Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e302e302f31372d3234203d3e203532323238.roa
File:                     3138362e31352e302e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier:          grucQhfSYa+wPtGivV31BX53rL25mwqiZNEglj2nE0I=
Subject key identifier:   3A:B0:5A:67:06:0E:25:8C:7F:AE:2E:96:49:59:8C:C9:5C:8C:5C:2B
Certificate issuer:       /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial:       48C4E417FB81E19DC06B8DE9D8D156DA39BEDB76
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e302e302f31372d3234203d3e203532323238.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     52228
IP address blocks:        186.15.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c4:e4:17:fb:81:e1:9d:c0:6b:8d:e9:d8:d1:56:da:39:be:db:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=3AB05A67060E258C7FAE2E9649598CC95C8C5C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:7a:5f:93:b9:c8:f1:e4:c1:b8:1a:80:7b:
                    9a:32:12:b2:ab:15:b9:ac:10:78:35:61:ce:c0:f6:
                    e8:39:4d:f5:0b:7d:21:a6:7c:6b:35:d2:84:75:a5:
                    2b:71:83:be:3a:68:f7:a3:75:d0:ba:81:e5:08:43:
                    21:82:66:c4:43:40:da:11:fe:dc:fd:f3:2b:1e:a3:
                    44:2d:8d:86:5e:e2:75:7f:ae:04:e3:ad:be:d9:86:
                    04:a2:6c:3f:e7:b5:b5:6f:7e:87:b4:96:43:52:9b:
                    a6:03:83:34:34:cc:00:b8:da:79:3d:b3:bf:c2:df:
                    ba:c9:d3:83:b7:d1:dc:2a:dd:fe:7a:6d:32:49:b6:
                    81:32:a5:04:4e:f5:76:13:0c:6a:64:a6:eb:16:96:
                    43:ca:ec:3c:40:ea:5d:1d:e7:04:73:84:e5:79:5e:
                    c7:73:cf:57:a1:bb:9a:2a:49:a9:e1:07:3d:3f:ae:
                    61:6b:92:81:be:6b:0e:b8:62:24:1d:48:4c:5e:b6:
                    06:e8:77:5d:29:01:c8:27:81:17:87:e2:2b:ef:25:
                    49:d6:00:1d:13:c2:18:f0:c8:33:02:2b:97:72:20:
                    3f:f6:2c:97:89:e1:9d:f0:9e:7f:f2:a9:d8:80:e2:
                    39:32:18:62:ad:94:40:f4:5c:d5:53:18:f4:53:32:
                    05:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B0:5A:67:06:0E:25:8C:7F:AE:2E:96:49:59:8C:C9:5C:8C:5C:2B
            X509v3 Authority Key Identifier:
                keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3138362e31352e302e302f31372d3234203d3e203532323238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.15.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         31:10:c0:09:84:69:27:61:f0:01:8f:df:c7:9e:c6:d7:02:6a:
         85:4a:a5:66:53:59:6c:1b:15:f9:ef:3c:d1:ef:aa:3b:41:46:
         f0:00:70:7c:a1:8f:56:09:21:53:6c:55:3a:46:74:e8:79:3f:
         28:fe:7f:47:5f:41:b1:97:cc:8f:ec:8b:de:ab:d2:39:1d:69:
         2b:af:d2:3a:71:30:75:47:1f:2e:ee:55:3a:02:77:f6:c7:79:
         54:e2:8c:02:7a:72:3e:3c:0b:15:f1:e6:71:79:5a:66:66:73:
         6e:17:d6:7d:e8:e8:fc:87:83:ec:48:67:ae:25:aa:a9:7f:61:
         0f:16:c4:8c:cb:79:dd:e9:b1:35:57:90:c5:f5:b3:e3:5f:77:
         73:31:70:d9:22:7a:51:0f:f8:e5:67:45:2e:6b:ef:38:ef:f1:
         b7:87:97:fc:01:68:37:d0:22:3b:d3:45:58:76:b2:4f:10:b1:
         a5:97:05:ba:8d:44:26:fd:32:c9:c5:d8:c4:50:32:10:e8:dc:
         8b:d3:d2:f8:9f:46:e7:d0:06:09:9e:2f:48:25:f7:50:35:39:
         0b:f3:84:11:ea:a2:c8:f8:00:39:e8:d6:dc:9f:95:ac:82:54:
         ee:b8:c4:fa:ac:26:32:8c:80:ec:3e:c3:27:72:b0:50:9c:3e:
         30:20:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----