Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa
File:                     3138362e33322e36382e302f32322d3234203d3e203237373733.roa (raw, json)
Hash identifier:          hHQg3JuSYGke5auLhodahGMkUcCqeNQKF7XVyiqHi0I=
Subject key identifier:   B6:71:F3:7E:57:4D:6C:49:57:87:87:8B:26:FE:AD:67:55:EF:C2:F9
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       07F9929F1074DC1A0899C6A341DCB2E87C601327
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:28 +0000
ROA not before:           Tue 05 Mar 2024 18:05:28 +0000
ROA not after:            Tue 04 Mar 2025 18:10:28 +0000
asID:                     27773
IP address blocks:        186.32.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:92:9f:10:74:dc:1a:08:99:c6:a3:41:dc:b2:e8:7c:60:13:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:28 2024 GMT
            Not After : Mar  4 18:10:28 2025 GMT
        Subject: CN=B671F37E574D6C495787878B26FEAD6755EFC2F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:39:60:e6:ac:37:47:a4:d8:30:fe:f4:0c:a6:
                    6a:3c:7e:01:78:d5:45:02:9f:87:94:ee:da:ec:67:
                    87:65:e5:a6:d8:19:46:ef:b1:77:53:b2:77:eb:a2:
                    0f:86:80:bf:0b:4e:c4:dc:f1:1c:33:ca:99:84:fc:
                    87:4f:2b:85:95:43:0d:4f:cd:de:ac:0b:9f:f2:91:
                    ac:49:2b:36:b9:25:5e:33:b8:03:9f:07:d1:e4:10:
                    f0:12:52:be:80:46:79:c4:f0:f3:0c:2c:d2:e7:b0:
                    d0:b3:d4:8f:a6:78:c9:a8:90:c8:ac:e0:59:79:d1:
                    98:dc:3d:07:be:95:22:18:2e:4c:d7:4c:cd:4f:dd:
                    2e:79:2a:33:25:29:ec:31:bb:6f:21:49:4a:22:91:
                    98:1c:a9:f3:96:b8:cf:2e:cd:71:36:51:c0:8c:f3:
                    cf:ce:c8:e7:a6:40:a4:46:27:fc:71:ef:08:9c:0d:
                    bb:43:89:b4:0a:9f:1d:af:17:d0:39:d6:88:79:4b:
                    0a:36:00:f6:37:11:d4:89:ac:2d:0c:d8:53:2d:19:
                    87:8e:bb:cf:84:3e:db:44:ea:2a:92:ed:c8:8e:bb:
                    b5:ae:e1:0a:7e:9f:5a:b0:95:08:96:58:04:a6:b2:
                    3d:4e:27:cc:d9:16:6b:2b:c0:7d:aa:5c:cb:03:ee:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:F3:7E:57:4D:6C:49:57:87:87:8B:26:FE:AD:67:55:EF:C2:F9
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e36382e302f32322d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:82:ca:11:ff:24:14:3c:cd:99:2c:31:b2:76:0a:29:62:c6:
         6a:bd:2d:01:02:75:72:9e:df:1a:7f:c6:db:2f:37:d3:f4:f6:
         fe:23:c5:67:23:10:30:ba:65:a3:2f:59:d3:04:11:39:c1:da:
         58:37:89:b7:6e:98:20:c6:a3:fe:90:13:9b:6a:38:8c:1b:f0:
         a6:4e:e1:28:92:25:5b:f5:e4:46:39:1d:d1:dc:e0:68:70:22:
         3b:ea:49:33:1c:a5:92:cc:86:c2:f7:d0:36:87:ac:3d:a9:6b:
         09:09:b3:d5:c9:94:30:aa:c4:bc:b1:4e:40:9d:ed:68:58:ae:
         90:71:71:01:bb:96:35:e7:7a:9a:03:3d:e3:5f:01:90:37:2c:
         b1:bf:63:92:d0:61:9b:c1:7c:81:a1:d7:43:08:ab:61:fc:7e:
         d4:3d:54:68:08:81:9b:1c:9d:33:e3:21:1f:73:69:a2:04:be:
         14:0e:c8:0b:a0:09:f3:10:1b:80:f9:35:8a:42:b6:c3:df:b4:
         b9:51:cd:63:a9:62:2c:ac:4c:68:02:39:0b:92:bc:c7:0b:5d:
         e2:ff:f3:67:8f:9f:51:e6:64:bc:f6:f7:49:dc:5b:1d:3a:36:
         69:c0:0f:86:fe:79:7d:54:74:e5:05:a1:03:47:07:c5:f3:fb:
         60:d7:4b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----