Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e37342e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          e024Rmk0gpf5wfu2/CzxD/Kx77Mf9xRdji8Wy5hM1NM=
Subject key identifier:   4E:80:D5:95:87:9F:46:3E:EE:6C:4A:2B:F3:C9:F0:85:66:87:1F:8A
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       681B7438C3CF3B2AED1588A5E81001ECA44CDE4F
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:23 +0000
ROA not before:           Tue 05 Mar 2024 17:35:23 +0000
ROA not after:            Tue 04 Mar 2025 17:40:23 +0000
asID:                     23383
IP address blocks:        191.103.74.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1b:74:38:c3:cf:3b:2a:ed:15:88:a5:e8:10:01:ec:a4:4c:de:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:23 2024 GMT
            Not After : Mar  4 17:40:23 2025 GMT
        Subject: CN=4E80D595879F463EEE6C4A2BF3C9F08566871F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:61:a4:b5:87:9f:ad:b0:14:ad:96:d5:a6:
                    82:b4:4d:96:e8:d8:f8:42:c4:bc:c4:39:f4:af:34:
                    36:f8:09:da:02:88:4a:f0:55:c2:f5:72:8d:68:db:
                    57:1b:2c:50:e2:d1:39:81:47:9c:da:c7:b6:ac:d0:
                    91:eb:38:f8:60:62:3c:0e:ad:36:c0:c4:5e:51:d9:
                    3c:c0:6a:93:24:30:70:5d:95:82:e0:95:25:82:2c:
                    01:dc:77:fd:d6:84:d6:27:e7:81:b7:8b:3e:71:3b:
                    0c:8a:19:f5:80:66:7c:44:5d:c4:19:46:19:77:84:
                    6a:a4:df:71:9e:b5:1c:53:d6:8a:f8:89:1f:57:e6:
                    f3:9b:36:21:fc:92:84:0e:6b:99:25:6a:c4:65:92:
                    e4:fb:d4:9d:60:10:25:34:ae:38:d3:3a:d2:fa:88:
                    57:43:50:c7:54:69:71:e5:df:6f:ce:51:e6:c8:b3:
                    88:9c:00:52:8a:ed:ae:67:d6:1a:f3:e0:bb:27:c7:
                    a9:4b:7b:50:85:4e:37:88:0d:86:be:a1:c0:ce:5e:
                    e1:68:7c:89:44:67:a6:61:ee:17:09:8a:59:38:8f:
                    4d:3b:cc:84:8f:60:39:97:93:a3:b6:23:08:7f:e6:
                    cc:24:f3:a1:ca:52:2c:9d:7e:f9:d0:09:ea:47:4f:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:80:D5:95:87:9F:46:3E:EE:6C:4A:2B:F3:C9:F0:85:66:87:1F:8A
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e37342e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:76:5b:78:ad:09:d2:9a:b3:9d:3d:c9:79:ed:cd:65:75:61:
         46:c2:d6:f6:b6:62:55:e7:43:41:9b:3e:bd:b7:57:2e:32:92:
         33:b2:8f:f7:05:b6:b8:c4:01:39:89:d4:1a:9e:9a:47:18:55:
         ed:37:81:77:46:5c:cc:d6:c6:35:a0:14:dc:39:52:f1:b9:eb:
