Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e3135342e302e302f31352d3234203d3e203139343239.roa
File:                     3138362e3135342e302e302f31352d3234203d3e203139343239.roa (raw, json)
Hash identifier:          aZml82GJOULhjKsH3tTraZF0xadsRO0YnZ0Md4DoX34=
Subject key identifier:   F4:D3:3F:82:7F:8C:4B:33:2F:09:30:1D:98:43:73:D9:A4:96:26:FF
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       6A0694808667D8017D9ECF891D1BD7D0E8146A5A
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e3135342e302e302f31352d3234203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:08 +0000
ROA not before:           Tue 05 Mar 2024 18:10:08 +0000
ROA not after:            Tue 04 Mar 2025 18:15:08 +0000
asID:                     19429
IP address blocks:        186.154.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:06:94:80:86:67:d8:01:7d:9e:cf:89:1d:1b:d7:d0:e8:14:6a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:08 2024 GMT
            Not After : Mar  4 18:15:08 2025 GMT
        Subject: CN=F4D33F827F8C4B332F09301D984373D9A49626FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:d5:a3:d4:41:47:3b:ed:41:16:ec:3d:f8:
                    7a:86:4e:f4:94:60:13:73:f0:99:7d:a8:fc:70:f8:
                    23:2b:aa:80:07:ca:ec:b9:ae:c1:79:20:09:e4:1b:
                    1d:f5:16:12:7c:52:1a:dd:70:d6:8d:2c:ab:35:43:
                    1d:e6:1c:65:fa:55:e5:ad:c4:50:6f:62:c2:6c:b5:
                    1e:f4:d0:13:62:cf:93:99:68:78:51:3f:e1:2f:d2:
                    47:76:b6:66:3d:e3:52:e6:4f:47:10:cb:c0:26:4b:
                    c1:30:eb:8c:e9:f5:6c:cb:61:8f:2d:f0:39:80:2a:
                    5c:68:29:68:49:00:7a:8c:c2:95:97:87:78:ab:c6:
                    7d:19:95:78:3c:bc:a5:f0:56:a4:21:5f:87:85:e7:
                    c2:37:dd:b5:fb:44:da:04:cf:b6:82:94:40:86:b1:
                    03:3f:84:89:ee:b8:32:b9:79:aa:be:a3:ee:fa:70:
                    f6:b2:84:fe:d2:14:c0:fc:3e:4b:5f:c5:88:ad:56:
                    3f:34:20:77:d9:1d:0c:6c:cf:b3:7f:bf:3d:6a:dc:
                    96:e9:b5:29:fd:82:29:73:8f:c6:d7:89:4d:2c:f9:
                    64:91:b5:cf:c7:c8:e1:e1:15:15:e3:bc:9c:b6:f6:
                    75:93:12:44:79:50:a0:82:14:b9:27:4f:99:98:92:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D3:3F:82:7F:8C:4B:33:2F:09:30:1D:98:43:73:D9:A4:96:26:FF
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e3135342e302e302f31352d3234203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.154.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         62:40:e0:a7:6a:67:51:fd:7c:1a:b4:b3:1c:d2:96:77:ae:99:
         61:4c:66:4f:85:44:0d:6a:6c:b6:f5:35:1f:e8:70:3a:3d:cb:
