Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa
File:                     3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa (raw, json)
Hash identifier:          3oXsKU5MehRw5A+R4Z8DpoJQPhmoTNIHhqQi0ujwQ8I=
Subject key identifier:   FD:70:76:65:05:A3:C9:15:6E:1A:01:D7:4B:D7:61:6E:E3:EC:F5:80
Certificate issuer:       /CN=2B13EDB8862C4C138896CE298686EA7A81F6F832
Certificate serial:       554A71175C120E94F51757D74154413D96821B10
Authority key identifier: 2B:13:ED:B8:86:2C:4C:13:88:96:CE:29:86:86:EA:7A:81:F6:F8:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa
Signing time:             Wed 13 Mar 2024 00:05:00 +0000
ROA not before:           Wed 13 Mar 2024 00:00:00 +0000
ROA not after:            Wed 12 Mar 2025 00:05:00 +0000
asID:                     273035
IP address blocks:        168.232.100.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:4a:71:17:5c:12:0e:94:f5:17:57:d7:41:54:41:3d:96:82:1b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B13EDB8862C4C138896CE298686EA7A81F6F832
        Validity
            Not Before: Mar 13 00:00:00 2024 GMT
            Not After : Mar 12 00:05:00 2025 GMT
        Subject: CN=FD70766505A3C9156E1A01D74BD7616EE3ECF580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:59:4a:b6:25:52:d5:40:14:3c:4a:f7:76:92:
                    f3:58:3e:ff:8a:87:19:27:89:ec:49:1e:2f:63:0e:
                    37:b8:81:2d:90:40:0e:ab:68:a2:08:71:81:1c:f4:
                    6a:39:f9:a0:e7:cf:93:e3:cb:e8:4f:e0:b0:7b:18:
                    54:cb:9e:1a:ab:23:ae:1e:ba:21:ad:ff:60:17:30:
                    f8:dc:13:4e:7c:6e:98:0e:81:2e:c3:ff:a6:d9:0a:
                    f8:63:70:03:b8:6f:55:37:38:62:86:04:64:06:2d:
                    11:43:6f:23:ec:f1:52:a9:75:00:5e:32:68:1c:99:
                    5a:19:33:8f:ed:65:78:e2:e8:fc:59:48:cc:1e:8a:
                    fc:43:ea:cc:48:8a:ff:cc:b3:73:4a:61:ff:0b:f6:
                    b9:aa:81:94:94:d4:ae:f4:f0:8e:ae:67:25:57:6d:
                    4c:c2:06:01:bf:75:23:04:30:78:9e:03:e8:c8:69:
                    0e:e9:20:2c:2c:85:49:ed:09:42:ad:44:7f:39:6c:
                    f5:da:f3:f4:4c:e8:80:21:89:7b:46:96:6b:6f:68:
                    e5:0c:04:5f:99:03:09:38:24:12:dc:06:84:41:63:
                    f5:fe:c4:da:9b:0f:f8:e6:48:c8:6e:30:f6:e1:0c:
                    4c:0d:1d:ca:e5:e8:dd:4c:1b:4e:91:41:4a:1c:4f:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:70:76:65:05:A3:C9:15:6E:1A:01:D7:4B:D7:61:6E:E3:EC:F5:80
            X509v3 Authority Key Identifier:
                keyid:2B:13:ED:B8:86:2C:4C:13:88:96:CE:29:86:86:EA:7A:81:F6:F8:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B13EDB8862C4C138896CE298686EA7A81F6F832.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FE7693939F65E813A0A2C750B6DDC79060C6726B72BB3BCE89FFC076E5B8B69/0/3136382e3233322e3130302e302f32332d3234203d3e20323733303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:71:0f:77:e7:fe:a9:80:8e:93:cb:33:ab:e5:7a:77:83:28:
         3e:4f:00:bd:a4:b1:85:0c:cd:3f:9d:65:a2:87:08:ef:af:fc:
         3c:95:aa:79:8a:46:14:38:f8:0e:c2:01:e5:92:e6:3e:15:40:
         80:2e:ec:9c:4c:01:2e:cb:2a:58:2f:44:92:38:0f:75:47:d7:
         6f:0c:5e:fd:38:dc:3a:47:6b:4d:3e:f0:be:4e:1e:00:e1:8e:
         c1:4e:cb:c3:03:54:03:bb:39:08:ed:0e:e7:75:69:3d:d6:88:
         ea:94:fa:4c:6e:ca:34:32:62:fa:11:d7:52:c0:b1:d5:8e:8c:
         78:e9:89:a0:99:83:e3:aa:42:0b:5c:09:72:03:4f:7a:aa:97:
         e0:e3:cc:fa:e6:16:60:1d:78:e6:0c:0f:d6:bc:06:ef:f5:49:
         c3:5e:62:78:48:59:45:2a:59:01:b4:c2:51:7a:51:0f:d1:83:
         73:bf:bc:42:be:63:96:58:45:be:62:8a:e6:85:39:1d:e6:c7:
         70:68:7b:09:22:b7:d3:65:2f:1e:67:4f:9b:30:6c:26:eb:30:
         8e:c3:de:85:55:da:d5:5f:4e:3c:df:65:0e:64:77:4a:09:76:
         21:ce:6e:36:65:df:40:0d:8d:6b:6f:ee:87:5a:66:ad:82:98:
         bf:42:aa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----