Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e38302e302f32302d3234203d3e203237373733.roa
File:                     3138362e33322e38302e302f32302d3234203d3e203237373733.roa (raw, json)
Hash identifier:          eg2549ItkHN/ZjNRtkGV+cxSEX2gvIaDX/jRQMKBy78=
Subject key identifier:   7F:77:64:72:29:23:FA:B9:EF:8A:1F:75:16:13:10:B2:7E:79:7C:27
Certificate issuer:       /CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
Certificate serial:       1BCC472FBE479DFCD87037067E05E5B1C59FE281
Authority key identifier: 9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e38302e302f32302d3234203d3e203237373733.roa
Signing time:             Tue 05 Mar 2024 18:10:23 +0000
ROA not before:           Tue 05 Mar 2024 18:05:23 +0000
ROA not after:            Tue 04 Mar 2025 18:10:23 +0000
asID:                     27773
IP address blocks:        186.32.80.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cc:47:2f:be:47:9d:fc:d8:70:37:06:7e:05:e5:b1:c5:9f:e2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BCCBD68EB22C37B886D81BDFC8BA77CD7312208
        Validity
            Not Before: Mar  5 18:05:23 2024 GMT
            Not After : Mar  4 18:10:23 2025 GMT
        Subject: CN=7F7764722923FAB9EF8A1F75161310B27E797C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f1:b3:9b:2f:75:8b:bb:1a:bd:4e:0d:34:15:
                    40:95:d5:f6:13:30:84:de:6f:23:8c:f8:71:9e:6b:
                    de:f8:86:23:9d:58:3f:2c:27:67:9a:8b:55:a9:0a:
                    b6:49:aa:ee:eb:fa:f6:d0:d4:0f:9e:12:47:99:a4:
                    2d:89:a4:1b:10:26:5d:66:59:98:0a:e5:7c:09:67:
                    a8:25:0d:f8:0a:17:b5:c6:94:b9:6a:d1:6f:fa:6a:
                    42:28:8f:49:d8:7e:aa:57:7c:cc:93:01:2f:b4:27:
                    6a:a9:69:25:55:7f:02:0a:27:65:e6:93:10:ac:e0:
                    38:16:3a:21:4f:26:3b:02:be:6c:77:f6:7b:1c:56:
                    aa:f3:3a:7b:f4:53:81:d7:8a:40:f2:16:e1:de:87:
                    c2:14:bf:be:18:0e:53:f9:ac:18:11:c7:fd:79:dc:
                    ff:97:57:0f:62:65:27:90:e8:73:3f:3f:43:ff:3d:
                    e5:fd:c1:66:60:0b:e5:56:4e:b1:06:ec:9f:5d:49:
                    ec:42:94:95:0e:81:50:b3:22:3b:26:81:58:35:3d:
                    c4:0f:2a:96:36:2c:a1:28:9a:35:4c:fa:89:71:ee:
                    95:df:8d:5d:aa:d7:d3:cc:f3:af:4f:65:3a:90:d2:
                    36:69:f9:dc:cd:c6:fa:cd:e4:3c:35:92:fe:9a:fc:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:77:64:72:29:23:FA:B9:EF:8A:1F:75:16:13:10:B2:7E:79:7C:27
            X509v3 Authority Key Identifier:
                keyid:9B:CC:BD:68:EB:22:C3:7B:88:6D:81:BD:FC:8B:A7:7C:D7:31:22:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BCCBD68EB22C37B886D81BDFC8BA77CD7312208.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A5F2F87D11786FB3FCADAA043431EB013CDBAD00247EDB7A6502BFFD8B4CC24/0/3138362e33322e38302e302f32302d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:19:06:d4:cb:49:40:4a:9d:57:55:c4:5d:f1:63:09:03:a0:
         1f:c7:ec:5b:2c:78:35:4f:3e:9e:4e:c5:e8:cd:d9:aa:98:7f:
         0a:50:94:e3:1a:49:3c:dd:33:e0:11:52:01:b8:80:c9:76:db:
         fb:b8:c8:73:19:78:31:62:59:c7:34:13:4f:0f:ea:7f:43:be:
         5c:2e:a3:87:1a:64:b0:b1:d1:fa:7b:a0:26:36:b2:af:a6:6a:
         ff:e5:d8:e8:99:91:98:81:0a:7b:b1:92:ec:f4:9f:ce:9a:14:
         70:c9:be:72:4f:99:65:2f:ff:33:1e:00:76:19:8c:1a:fb:df:
         f5:42:69:de:5a:96:d5:66:2e:11:b0:26:da:61:03:d2:89:04:
         5e:bb:4b:66:15:1b:7b:ac:9d:2b:8a:de:bf:bf:17:f3:95:d3:
         a6:68:a8:d4:ec:e5:e0:eb:ec:d6:f4:82:0b:00:92:87:1f:90:
         8a:40:eb:8c:be:34:01:39:0d:f1:ee:9a:07:08:43:ab:c9:41:
         3e:df:20:29:01:95:01:c8:b4:62:70:82:71:93:ef:7c:18:3e:
         8a:7d:f2:fc:d1:7a:c6:ca:66:5d:b7:b9:c4:f0:e5:58:dd:01:
         71:2e:c9:f8:b2:ee:2b:01:91:5c:62:1f:e0:85:06:01:8b:a3:
         35:8e:2c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----