Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32322d3234203d3e203237383233.roa
File:                     3136382e3138312e3138342e302f32322d3234203d3e203237383233.roa (raw, json)
Hash identifier:          xcPiSgObRX2ssthK/cedZGN11b97/yZMfw5qQa7P4ds=
Subject key identifier:   5F:C3:16:9C:79:71:5E:EF:8F:33:99:47:B8:92:CD:98:53:E5:50:9B
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       11A6E31920E6BB3F93CC4CCA50A71EB73EE7AF02
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32322d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:03 +0000
ROA not before:           Tue 05 Mar 2024 17:35:03 +0000
ROA not after:            Tue 04 Mar 2025 17:40:03 +0000
asID:                     27823
IP address blocks:        168.181.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a6:e3:19:20:e6:bb:3f:93:cc:4c:ca:50:a7:1e:b7:3e:e7:af:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:03 2024 GMT
            Not After : Mar  4 17:40:03 2025 GMT
        Subject: CN=5FC3169C79715EEF8F339947B892CD9853E5509B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:cb:e5:d8:1d:b9:2a:82:13:c7:f6:d2:13:
                    e1:ba:0f:a2:68:d3:fc:0d:d2:85:a7:a4:53:a5:69:
                    c6:08:c5:27:0f:3b:da:32:09:88:94:e4:07:61:57:
                    a8:f9:c8:65:19:7b:af:0e:79:04:82:06:bc:3b:af:
                    08:8e:32:d5:10:d4:46:2c:a7:30:2a:fe:03:8f:6a:
                    83:5f:74:1b:d9:b7:1f:1f:0b:2d:54:84:00:c0:74:
                    7e:65:82:bb:fa:5d:34:ba:22:4d:82:54:f8:63:11:
                    f8:20:e5:0d:a3:c9:4b:47:96:08:50:5c:82:20:91:
                    86:5d:eb:ac:59:10:aa:93:b4:c1:e7:35:8b:8e:14:
                    2a:b1:bb:fe:8d:40:5f:02:7a:66:d7:4e:21:57:8b:
                    bb:e6:0c:d4:04:95:38:74:42:d5:5f:51:85:c9:3e:
                    f8:71:cf:f0:44:45:c7:6c:72:ff:6d:57:99:bc:56:
                    43:e5:19:15:78:4a:0e:5a:0c:31:da:58:18:2b:f7:
                    20:d0:25:8f:54:38:1f:d5:2c:a9:48:26:93:2b:97:
                    4a:e5:6e:dc:bd:8b:eb:10:f9:d0:08:7e:2d:8c:23:
                    da:03:9f:98:4b:d2:e6:03:98:50:f8:cc:3e:02:f7:
                    8e:25:d6:1a:8e:92:42:9d:cd:60:2e:23:0f:e9:e7:
                    ab:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:16:9C:79:71:5E:EF:8F:33:99:47:B8:92:CD:98:53:E5:50:9B
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3136382e3138312e3138342e302f32322d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:8a:47:6a:86:dc:20:c3:e2:fe:8c:fb:f4:cb:f0:8b:1f:0c:
         42:14:03:f2:eb:84:f1:0b:9b:21:98:63:82:41:1a:c7:48:ff:
         0b:5e:a8:0d:c8:5e:f5:2c:59:02:da:51:4c:b8:7c:3a:b7:da:
         96:62:3c:30:b8:d8:8e:74:ed:7f:f8:f8:d4:4a:1e:d5:6c:a0:
         5b:7d:57:06:ae:39:d8:3e:b4:31:83:24:6a:d9:1a:a4:ca:ae:
         44:14:f4:b4:9c:d0:fa:c4:4a:40:be:f5:88:74:54:f3:47:0a:
         64:7d:c9:20:ae:85:84:cc:a3:34:de:08:11:79:08:22:4b:c3:
         06:6e:3c:fa:85:5f:df:db:09:b7:34:d5:cb:21:3b:92:b9:b9:
         b7:e4:31:ab:63:77:99:97:ab:2b:2f:ba:08:2a:df:d7:47:f1:
         5a:f4:75:8a:18:b9:29:5b:e0:26:0b:0a:eb:d0:3e:a9:87:a0:
         81:36:33:5a:24:4e:f4:c9:18:8f:3d:43:b8:2d:ef:23:4e:1a:
         38:7a:ad:3c:26:7b:8f:08:60:b4:ad:a7:6c:d3:84:06:91:69:
         9c:d2:53:58:a0:8c:d0:50:71:a4:63:8f:6f:e6:38:a8:ed:74:
         42:ec:f8:50:e5:87:f7:58:5e:c1:93:ae:70:22:cb:e3:3a:3d:
         cd:71:5f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----