         f4:ba:c7:1c:a2:f1:32:24:e1:a0:7d:a9:10:40:c3:5f:bd:ad:
         6f:a8:f7:32:b5:ae:e3:ab:5f:8c:e8:bb:3c:9c:99:61:32:3a:
         e3:66:27:70:fd:a5:a5:08:43:73:f9:4b:ba:12:92:e3:c5:18:
         33:a4:a2:75:d7:63:9c:ec:c9:56:0e:3c:12:24:97:b0:60:a5:
         e0:a0:00:b9:6f:55:b8:7a:e2:67:dc:21:a7:43:ef:e3:2a:03:
         e0:00:db:40:26:23:36:02:f5:60:41:3f:1a:c3:95:7a:4f:8a:
         f6:74:f8:9f:32:9b:9d:32:fb:a4:58:e3:fd:94:1f:6f:6e:b4:
         c5:eb:7d:f0:6d:39:eb:bc:19:9c:36:6f:27:d4:8f:39:cd:43:
         f8:0e:65:8e:93:90:88:3b:04:78:5b:90:86:17:03:e2:d9:e9:
         ed:9b:68:eb:e6:3b:a1:7f:a5:d6:3c:88:a3:60:4d:2d:43:76:
         d2:56:d9:f1:ae:92:de:e2:b8:97:74:2a:15:a9:c4:c1:d9:9c:
         33:b7:21:23:ac:ab:bd:76:51:d8:5b:e5:c4:9e:42:45:e7:ed:
         4c:19:d9:32
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUagaUgIZn2AF9ns+JHRvX0OgUalowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjQ0N0Q0NjIzRDBENzJFMTYxOUNDNkM5NEVGODM1RTlE
M0Q1RTYyMDAeFw0yNDAzMDUxODEwMDhaFw0yNTAzMDQxODE1MDhaMDMxMTAvBgNV
BAMTKEY0RDMzRjgyN0Y4QzRCMzMyRjA5MzAxRDk4NDM3M0Q5QTQ5NjI2RkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ZtWj1EFHO+1BFuw9+HqGTvSU
YBNz8Jl9qPxw+CMrqoAHyuy5rsF5IAnkGx31FhJ8UhrdcNaNLKs1Qx3mHGX6VeWt
xFBvYsJstR700BNiz5OZaHhRP+Ev0kd2tmY941LmT0cQy8AmS8Ew64zp9WzLYY8t
8DmAKlxoKWhJAHqMwpWXh3irxn0ZlXg8vKXwVqQhX4eF58I33bX7RNoEz7aClECG
sQM/hInuuDK5eaq+o+76cPayhP7SFMD8PktfxYitVj80IHfZHQxsz7N/vz1q3Jbp
tSn9gilzj8bXiU0s+WSRtc/HyOHhFRXjvJy29nWTEkR5UKCCFLknT5mYkuO/AgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQU9NM/gn+MSzMvCTAdmENz2aSWJv8wHwYDVR0j
BBgwFoAUZEfUYj0NcuFhnMbJTvg16dPV5iAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRjQ4RkNGQzIzRkRGRDQyNDEwMjc3N0EwMTdENDJENjgw
NDY4MDc3MTg4QzJGMUU5QTY5MUUwMzBGNEEwQzE1LzAvNjQ0N0Q0NjIzRDBENzJF
MTYxOUNDNkM5NEVGODM1RTlEM0Q1RTYyMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NDQ3RDQ2MjNEMEQ3MkUxNjE5
Q0M2Qzk0RUY4MzVFOUQzRDVFNjIwLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEY0OEZDRkMyM0ZERkQ0MjQxMDI3NzdBMDE3RDQyRDY4MDQ2ODA3NzE4
OEMyRjFFOUE2OTFFMDMwRjRBMEMxNS8wLzMxMzgzNjJlMzEzNTM0MmUzMDJlMzAy
ZjMxMzUyZDMyMzQyMDNkM2UyMDMxMzkzNDMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwG6mjANBgkq
hkiG9w0BAQsFAAOCAQEAYkDgp2pnUf18GrSzHNKWd66ZYUxmT4VEDWpstvU1H+hw
Oj3L9LrHHKLxMiThoH2pEEDDX72tb6j3MrWu46tfjOi7PJyZYTI642YncP2lpQhD
c/lLuhKS48UYM6SidddjnOzJVg48EiSXsGCl4KAAuW9VuHriZ9whp0Pv4yoD4ADb
QCYjNgL1YEE/GsOVek+K9nT4nzKbnTL7pFjj/ZQfb260xet98G0567wZnDZvJ9SP
Oc1D+A5ljpOQiDsEeFuQhhcD4tnp7Zto6+Y7oX+l1jyIo2BNLUN20lbZ8a6S3uK4
l3QqFanEwdmcM7chI6yrvXZR2FvlxJ5CReftTBnZMg==
-----END CERTIFICATE-----