Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa
File:                     3134382e3230382e302e302f31362d3136203d3e20323730313439.roa (raw, json)
Hash identifier:          u5zKt9JAN6E78VroW1p4sYRbsn+YIJUrIJdnTa5y2cA=
Subject key identifier:   76:7B:D7:3B:0D:2D:D3:66:19:30:84:59:55:8D:9E:3A:F7:A9:7E:62
Certificate issuer:       /CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
Certificate serial:       72ABA71F05AAB64BCD331A12D1EE0002CA30B014
Authority key identifier: 8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa
Signing time:             Thu 26 Sep 2024 23:50:01 +0000
ROA not before:           Thu 26 Sep 2024 23:45:01 +0000
ROA not after:            Thu 25 Sep 2025 23:50:01 +0000
asID:                     270149
IP address blocks:        148.208.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ab:a7:1f:05:aa:b6:4b:cd:33:1a:12:d1:ee:00:02:ca:30:b0:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB
        Validity
            Not Before: Sep 26 23:45:01 2024 GMT
            Not After : Sep 25 23:50:01 2025 GMT
        Subject: CN=767BD73B0D2DD36619308459558D9E3AF7A97E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:31:27:4e:8e:20:e2:a4:e2:27:0a:1f:78:
                    8f:27:28:2a:41:7d:4b:4a:d8:80:66:03:f4:d4:d6:
                    2a:37:d3:6e:de:15:2f:f7:29:fe:7a:5b:05:f7:a6:
                    70:69:40:76:9f:9a:9c:87:79:cc:c1:e4:38:8f:46:
                    24:da:20:2a:0d:25:f6:db:65:c2:b2:b4:6f:d1:68:
                    3c:23:5d:08:76:1e:a6:91:8f:b3:a2:9b:fb:d9:67:
                    02:ed:b1:2d:cb:0d:ce:ea:3b:d5:ce:35:2d:4f:42:
                    b0:fb:61:67:3f:2e:cf:86:eb:73:75:4c:02:c4:a2:
                    7f:95:43:f4:51:bb:cf:f8:d8:e5:37:17:82:93:27:
                    f1:78:9f:bd:e5:98:33:fe:7d:13:ea:0b:a1:f4:8a:
                    30:20:5a:a0:10:26:e8:2c:0e:c8:0f:96:8c:50:87:
                    d5:5f:b6:88:04:7c:a6:22:79:23:fc:28:0c:68:a7:
                    ab:a6:9e:92:36:af:ad:5b:95:bc:c6:7b:f2:b7:15:
                    d8:49:e3:24:7a:d4:0f:ad:b5:3c:d1:36:2a:fe:31:
                    ec:87:db:a7:00:12:0f:32:80:8c:16:f5:dc:5b:3f:
                    e8:3a:c6:d4:e3:c8:7b:9c:17:a6:b4:a5:ef:62:40:
                    c5:35:1b:5c:55:48:03:9d:5b:09:63:1f:00:79:77:
                    bc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7B:D7:3B:0D:2D:D3:66:19:30:84:59:55:8D:9E:3A:F7:A9:7E:62
            X509v3 Authority Key Identifier:
                keyid:8A:12:67:DC:B4:DC:6F:FA:9F:CD:D7:FE:A9:D7:F9:F7:8C:37:91:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A1267DCB4DC6FFA9FCDD7FEA9D7F9F78C3791DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23B7C697E988C14728015F75AD4BD621755BB39870EA2831B3CD053B988533F1/0/3134382e3230382e302e302f31362d3136203d3e20323730313439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:79:61:c6:b2:b9:cc:4a:c0:bf:05:2d:da:fd:39:54:e9:3a:
         6e:96:17:32:6d:75:7e:74:34:18:2a:46:f0:33:71:bc:2c:41:
         0c:89:cf:72:d8:67:37:4f:2c:39:04:74:ef:75:a7:af:e8:21:
         6e:30:0b:e6:44:72:ae:19:b1:59:ad:65:64:d7:07:f6:a0:03:
         e5:56:ea:fc:f3:d1:7f:9c:b2:26:05:49:a8:d7:45:b9:9b:b6:
         6d:bc:f6:06:41:d8:d4:01:8a:a2:82:70:86:68:12:4e:16:00:
         44:5a:a1:8b:e2:2b:56:28:a5:12:41:e5:0f:b3:15:a6:89:31:
         6d:71:9b:f7:f3:4b:ef:76:ac:d8:59:e3:c9:7f:dc:1f:8c:ea:
         4f:e2:5f:7d:ed:b4:ce:46:db:fd:9a:6d:99:9f:cb:d1:5f:d5:
         7d:07:9f:1e:cb:32:26:7c:b1:c4:00:10:39:27:c0:64:7f:cb:
         57:27:2d:5f:7d:c6:84:cb:9b:8c:fb:fb:83:9f:3a:57:9e:15:
         05:4f:7a:df:fe:81:23:d9:ab:b9:85:54:4b:82:cc:59:88:ed:
         42:31:b9:2d:f6:af:b5:bf:6e:ce:dc:c1:79:f6:e5:da:83:c2:
         6c:1c:b0:a5:97:a8:13:c0:8b:38:67:f6:98:d9:44:36:98:b2:
         7b:42:95:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----