Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
File:                     3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa (raw, json)
Hash identifier:          O9iDUHUZt42eg+plauzZWW8RFJgT+FKVnFerjyjF5gk=
Subject key identifier:   47:0E:E8:35:5E:BD:C0:73:D1:B5:58:37:F8:EC:2E:C8:2E:57:E2:C4
Certificate issuer:       /CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
Certificate serial:       318E3DFAB5B8A0C3CCDC328E29D09616A64746E5
Authority key identifier: 1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa
Signing time:             Tue 05 Mar 2024 17:55:07 +0000
ROA not before:           Tue 05 Mar 2024 17:50:07 +0000
ROA not after:            Tue 04 Mar 2025 17:55:07 +0000
asID:                     272031
IP address blocks:        181.189.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:8e:3d:fa:b5:b8:a0:c3:cc:dc:32:8e:29:d0:96:16:a6:47:46:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0307467F6E7691E7E576722E5D0EE6A42EDB86
        Validity
            Not Before: Mar  5 17:50:07 2024 GMT
            Not After : Mar  4 17:55:07 2025 GMT
        Subject: CN=470EE8355EBDC073D1B55837F8EC2EC82E57E2C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c9:82:2d:f0:11:5c:7d:3a:c9:b3:e2:67:b8:
                    3b:10:55:e1:55:47:8d:4e:bc:ba:23:2a:45:f8:fe:
                    f6:75:eb:47:5a:74:f7:79:b7:e8:fc:80:07:10:dc:
                    75:1c:ae:f9:e1:d6:26:64:ac:5c:1d:d7:e0:c9:1d:
                    cb:de:9e:9e:7e:a6:b5:05:f8:b6:1d:12:d1:19:62:
                    83:82:47:93:18:0a:57:84:e6:ea:a7:c6:dd:fe:7a:
                    58:7d:75:3d:1a:0a:f7:58:64:27:ec:3e:29:0b:0b:
                    bb:41:b9:dc:aa:6f:3f:0c:23:8e:dd:4a:e0:ea:a7:
                    6c:f5:76:62:a4:3d:b1:39:ce:ab:c5:66:05:08:e9:
                    31:83:29:7d:ca:f1:7f:44:43:72:ee:00:76:d6:11:
                    83:02:cd:2a:d5:b9:c5:cb:9a:cc:5c:17:9b:08:81:
                    13:8c:f6:4a:a9:bc:56:66:b5:7a:d4:d1:7d:77:3a:
                    84:1c:71:76:c8:ff:29:e8:7e:4f:56:48:51:19:fc:
                    04:6d:44:eb:d6:1f:f5:68:ff:38:de:9b:f9:06:90:
                    11:75:55:c9:e3:5c:84:97:7f:18:08:b1:31:85:36:
                    d3:26:1a:bc:80:35:ff:af:ea:e2:bb:97:c4:6a:d4:
                    61:60:49:c1:3f:31:13:a7:db:d3:34:07:47:df:ed:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0E:E8:35:5E:BD:C0:73:D1:B5:58:37:F8:EC:2E:C8:2E:57:E2:C4
            X509v3 Authority Key Identifier:
                keyid:1E:03:07:46:7F:6E:76:91:E7:E5:76:72:2E:5D:0E:E6:A4:2E:DB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1E0307467F6E7691E7E576722E5D0EE6A42EDB86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A3CA72BDD4EE0A8063F5E760AC11D5F39CF8BC92BCA9661668EF51697F21EC6/0/3138312e3138392e32302e302f32322d3234203d3e20323732303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:95:6d:2d:db:ac:37:35:e8:6a:43:75:79:22:91:9b:3c:cd:
         77:82:f4:a7:c3:0f:77:d4:1d:ee:e9:a1:0a:5b:9d:8e:11:3d:
         86:70:5a:b4:76:53:10:59:93:1d:03:7c:9f:19:95:6a:e8:59:
         3a:6a:40:3a:75:0e:5e:c7:47:bd:0d:a1:36:a6:ae:ed:e7:ed:
         bc:91:4a:1b:98:cd:1f:f9:bf:f9:b5:f7:22:8f:fc:11:51:48:
         d7:06:cd:50:63:15:5c:9f:9c:59:0e:3a:3b:60:db:5c:56:03:
         b1:d8:dc:71:67:69:0e:60:f9:9e:3c:57:ca:05:b5:95:a2:92:
         c6:24:36:39:44:e4:eb:fa:a3:3a:6c:d1:82:d6:d7:03:5a:8a:
         3d:83:09:57:5f:cd:58:fb:09:23:f6:26:8e:7c:da:49:78:91:
         a9:57:a2:44:3c:fe:92:b8:12:86:3b:a3:24:32:4c:51:25:de:
         ea:db:25:28:a9:a0:0b:df:8f:8d:ac:c6:6d:11:bf:bc:4f:2f:
         0b:61:ad:b9:16:92:46:49:ec:17:aa:a3:a3:4d:f4:15:95:90:
         da:ff:cf:0a:13:74:02:04:f6:d6:6e:2c:cc:f1:c0:b1:57:75:
         90:6f:39:ba:43:67:7f:15:05:d3:78:7d:24:1d:9e:b5:0d:79:
         63:6d:dd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----