Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa
File:                     3138362e392e3132382e302f31372d3232203d3e203237393235.roa (raw, json)
Hash identifier:          0kyynwbD7agKlv7ZmHcCr4iH3838LzUEO/VZiXjiyWQ=
Subject key identifier:   4C:34:00:72:82:AC:F9:75:97:D0:D3:0B:45:B8:57:A1:DC:8C:22:DC
Certificate issuer:       /CN=6655CE56746240FF392030404FA2DF5D579EA84E
Certificate serial:       69BE8D295F294176B3AA61BCA2B8589EC12FA10C
Authority key identifier: 66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa
Signing time:             Tue 05 Mar 2024 18:17:41 +0000
ROA not before:           Tue 05 Mar 2024 18:12:41 +0000
ROA not after:            Tue 04 Mar 2025 18:17:41 +0000
asID:                     27925
IP address blocks:        186.9.128.0/17 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:be:8d:29:5f:29:41:76:b3:aa:61:bc:a2:b8:58:9e:c1:2f:a1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6655CE56746240FF392030404FA2DF5D579EA84E
        Validity
            Not Before: Mar  5 18:12:41 2024 GMT
            Not After : Mar  4 18:17:41 2025 GMT
        Subject: CN=4C34007282ACF97597D0D30B45B857A1DC8C22DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:15:46:a8:fc:3e:99:5e:34:cb:f8:54:e2:02:
                    fc:bd:3a:4f:28:bc:bc:06:68:c5:6d:05:ad:3d:bf:
                    4c:bf:6c:70:2c:fb:07:c1:21:85:c8:37:1d:df:c6:
                    22:98:fb:24:bc:c1:f2:2d:bf:18:e4:91:7c:ec:e6:
                    9d:31:aa:0a:f2:61:28:4f:12:43:fd:27:3c:5b:53:
                    55:79:88:61:a8:b9:2a:99:70:ac:50:18:86:5f:e8:
                    6a:59:51:2e:2d:f5:43:07:18:f0:b6:23:d3:b2:a9:
                    46:ce:0a:42:03:7c:21:de:6b:a4:3c:77:dd:65:6e:
                    dd:72:a9:60:37:ec:8e:89:f1:83:10:50:e9:f9:d6:
                    3a:75:e2:a8:d2:f4:ca:6f:d2:4f:ee:b5:4d:ca:63:
                    0c:5c:61:44:38:b1:93:c8:4f:65:e8:7c:4f:b9:cc:
                    85:c9:5d:db:07:7e:67:a3:22:7b:ab:97:42:61:75:
                    c9:62:2b:64:0b:f1:79:c2:73:93:22:4d:dd:52:95:
                    19:14:0e:3e:6d:02:44:90:f4:f4:e3:98:b8:d3:85:
                    2d:d9:7d:a5:20:b7:09:ea:67:b3:88:19:67:3c:75:
                    76:a5:b0:dc:38:d5:e1:8c:49:38:9a:8e:b9:d1:62:
                    8c:13:af:10:f2:0e:2e:ca:13:e1:96:10:9d:73:a4:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:34:00:72:82:AC:F9:75:97:D0:D3:0B:45:B8:57:A1:DC:8C:22:DC
            X509v3 Authority Key Identifier:
                keyid:66:55:CE:56:74:62:40:FF:39:20:30:40:4F:A2:DF:5D:57:9E:A8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/6655CE56746240FF392030404FA2DF5D579EA84E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6655CE56746240FF392030404FA2DF5D579EA84E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/086516E77BEDE74849E8A818C4D8B0C7B3BA92F044A0FF2AD058EB72A72F023A/0/3138362e392e3132382e302f31372d3232203d3e203237393235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.9.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:fd:7c:30:90:23:40:7e:22:3b:13:d6:6d:4e:db:66:9e:
