Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3132382e302f31382d3231203d3e20333934343734.roa
File:                     3139312e3130322e3132382e302f31382d3231203d3e20333934343734.roa (raw, json)
Hash identifier:          WxOvqgr3jhJoXV9IKFVEeu4qBI0Xr+nvBstrRyNqPhE=
Subject key identifier:   A3:97:1A:64:41:78:0B:E9:37:AD:F0:E1:43:16:87:61:1B:FF:09:34
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       37F36C69CC4C566F931232FBC60142BF3F2D84C1
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3132382e302f31382d3231203d3e20333934343734.roa
Signing time:             Mon 22 Jul 2024 16:45:00 +0000
ROA not before:           Mon 22 Jul 2024 16:40:00 +0000
ROA not after:            Mon 21 Jul 2025 16:45:00 +0000
asID:                     394474
IP address blocks:        191.102.128.0/18 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f3:6c:69:cc:4c:56:6f:93:12:32:fb:c6:01:42:bf:3f:2d:84:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Jul 22 16:40:00 2024 GMT
            Not After : Jul 21 16:45:00 2025 GMT
        Subject: CN=A3971A6441780BE937ADF0E1431687611BFF0934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f8:e9:a1:e0:9f:ca:1b:bd:0f:bc:1c:40:81:
                    88:e8:df:82:1e:2a:85:3f:33:39:c7:c5:19:82:6a:
                    48:0b:02:2a:47:23:90:7e:0c:52:d7:97:6b:0b:3f:
                    5d:92:40:4a:06:d2:5a:99:ea:94:54:13:75:c2:88:
                    6c:4e:b0:4f:ce:99:a3:c7:6c:9e:11:5a:b7:da:77:
                    de:5a:44:56:71:98:8b:30:58:d8:f1:34:8f:1f:2e:
                    8d:57:ba:e5:84:0f:09:c1:41:2f:24:15:48:8b:95:
                    fe:38:3b:f0:c4:cc:54:bf:c2:7d:7d:78:3a:15:de:
                    e2:93:de:f8:05:e1:67:67:8f:6f:b3:1b:61:29:7f:
                    f4:7d:c1:7d:f5:1c:d0:f6:24:4c:f4:f6:50:8a:3a:
                    a9:ec:64:57:ce:f3:e5:ce:ba:6f:6b:58:ca:e1:c6:
                    66:cf:de:f1:14:13:2b:db:62:f5:c8:c6:c6:71:32:
                    37:dc:26:e3:5e:78:9b:fc:2f:1f:30:d6:9f:48:d0:
                    43:01:b1:a1:c9:83:e3:66:d0:c7:23:71:56:0a:3c:
                    e5:eb:3f:b1:3c:f6:90:d0:50:d4:2b:8b:d0:9c:a2:
                    9e:7f:e7:56:44:c8:bd:54:77:f0:37:a2:b7:4a:f5:
                    6f:c0:d2:17:91:f4:54:1a:0c:56:94:00:b9:75:f6:
                    19:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:1A:64:41:78:0B:E9:37:AD:F0:E1:43:16:87:61:1B:FF:09:34
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3139312e3130322e3132382e302f31382d3231203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:18:31:c4:d6:6c:34:34:7f:7f:26:85:77:3b:21:93:3a:fe:
         98:02:d9:59:db:5e:e6:db:99:a0:94:46:f0:ae:30:e6:8f:8f:
         ad:c7:d3:ea:60:72:02:b8:65:cf:c5:0f:82:00:e6:91:42:7e:
         60:63:66:50:16:45:7d:23:53:c6:aa:e2:58:78:6b:01:31:c5:
         d7:99:28:ec:a2:9c:dd:d9:24:64:79:49:5b:ba:80:4c:68:58:
         42:56:0d:0a:58:86:81:18:10:9b:9f:df:04:a9:69:5a:59:a9:
         88:6d:7e:06:5b:f0:bc:a5:f0:89:50:d0:61:c6:d7:90:59:60:
         9a:24:99:2c:02:af:0d:c9:1f:ec:68:fa:80:4d:c6:b8:bd:a0:
         11:d4:df:4e:13:62:1f:98:0e:b2:59:a9:ec:3c:c4:8f:45:3f:
         91:68:74:6b:5d:e1:a7:5e:89:e5:45:05:47:5e:7e:1e:ed:b6:
         22:f1:84:8f:88:2e:70:c0:05:40:ef:e5:a1:a7:0e:e3:89:71:
         cf:9d:74:3e:de:13:bf:f5:d1:2f:7c:16:5c:22:01:b8:40:bd:
         21:3b:d6:ee:81:30:5a:a0:9c:b9:d5:04:bf:aa:d7:71:84:ca:
         f2:2a:ad:f6:c5:f2:d5:4c:5b:98:c1:a1:9b:32:74:63:03:bd:
         0d:f7:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----