Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
File:                     3139312e3130332e38382e302f32332d3234203d3e203233333833.roa (raw, json)
Hash identifier:          B6U/nI4DCF8a+2270BqF2k83/SVf7sL5uG5SVZPBPjg=
Subject key identifier:   46:94:6D:97:EE:7E:7A:BD:84:90:FF:17:A3:A9:C8:9D:8E:7F:8C:96
Certificate issuer:       /CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
Certificate serial:       7DE84F984904C6DE85F920C0F34F04E38553AAAB
Authority key identifier: 13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa
Signing time:             Tue 05 Mar 2024 17:40:21 +0000
ROA not before:           Tue 05 Mar 2024 17:35:21 +0000
ROA not after:            Tue 04 Mar 2025 17:40:21 +0000
asID:                     23383
IP address blocks:        191.103.88.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e8:4f:98:49:04:c6:de:85:f9:20:c0:f3:4f:04:e3:85:53:aa:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8
        Validity
            Not Before: Mar  5 17:35:21 2024 GMT
            Not After : Mar  4 17:40:21 2025 GMT
        Subject: CN=46946D97EE7E7ABD8490FF17A3A9C89D8E7F8C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:45:41:76:1d:2c:ad:ec:9b:6a:cd:25:3f:06:
                    ce:ab:d7:19:60:39:d5:d5:b3:b0:e6:e8:5a:d4:b2:
                    30:55:ec:19:f1:e3:be:56:7c:06:56:f0:3a:99:64:
                    61:da:8f:31:60:5d:8f:3d:8f:ca:fa:7b:8c:7c:55:
                    c1:3f:fd:6c:ac:c2:7c:22:45:0f:9d:9f:be:62:4c:
                    07:56:7e:71:19:11:d8:cc:fa:ed:f6:cd:33:17:19:
                    18:8c:c6:bc:0d:eb:fb:6e:4a:41:03:ef:e8:23:4d:
                    80:d0:ed:64:27:cf:f0:e4:c1:b6:f0:d8:eb:06:dc:
                    9a:f1:51:05:4e:d4:36:e9:8b:9b:4d:77:86:e7:29:
                    de:8c:7f:c5:9e:44:46:3b:ed:da:83:10:c1:fe:4e:
                    ae:6f:17:68:77:50:45:64:21:4b:8f:2c:a1:6d:4a:
                    41:01:cc:de:7f:68:e2:b3:cb:eb:b6:bc:52:78:d5:
                    92:8e:b0:60:83:b1:90:90:27:aa:e4:d8:2b:9b:8a:
                    e9:d5:6f:a0:2d:3b:65:cd:42:66:e8:55:05:b1:e6:
                    5e:04:44:57:05:a1:20:4b:a5:93:8d:2c:40:df:d9:
                    01:f2:3a:bd:b4:a0:87:ea:11:6c:30:3d:10:d7:d6:
                    df:05:06:88:c5:fd:cf:4c:e3:c4:4f:0a:1f:39:b7:
                    c9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:6D:97:EE:7E:7A:BD:84:90:FF:17:A3:A9:C8:9D:8E:7F:8C:96
            X509v3 Authority Key Identifier:
                keyid:13:47:BD:D7:F6:19:EC:AD:7A:91:CF:DA:27:3E:81:ED:88:36:F7:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1347BDD7F619ECAD7A91CFDA273E81ED8836F7E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15C85B6971D8D8902B705C564D1660D37001C140BF3ED675F1B28C2402AD2C87/0/3139312e3130332e38382e302f32332d3234203d3e203233333833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:8c:3c:8c:5a:a3:48:3c:e1:d4:08:0b:bb:2e:5f:b4:59:
         d9:59:9d:e4:2c:17:df:5c:c2:f2:a9:f3:c6:4c:94:96:32:b4:
         60:d6:38:ab:7b:3c:e2:cd:9a:78:f5:10:d8:4a:99:0d:be:29:
         32:1b:f2:54:a0:bb:e9:31:bb:5b:10:96:bb:e7:32:45:0d:78:
         33:f3:3b:7f:f2:3e:76:72:b2:d1:08:2d:0e:29:5f:62:ba:ef:
         1d:95:60:48:0d:f2:d3:0b:40:78:be:66:93:37:c5:88:91:f7:
         4c:7e:ca:19:c4:83:ea:39:86:73:9b:c0:d6:92:ea:ee:6c:dd:
         9f:2e:36:7e:9d:6e:06:1f:81:db:1b:1d:41:5d:68:5d:60:65:
         f9:af:df:7d:c6:19:79:da:6e:f8:75:94:7a:4b:3a:69:0a:50:
         f1:63:0a:84:37:bc:86:1d:22:90:44:3d:4d:d3:89:a7:e1:ce:
         5a:e5:f5:8d:80:9a:f6:37:07:f8:23:d2:54:87:34:da:97:a2:
         aa:a7:e7:6f:0d:0e:8a:75:04:0e:f7:3a:e9:df:59:80:ab:9b:
         54:25:c1:c7:6e:50:24:41:d8:fd:42:2b:e1:08:05:4a:06:97:
         56:01:1e:e5:73:8d:d1:9c:f8:12:f5:c5:96:68:45:4f:6e:9b:
         04:06:28:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----