Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
File:                     3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          EjC1goVG/52B8WVKKZJqY5tBol/0uOL+DxjNd08mqA8=
Subject key identifier:   CD:E3:3B:AD:7C:46:60:AC:86:11:67:52:63:CC:0F:DA:C2:90:76:09
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       51E28C0BCCAE61862166B50B48B1DAB9BDD6C605
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa
Signing time:             Tue 17 Dec 2024 14:25:00 +0000
ROA not before:           Tue 17 Dec 2024 14:20:00 +0000
ROA not after:            Tue 16 Dec 2025 14:25:00 +0000
asID:                     262166
IP address blocks:        168.234.62.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:8c:0b:cc:ae:61:86:21:66:b5:0b:48:b1:da:b9:bd:d6:c6:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Dec 17 14:20:00 2024 GMT
            Not After : Dec 16 14:25:00 2025 GMT
        Subject: CN=CDE33BAD7C4660AC8611675263CC0FDAC2907609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d0:7e:22:e4:23:78:71:9d:95:dc:63:ca:4b:
                    dd:e3:d9:59:4b:a8:88:27:c2:dc:c5:7c:5e:2d:52:
                    5e:6b:a5:d2:9d:4a:d9:46:aa:30:dc:52:20:94:7e:
                    64:b5:72:97:50:bf:1f:fd:5c:9c:bb:02:b0:dd:07:
                    77:1a:a1:37:44:42:fb:7f:42:ef:17:33:a3:81:ee:
                    44:b6:45:1b:a0:11:04:c2:2e:39:bc:d2:38:bc:50:
                    95:95:3e:34:3f:4f:60:3d:03:87:25:90:08:1e:35:
                    af:66:11:22:6b:04:d8:50:a2:29:d9:54:dc:3d:e5:
                    f5:d1:4e:6f:7f:6e:95:c5:73:1e:c7:9d:90:15:41:
                    7a:d4:b6:a6:db:e5:10:97:4e:96:e1:c8:73:50:2b:
                    2c:14:5f:3c:91:e8:5a:24:b5:15:eb:cb:2d:74:d8:
                    22:8b:d4:9d:9b:9e:84:90:56:2e:a6:f3:e6:c8:74:
                    d6:4d:ff:9a:c5:26:fe:48:f3:b8:9d:3a:a4:94:fd:
                    43:d7:36:d9:71:fd:0e:e8:0a:94:48:83:b9:33:77:
                    d9:88:2e:12:ac:d1:ef:da:81:87:2d:91:ad:33:d9:
                    ba:f9:2f:8b:a7:0b:b6:6c:c5:35:73:53:f6:98:d6:
                    df:4b:19:8e:f7:b4:48:30:7d:34:56:b2:74:7a:f6:
                    5c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:3B:AD:7C:46:60:AC:86:11:67:52:63:CC:0F:DA:C2:90:76:09
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e36322e302f32332d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:04:af:41:b3:b6:c4:c7:20:d1:1f:d6:f5:d5:d7:85:6f:62:
         d0:01:11:9e:01:a6:11:bf:86:1a:04:01:aa:83:56:79:d2:0b:
         92:1d:e0:42:81:b9:5b:58:b1:22:ca:7e:3d:d6:35:dd:bd:31:
         02:1e:93:e6:c2:14:51:d7:81:f2:32:a9:dd:ad:7a:4d:89:5c:
         9f:85:dd:4f:ec:80:7c:9a:d0:0c:44:3a:0f:6b:17:b5:3b:fd:
         ae:3a:1a:d3:8d:14:5a:6c:c8:ee:d5:04:43:ab:55:d7:74:a5:
         d6:4a:50:cd:c5:8a:bc:5a:4e:51:d8:b3:3b:f7:bc:61:17:a1:
         21:ba:e5:f6:70:24:5f:de:5e:c1:eb:55:a1:c2:e4:cf:07:f1:
         10:a1:07:e8:c5:9d:8f:fe:09:ba:9b:10:8c:8a:4e:bc:e9:de:
         29:9a:54:cd:a5:e9:f9:dc:ca:33:60:ec:5c:f2:68:68:03:f7:
         8b:43:40:74:e2:16:2f:00:31:d5:79:23:d8:8b:75:e8:27:77:
         a5:f4:29:c2:90:1f:94:de:66:73:5a:7d:8e:b5:5d:d2:0c:ca:
         11:e6:7b:0b:88:51:77:6c:6e:69:d2:40:2a:ce:ce:b7:88:34:
         ca:2c:c4:dd:32:ce:92:c3:84:80:7a:cc:e5:7e:48:7a:84:bf:
         ca:0d:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----