Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa
File:                     3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa (raw, json)
Hash identifier:          +gN8VygieOqmQpCDke4QITkecspNICIJW4JvOdmvKwA=
Subject key identifier:   BD:E7:1A:DC:03:02:28:AB:3B:92:A3:F4:EC:AE:E9:EF:66:71:1A:92
Certificate issuer:       /CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
Certificate serial:       122546A3B211BC58E7680506CD21710771D98E2C
Authority key identifier: D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa
Signing time:             Tue 05 Mar 2024 17:49:05 +0000
ROA not before:           Tue 05 Mar 2024 17:44:05 +0000
ROA not after:            Tue 04 Mar 2025 17:49:05 +0000
asID:                     264608
IP address blocks:        143.202.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:25:46:a3:b2:11:bc:58:e7:68:05:06:cd:21:71:07:71:d9:8e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D579CC6AF8308A8BC0A633B894777F89547B9F81
        Validity
            Not Before: Mar  5 17:44:05 2024 GMT
            Not After : Mar  4 17:49:05 2025 GMT
        Subject: CN=BDE71ADC030228AB3B92A3F4ECAEE9EF66711A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5d:b1:df:a5:2c:ec:34:88:4c:d8:7b:5c:8c:
                    52:5c:eb:94:d1:41:87:58:25:b5:31:87:dd:47:f4:
                    35:79:a6:b1:8d:24:df:1d:bb:dc:78:13:0d:74:31:
                    4f:ab:dc:5d:ce:f3:93:17:fe:42:cf:03:62:ab:85:
                    fa:8f:f0:f1:3f:6b:18:3b:30:86:cd:2f:72:6f:5b:
                    5f:2b:2d:a9:33:2d:82:f3:98:c5:22:32:51:ed:b6:
                    bb:73:10:3f:dd:ae:68:e5:18:ad:04:de:69:01:b2:
                    db:31:ee:af:d0:f9:5f:7c:3e:c0:61:c3:be:8d:cf:
                    30:af:6d:47:60:89:58:28:df:16:66:b0:88:1b:a8:
                    ac:b1:aa:0b:ed:3d:bf:2d:e8:05:f9:bc:8c:15:68:
                    d2:02:6e:87:89:28:9a:ba:e0:6a:95:a2:7c:64:37:
                    62:82:ec:c6:cf:be:48:90:d7:cf:09:9b:83:3e:24:
                    e0:bc:ab:ec:70:94:31:eb:b1:d2:1f:a4:47:02:ab:
                    71:a0:d5:88:71:11:87:55:05:f1:69:64:f1:ca:95:
                    0c:48:29:1b:54:39:fd:1c:54:90:79:c4:24:4a:c3:
                    59:9a:9b:71:00:23:6b:a7:f4:dd:00:a3:e5:4a:7a:
                    e3:67:52:7b:43:fa:bf:b4:7c:7e:1c:78:84:96:19:
                    de:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E7:1A:DC:03:02:28:AB:3B:92:A3:F4:EC:AE:E9:EF:66:71:1A:92
            X509v3 Authority Key Identifier:
                keyid:D5:79:CC:6A:F8:30:8A:8B:C0:A6:33:B8:94:77:7F:89:54:7B:9F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D579CC6AF8308A8BC0A633B894777F89547B9F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DAF9B3098D7560C1D9E1DFDFAFC686B4771714CFC22AAAFAD1E2873E1809845/0/3134332e3230322e32302e302f32322d3234203d3e20323634363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:59:e4:9c:41:72:05:30:5a:6a:bc:51:cf:1b:c9:bf:2b:d1:
         0a:76:db:bf:de:60:fb:bd:ef:22:02:83:4a:80:e2:bf:76:b5:
         8c:d8:77:ba:fc:48:f1:22:10:ae:bf:d2:13:e6:1d:7e:83:2a:
         9e:fd:8d:8c:c6:b6:ed:93:fc:99:1b:1c:8a:fb:81:56:fc:e5:
         f4:6e:f5:2f:8e:c8:d5:20:fb:da:be:1c:0b:1e:3d:1f:e8:f1:
         30:f1:f6:a0:69:50:ea:29:5d:f4:c8:b7:4c:b2:35:ef:24:38:
         7e:cd:af:01:11:ac:ff:40:9c:f5:2e:d7:03:67:a3:72:f2:15:
         14:28:c3:51:f9:5c:37:c8:c7:94:ad:64:6c:63:58:1a:1a:03:
         b5:f0:e6:b3:70:30:17:8e:93:95:81:e2:ed:cd:90:d7:b1:5d:
         06:49:66:ae:0c:db:25:f5:f7:db:5f:a7:43:6a:13:4d:d1:de:
         22:0a:f3:c1:e6:91:05:3c:33:30:aa:f1:67:ac:96:aa:18:ce:
         f0:92:52:73:05:4c:24:d6:74:be:65:03:a0:cd:63:bf:7d:94:
         7c:50:a7:b6:82:ab:0a:37:12:a0:39:49:fa:ed:da:17:84:64:
         b0:36:09:5a:2f:31:7f:d5:89:ef:67:b4:50:7d:ae:78:fe:d5:
         8e:bc:58:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----