         43:09:7c:a1:2a:98:3c:2e:94:e9:5a:30:67:76:4b:1a:11:57:
         1d:d3:3f:72:54:11:32:fd:e1:31:fc:7f:4b:c7:58:f8:84:39:
         38:bc:15:07:55:4e:74:53:7b:8c:de:52:7c:0b:cc:01:1d:71:
         80:d5:92:13:8c:70:11:34:1b:55:80:38:c6:e0:c1:4c:c1:86:
         be:02:60:4c:e0:92:44:7f:fe:bc:69:56:76:21:05:0d:ee:f5:
         d8:42:71:47:f4:00:4e:3e:ea:60:eb:f1:d7:46:d4:cd:a2:b5:
         1e:04:90:31:07:3b:7f:5a:92:f8:5b:bb:86:a8:29:fb:be:10:
         3e:2d:d5:b4:57:46:98:a8:13:01:d5:22:0e:c5:5b:86:e5:0b:
         b9:62:86:ff:66:06:0f:b4:2c:01:ed:c2:02:2c:2a:cb:96:8e:
         66:53:62:13:6e:15:b5:23:d0:14:e1:5e:33:a7:92:a4:44:e0:
         68:82:11:e6:1c:e7:35:96:a7:2c:bb:ca:35:ca:7f:a5:0c:23:
         e0:3b:30:d7:c9:f5:a2:88:cd:d7:e9:0e:83:52:49:04:23:58:
         2b:5b:ab:78:a8:b2:a4:ac:a8:ca:04:2a:44:2f:3c:0b:21:8f:
         b7:90:9c:3b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUab6NKV8pQXazqmG8orhYnsEvoQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1NUNFNTY3NDYyNDBGRjM5MjAzMDQwNEZBMkRGNUQ1
NzlFQTg0RTAeFw0yNDAzMDUxODEyNDFaFw0yNTAzMDQxODE3NDFaMDMxMTAvBgNV
BAMTKDRDMzQwMDcyODJBQ0Y5NzU5N0QwRDMwQjQ1Qjg1N0ExREM4QzIyREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FUao/D6ZXjTL+FTiAvy9Ok8o
vLwGaMVtBa09v0y/bHAs+wfBIYXINx3fxiKY+yS8wfItvxjkkXzs5p0xqgryYShP
EkP9JzxbU1V5iGGouSqZcKxQGIZf6GpZUS4t9UMHGPC2I9OyqUbOCkIDfCHea6Q8
d91lbt1yqWA37I6J8YMQUOn51jp14qjS9Mpv0k/utU3KYwxcYUQ4sZPIT2XofE+5
zIXJXdsHfmejInurl0JhdcliK2QL8XnCc5MiTd1SlRkUDj5tAkSQ9PTjmLjThS3Z
faUgtwnqZ7OIGWc8dXalsNw41eGMSTiajrnRYowTrxDyDi7KE+GWEJ1zpHmPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTDQAcoKs+XWX0NMLRbhXodyMItwwHwYDVR0j
BBgwFoAUZlXOVnRiQP85IDBAT6LfXVeeqE4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wODY1MTZFNzdCRURFNzQ4NDlFOEE4MThDNEQ4QjBDN0Iz
QkE5MkYwNDRBMEZGMkFEMDU4RUI3MkE3MkYwMjNBLzAvNjY1NUNFNTY3NDYyNDBG
RjM5MjAzMDQwNEZBMkRGNUQ1NzlFQTg0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjU1Q0U1Njc0NjI0MEZGMzky
MDMwNDA0RkEyREY1RDU3OUVBODRFLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDg2NTE2RTc3QkVERTc0ODQ5RThBODE4QzREOEIwQzdCM0JBOTJGMDQ0
QTBGRjJBRDA1OEVCNzJBNzJGMDIzQS8wLzMxMzgzNjJlMzkyZTMxMzIzODJlMzAy
ZjMxMzcyZDMyMzIyMDNkM2UyMDMyMzczOTMyMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAe6CYAwDQYJ
KoZIhvcNAQELBQADggEBAFKy/XwwkCNAfiI7E9ZtTttmnkMJfKEqmDwulOlaMGd2
SxoRVx3TP3JUETL94TH8f0vHWPiEOTi8FQdVTnRTe4zeUnwLzAEdcYDVkhOMcBE0
G1WAOMbgwUzBhr4CYEzgkkR//rxpVnYhBQ3u9dhCcUf0AE4+6mDr8ddG1M2itR4E
kDEHO39akvhbu4aoKfu+ED4t1bRXRpioEwHVIg7FW4blC7lihv9mBg+0LAHtwgIs
KsuWjmZTYhNuFbUj0BThXjOnkqRE4GiCEeYc5zWWpyy7yjXKf6UMI+A7MNfJ9aKI
zdfpDoNSSQQjWCtbq3iosqSsqMoEKkQvPAshj7eQnDs=
-----END CERTIFICATE-----