Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
File:                     3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa (raw, json)
Hash identifier:          8iHi6M6Z+zineJjIgS40vtdZYDnlj1yP3QLTu3N1dho=
Subject key identifier:   CE:06:9A:1D:52:FA:8B:7F:94:92:AC:F2:BE:F5:90:0A:4B:EC:25:93
Certificate issuer:       /CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
Certificate serial:       239CCC7B63D328EC04E21DFFE36D1C65E06EAF57
Authority key identifier: 64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa
Signing time:             Tue 05 Mar 2024 18:15:11 +0000
ROA not before:           Tue 05 Mar 2024 18:10:11 +0000
ROA not after:            Tue 04 Mar 2025 18:15:11 +0000
asID:                     265705
IP address blocks:        186.28.180.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9c:cc:7b:63:d3:28:ec:04:e2:1d:ff:e3:6d:1c:65:e0:6e:af:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6447D4623D0D72E1619CC6C94EF835E9D3D5E620
        Validity
            Not Before: Mar  5 18:10:11 2024 GMT
            Not After : Mar  4 18:15:11 2025 GMT
        Subject: CN=CE069A1D52FA8B7F9492ACF2BEF5900A4BEC2593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:9b:45:87:d4:5a:1b:e4:c6:c9:0a:6c:d5:
                    d6:66:fb:b1:e0:ab:6a:2a:48:12:4c:d7:c0:46:34:
                    92:ca:37:d3:7f:ce:3d:2c:06:f2:ba:c6:2c:1a:ca:
                    56:e3:9f:5b:a7:80:ba:9f:96:3d:a5:36:17:1e:53:
                    8f:04:59:7b:27:10:ac:b4:cb:62:33:0e:86:d2:54:
                    8a:3f:f0:f7:2a:e9:27:0f:1b:b1:96:31:3a:8a:63:
                    e5:9d:56:43:49:8b:e4:5a:1b:a7:54:56:6a:7b:7b:
                    60:1a:a4:75:e9:5d:f5:d0:22:62:a5:cd:3f:f5:70:
                    66:c2:86:88:bf:e3:5f:d4:8c:ae:4b:03:9d:aa:d8:
                    98:41:92:58:23:c6:22:84:f2:d8:f3:36:d1:f0:8d:
                    83:13:3b:36:48:e4:99:a5:74:8a:ec:70:41:53:5b:
                    c2:ba:b3:5b:ab:be:8d:22:5c:5c:02:d4:e5:1c:45:
                    a0:ec:e8:aa:1c:43:82:33:bd:0b:c8:38:f0:0d:3f:
                    db:57:ed:95:97:fd:f6:fd:0b:f3:f1:d4:8c:76:d2:
                    23:64:b5:94:b3:08:ca:b8:63:71:78:a9:61:96:85:
                    64:39:cd:6d:cc:6c:b4:ae:c9:56:f0:d7:79:8f:aa:
                    57:77:5d:45:05:23:c0:ee:4c:25:21:0d:97:11:95:
                    8f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:06:9A:1D:52:FA:8B:7F:94:92:AC:F2:BE:F5:90:0A:4B:EC:25:93
            X509v3 Authority Key Identifier:
                keyid:64:47:D4:62:3D:0D:72:E1:61:9C:C6:C9:4E:F8:35:E9:D3:D5:E6:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6447D4623D0D72E1619CC6C94EF835E9D3D5E620.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F48FCFC23FDFD424102777A017D42D680468077188C2F1E9A691E030F4A0C15/0/3138362e32382e3138302e302f32332d3234203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:19:5b:8f:f5:77:ca:be:93:88:db:9a:58:e5:ad:c2:bc:
         65:d1:50:54:52:b3:cc:33:38:a3:d2:fb:70:11:51:79:c4:8e:
         6f:2a:ca:3b:aa:6c:d7:91:92:8c:63:f6:1e:9b:c4:5b:6d:b5:
         71:01:dd:a3:85:95:ac:0f:55:b3:15:e4:89:8e:d1:d3:6e:1f:
         0f:12:91:9a:7e:e3:fe:e1:24:f6:67:6c:ad:f5:01:dc:37:79:
         81:f0:1f:e5:6b:bb:9a:6d:1b:f1:af:7f:d9:ca:73:84:6f:28:
         51:f2:ea:de:cb:24:27:45:4d:3b:c7:56:89:2a:ee:ed:79:25:
         01:c7:61:a8:73:82:e0:69:60:ba:c0:88:da:a5:7a:5a:fd:24:
         1d:e7:3e:49:2a:e2:19:bc:31:1b:8b:cd:16:4e:df:75:15:d0:
         b6:52:72:50:c9:66:27:30:25:08:26:5f:db:dd:19:69:25:5f:
         65:0b:9f:5c:5a:8e:e1:cc:28:8d:95:dc:e9:65:cd:b1:e6:16:
         e7:6f:90:77:7c:d7:06:67:96:9b:75:e7:b2:b3:42:52:af:92:
         5b:90:69:72:9a:88:51:21:8c:06:2a:f7:78:b2:13:8a:89:04:
         f3:80:39:1e:bc:27:58:15:0e:c3:a7:65:02:a6:d5:aa:03:4f:
         38:b5:1f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----