         cf:f4:71:7c:08:46:d9:bf:c7:98:f9:4c:01:4d:1a:ad:de:2a:
         5d:b9:22:b1:09:63:8d:01:89:81:cb:01:ee:ca:51:3c:7a:ac:
         ce:72:11:7d:6d:3f:c2:52:cc:a4:6f:a9:71:da:02:9e:88:be:
         29:64:d2:93:25:22:42:2e:89:48:8b:53:b5:c4:df:c8:23:dc:
         5d:8a:9c:34:7f:67:13:64:47:36:1c:8b:e7:4b:3e:26:1e:98:
         1c:49:e6:d7:25:ec:42:67:18:8f:02:dc:70:f2:70:9d:f2:d0:
         97:e8:02:b2:a0:7c:24:81:4a:86:c1:c8:1f:d7:d1:0e:89:e5:
         4c:2c:74:80:97:fa:1c:4d:e6:d7:20:bd:5f:18:b4:6c:7b:18:
         ff:91:b6:08:81:77:a8:b7:bb:04:31:5b:73:d6:3d:e8:b0:3b:
         3d:85:44:7b:70:ed:05:0e:74:28:bb:68:df:9f:f0:b2:f5:41:
         df:ab:ee:02
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUaBt0OMPPOyrtFYil6BAB7KRM3k8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM0N0JERDdGNjE5RUNBRDdBOTFDRkRBMjczRTgxRUQ4
ODM2RjdFODAeFw0yNDAzMDUxNzM1MjNaFw0yNTAzMDQxNzQwMjNaMDMxMTAvBgNV
BAMTKDRFODBENTk1ODc5RjQ2M0VFRTZDNEEyQkYzQzlGMDg1NjY4NzFGOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGv2GktYefrbAUrZbVpoK0TZbo
2PhCxLzEOfSvNDb4CdoCiErwVcL1co1o21cbLFDi0TmBR5zax7as0JHrOPhgYjwO
rTbAxF5R2TzAapMkMHBdlYLglSWCLAHcd/3WhNYn54G3iz5xOwyKGfWAZnxEXcQZ
Rhl3hGqk33GetRxT1or4iR9X5vObNiH8koQOa5klasRlkuT71J1gECU0rjjTOtL6
iFdDUMdUaXHl32/OUebIs4icAFKK7a5n1hrz4Lsnx6lLe1CFTjeIDYa+ocDOXuFo
fIlEZ6Zh7hcJilk4j007zISPYDmXk6O2Iwh/5swk86HKUiydfvnQCepHT6IVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUToDVlYefRj7ubEor88nwhWaHH4owHwYDVR0j
BBgwFoAUE0e91/YZ7K16kc/aJz6B7Yg29+gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNUM4NUI2OTcxRDhEODkwMkI3MDVDNTY0RDE2NjBEMzcw
MDFDMTQwQkYzRUQ2NzVGMUIyOEMyNDAyQUQyQzg3LzAvMTM0N0JERDdGNjE5RUNB
RDdBOTFDRkRBMjczRTgxRUQ4ODM2RjdFOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xMzQ3QkREN0Y2MTlFQ0FEN0E5
MUNGREEyNzNFODFFRDg4MzZGN0U4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTVDODVCNjk3MUQ4RDg5MDJCNzA1QzU2NEQxNjYwRDM3MDAxQzE0MEJG
M0VENjc1RjFCMjhDMjQwMkFEMkM4Ny8wLzMxMzkzMTJlMzEzMDMzMmUzNzM0MmUz
MDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMzMzMzgzMy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAb9nSjAN
BgkqhkiG9w0BAQsFAAOCAQEAU3ZbeK0J0pqznT3Jee3NZXVhRsLW9rZiVedDQZs+
vbdXLjKSM7KP9wW2uMQBOYnUGp6aRxhV7TeBd0ZczNbGNaAU3DlS8bnrz/RxfAhG
2b/HmPlMAU0ard4qXbkisQljjQGJgcsB7spRPHqsznIRfW0/wlLMpG+pcdoCnoi+
KWTSkyUiQi6JSItTtcTfyCPcXYqcNH9nE2RHNhyL50s+Jh6YHEnm1yXsQmcYjwLc
cPJwnfLQl+gCsqB8JIFKhsHIH9fRDonlTCx0gJf6HE3m1yC9Xxi0bHsY/5G2CIF3
qLe7BDFbc9Y96LA7PYVEe3DtBQ50KLto35/wsvVB36vuAg==
-----END CERTIFICATE-----