Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa
File:                     3133382e38342e33322e302f31392d3234203d3e203134353933.roa (raw, json)
Hash identifier:          WmQrWP6cflDwI/fqe2aZ9VpxjdcK4PyPGTyiLjyEbKk=
Subject key identifier:   BD:70:0C:86:34:F7:33:01:59:3E:52:1C:1C:DF:80:64:5D:9B:92:41
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       6D18B2B4BD891A70AFFAB97F7E520E63E16325D3
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     14593
IP address blocks:        138.84.32.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:18:b2:b4:bd:89:1a:70:af:fa:b9:7f:7e:52:0e:63:e1:63:25:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=BD700C8634F73301593E521C1CDF80645D9B9241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:c8:6e:a8:9b:e8:9c:13:5c:9a:de:c8:7f:
                    60:74:7b:6f:cd:c1:91:5f:ad:83:96:1a:0b:c7:56:
                    9a:e6:de:40:a5:9a:97:3e:2d:5b:08:a6:f7:30:e7:
                    3b:44:a8:df:1c:68:e7:3d:4f:66:d0:ef:a6:3d:58:
                    24:67:eb:24:d9:5f:af:9a:4a:03:38:bd:ac:48:fc:
                    5d:fa:e8:50:79:6a:5f:99:e4:39:d1:9d:f0:a8:ef:
                    da:5d:7b:ae:c0:9a:f9:28:7b:4a:9f:17:28:80:fd:
                    a7:64:e8:66:70:ec:22:20:42:b4:0a:63:32:04:4b:
                    99:96:5b:d9:81:c3:bd:32:44:7c:29:a1:00:bb:3e:
                    36:d4:d4:fe:f1:e9:a5:82:64:aa:bc:d0:71:cc:ba:
                    21:c8:58:26:f9:80:1d:4a:9d:ea:38:a5:84:87:28:
                    62:0b:80:25:b6:c2:fa:95:eb:f5:56:f9:4b:b6:6b:
                    5b:2b:16:2c:f0:99:43:73:a0:f0:f0:d2:44:c0:f9:
                    8b:a7:6c:db:39:d9:83:b1:d1:66:06:6c:76:67:5d:
                    33:c8:96:9b:a9:34:39:db:66:04:ad:b5:63:be:0b:
                    56:2f:84:40:3a:fe:c9:de:76:6a:b6:24:e7:1c:05:
                    e4:0e:20:d4:e3:7c:3f:cc:2a:cb:71:8a:78:01:ab:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:70:0C:86:34:F7:33:01:59:3E:52:1C:1C:DF:80:64:5D:9B:92:41
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3133382e38342e33322e302f31392d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.84.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:8d:13:74:b0:55:46:d6:0a:ab:66:b2:9a:79:b5:a8:de:49:
         59:07:df:bf:08:1a:e3:1a:2c:b9:dd:fc:9a:68:6e:6f:ea:f6:
         75:14:16:cc:26:bb:2a:f6:42:46:d9:46:b0:cf:ad:0e:68:aa:
         f6:81:b8:4e:5b:37:90:bd:34:a7:1e:31:35:fc:b2:d1:80:8c:
         e5:db:57:bb:d7:bf:bb:76:2a:72:77:eb:8c:f8:78:2c:bd:e6:
         49:f0:81:2f:74:55:ac:11:f8:e4:02:05:4b:13:47:b1:d3:b1:
         83:ab:45:4b:aa:9c:f3:e8:dd:7b:05:6c:ee:31:e8:e5:68:63:
         2a:c1:bf:46:c1:cf:94:ee:bb:64:a3:5d:fc:78:9b:5c:de:f8:
         44:15:d5:aa:49:94:e3:a1:49:ed:bd:b8:8c:24:ba:09:bc:5f:
         1a:8d:91:1e:88:7b:2c:c3:4a:03:82:eb:c2:14:77:4c:02:8c:
         d5:f8:7e:f7:7f:6e:be:b7:c0:a6:a7:f0:64:a4:a0:5e:da:9f:
         95:a9:5f:cc:09:4d:c4:6f:b3:4c:85:e3:a9:f3:05:86:1a:1f:
         55:65:ef:03:39:8b:2a:cb:aa:bc:82:89:77:e1:dc:fd:89:50:
         f0:0a:43:b6:4f:9b:3a:14:b9:04:57:2a:04:0e:ad:ff:02:e0:
         a7:c1:56:4a
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUbRiytL2JGnCv+rl/flIOY+FjJdMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVEQTE3MUQ1QUUwOUU1NUE3MjgwREMyMjc2MTBEODJB
MkFCMDM1NjAeFw0yNDAzMDUxNzU0MDRaFw0yNTAzMDQxNzU5MDRaMDMxMTAvBgNV
BAMTKEJENzAwQzg2MzRGNzMzMDE1OTNFNTIxQzFDREY4MDY0NUQ5QjkyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXMhuqJvonBNcmt7If2B0e2/N
wZFfrYOWGgvHVprm3kClmpc+LVsIpvcw5ztEqN8caOc9T2bQ76Y9WCRn6yTZX6+a
SgM4vaxI/F366FB5al+Z5DnRnfCo79pde67Amvkoe0qfFyiA/adk6GZw7CIgQrQK
YzIES5mWW9mBw70yRHwpoQC7PjbU1P7x6aWCZKq80HHMuiHIWCb5gB1Kneo4pYSH
KGILgCW2wvqV6/VW+Uu2a1srFizwmUNzoPDw0kTA+YunbNs52YOx0WYGbHZnXTPI
lpupNDnbZgSttWO+C1YvhEA6/snedmq2JOccBeQOINTjfD/MKstxingBq36fAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUvXAMhjT3MwFZPlIcHN+AZF2bkkEwHwYDVR0j
BBgwFoAUFdoXHVrgnlWnKA3CJ2ENgqKrA1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDgzNzdCOEY4MTBFNjlCMUU2REUzRjIyOTg0OEFCMzQ0
RkI3ODY0OTQyRjc2Q0NDQ0JFNUMyNTZCMjNENkJGLzAvMTVEQTE3MUQ1QUUwOUU1
NUE3MjgwREMyMjc2MTBEODJBMkFCMDM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xNURBMTcxRDVBRTA5RTU1QTcy
ODBEQzIyNzYxMEQ4MkEyQUIwMzU2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ4Mzc3QjhGODEwRTY5QjFFNkRFM0YyMjk4NDhBQjM0NEZCNzg2NDk0
MkY3NkNDQ0NCRTVDMjU2QjIzRDZCRi8wLzMxMzMzODJlMzgzNDJlMzMzMjJlMzAy
ZjMxMzkyZDMyMzQyMDNkM2UyMDMxMzQzNTM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAWKVCAwDQYJ
KoZIhvcNAQELBQADggEBAEiNE3SwVUbWCqtmspp5tajeSVkH378IGuMaLLnd/Jpo
bm/q9nUUFswmuyr2QkbZRrDPrQ5oqvaBuE5bN5C9NKceMTX8stGAjOXbV7vXv7t2
KnJ364z4eCy95knwgS90VawR+OQCBUsTR7HTsYOrRUuqnPPo3XsFbO4x6OVoYyrB
v0bBz5Tuu2SjXfx4m1ze+EQV1apJlOOhSe29uIwkugm8XxqNkR6IeyzDSgOC68IU
d0wCjNX4fvd/br63wKan8GSkoF7an5WpX8wJTcRvs0yF46nzBYYaH1Vl7wM5iyrL
qryCiXfh3P2JUPAKQ7ZPmzoUuQRXKgQOrf8C4KfBVko=
-----END CERTIFICATE-----