject key identifier:   1B:5A:82:85:51:A0:2D:37:97:E5:BD:55:E1:70:0D:D3:C2:C9:BF:69
Certificate issuer:       /CN=27020461E106FA1939A7955F19E1F8ED82AE8589
Certificate serial:       61D9E41D5241EDBF1C7F5C46A23F2CDC8DA14E91
Authority key identifier: 27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e39362e302f32302d3230203d3e2033383136.roa
Signing time:             Tue 05 Mar 2024 17:43:03 +0000
ROA not before:           Tue 05 Mar 2024 17:38:03 +0000
ROA not after:            Tue 04 Mar 2025 17:43:03 +0000
asID:                     3816
IP address blocks:        186.121.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:d9:e4:1d:52:41:ed:bf:1c:7f:5c:46:a2:3f:2c:dc:8d:a1:4e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27020461E106FA1939A7955F19E1F8ED82AE8589
        Validity
            Not Before: Mar  5 17:38:03 2024 GMT
            Not After : Mar  4 17:43:03 2025 GMT
        Subject: CN=1B5A828551A02D3797E5BD55E1700DD3C2C9BF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d8:28:45:89:2d:d2:82:a3:25:de:4b:54:2a:
                    c5:ef:ab:5e:cb:f4:73:56:1c:70:2c:e2:d9:97:dc:
                    27:08:e9:81:bb:08:c8:d2:60:ef:ec:77:d0:66:09:
                    19:87:68:9d:7e:b0:e6:2b:b6:ea:68:8b:87:fd:71:
                    78:36:d4:2b:7e:3f:75:d3:2a:41:25:f8:de:b7:bc:
                    4a:28:44:6b:42:82:e6:47:2f:91:09:bf:25:91:17:
                    9c:c6:4c:6d:8f:b8:c1:d4:76:22:9a:ba:5d:8c:00:
                    32:43:fe:02:75:4e:3c:60:84:e4:30:71:86:1c:c0:
                    f6:18:5a:35:e2:17:32:9e:79:6d:12:a0:d3:3b:95:
                    d6:f9:30:40:35:b6:9a:19:7d:cd:39:8b:d7:06:5f:
                    7a:9a:07:bf:42:46:8f:ab:0d:02:31:34:cc:74:c4:
                    05:b0:93:7e:de:0d:a8:3d:11:0d:9f:4d:da:f3:b3:
                    98:b7:50:51:c3:bd:d5:82:6d:57:8e:33:b4:ce:cf:
                    1f:b3:d3:e0:0f:90:8c:4a:41:8f:2d:27:45:37:c7:
                    e7:30:ee:34:dd:e1:05:f2:56:29:c5:09:78:66:58:
                    f6:41:56:73:8b:29:82:1e:0b:30:4e:c8:aa:6a:cc:
                    d6:e1:43:61:d6:db:44:7c:c9:40:6d:09:96:d6:4b:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:82:85:51:A0:2D:37:97:E5:BD:55:E1:70:0D:D3:C2:C9:BF:69
            X509v3 Authority Key Identifier:
                keyid:27:02:04:61:E1:06:FA:19:39:A7:95:5F:19:E1:F8:ED:82:AE:85:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27020461E106FA1939A7955F19E1F8ED82AE8589.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/043AB499951B36E16D8E3D104BFD77ABCB7CBE3C9D9DE5A1686B504C3C457ED4/0/3138362e3132312e39362e302f32302d3230203d3e2033383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.121.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:e5:c0:9b:b4:1c:0c:a5:13:6d:e8:ed:42:80:05:3f:d1:
         79:3c:ac:a9:4c:b7:e4:6f:97:94:a4:98:48:d8:28:e2:d4:fd:
         2f:11:1f:17:ed:ae:f6:cd:08:3a:bd:b7:34:2a:83:21:1a:56:
         43:29:9c:76:48:ae:4d:2c:7a:16:d3:4a:34:b7:5f:f3:6e:88:
         ec:b5:26:ce:f7:15:9b:be:84:4a:04:00:87:91:a4:7d:e9:db:
         73:cc:9a:0f:9b:40:55:07:09:d2:7f:16:06:f9:76:b2:9d:d7:
         12:44:06:ae:03:91:ff:d7:bc:ca:72:a0:0d:fe:de:2c:c2:6d:
         6b:57:ce:82:75:38:85:1e:d4:a6:6c:88:37:00:9b:b0:94:56:
         7b:8b:94:9a:92:8f:5b:a5:11:46:72:f0:0e:eb:e7:f9:f6:3f:
         4e:bf:d8:a4:94:14:36:58:58:3c:09:39:35:2f:71:85:22:2b:
         6f:b3:27:d9:14:7f:03:cb:2d:5b:54:63:b2:dd:2e:e1:ce:e6:
         6e:99:60:4d:cf:3e:44:b7:75:47:f3:80:6e:a3:c1:34:92:1d:
         e4:ad:33:17:1e:19:51:a7:d8:56:60:64:9f:bf:14:29:4e:9e:
         1e:08:05:47:0f:99:1c:87:a0:e6:77:b7:38:2e:82:77:93:d3:
         aa:c7:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----