Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa
File:                     3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa (raw, json)
Hash identifier:          kgMse7cyDVrLK+CQDkRBd4GmG211CqgY4Dr2M514uD0=
Subject key identifier:   8E:58:2A:E4:C1:A5:8B:F3:58:8B:0E:CC:E0:DF:1C:F5:F1:43:97:78
Certificate issuer:       /CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
Certificate serial:       233C2B597DDD11A56D591952F4AB528B0124F124
Authority key identifier: 3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa
Signing time:             Thu 04 Jul 2024 21:00:00 +0000
ROA not before:           Thu 04 Jul 2024 20:55:00 +0000
ROA not after:            Thu 03 Jul 2025 21:00:00 +0000
asID:                     270115
IP address blocks:        187.102.228.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3c:2b:59:7d:dd:11:a5:6d:59:19:52:f4:ab:52:8b:01:24:f1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27
        Validity
            Not Before: Jul  4 20:55:00 2024 GMT
            Not After : Jul  3 21:00:00 2025 GMT
        Subject: CN=8E582AE4C1A58BF3588B0ECCE0DF1CF5F1439778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fd:15:a5:51:ba:be:24:a9:a2:da:45:23:a2:
                    99:f3:95:41:f7:00:8d:0a:c9:9b:fd:6b:d4:8d:54:
                    c1:3b:75:11:e6:4c:a4:c6:a9:19:e1:f6:5a:41:9b:
                    d2:1f:70:1d:de:2d:5c:2b:62:66:e6:25:a2:cd:68:
                    a4:d9:3c:7a:c5:61:f3:e2:95:ba:d1:d7:00:e9:83:
                    bf:93:73:32:cf:a6:ba:27:91:40:66:29:e1:d9:54:
                    ed:b0:b2:be:70:23:89:73:e2:3b:16:79:7f:e6:2d:
                    5c:bb:66:7e:65:79:88:90:e5:ce:65:a5:c2:ef:d2:
                    d1:ba:45:be:ed:e6:ce:29:49:e6:c7:cb:9e:82:a8:
                    36:68:97:6d:c3:ae:95:a6:b2:a7:fd:b4:18:cd:18:
                    26:3a:db:ca:c0:dd:eb:9e:bb:b0:c9:f1:a3:a4:96:
                    4b:05:1a:e1:e3:57:03:66:24:b0:0c:66:1f:e0:62:
                    f9:ac:a2:b1:86:d3:a2:3a:f6:a6:f1:3c:78:e6:11:
                    06:9f:f9:c9:70:d4:54:7a:14:97:a7:60:33:56:1b:
                    c8:f4:0d:52:bb:e3:bf:38:75:15:13:15:eb:9b:1b:
                    9f:cd:19:fa:56:a1:a7:84:3e:74:9f:4e:a1:82:6e:
                    68:3a:a7:41:18:87:bf:0e:8b:fa:39:ef:3f:37:2d:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:58:2A:E4:C1:A5:8B:F3:58:8B:0E:CC:E0:DF:1C:F5:F1:43:97:78
            X509v3 Authority Key Identifier:
                keyid:3A:4A:29:DE:BD:59:C7:A0:4E:61:93:A4:2A:5E:FC:3C:24:4B:2D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A4A29DEBD59C7A04E6193A42A5EFC3C244B2D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CAACDBC222D64D49E5C2EBBB7F27F861085890E265B8C651CAF59C725AA7D1E/0/3138372e3130322e3232382e302f32332d3234203d3e20323730313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:4f:29:66:c5:e1:f8:e5:cd:1b:c6:9a:65:aa:76:ee:bc:4f:
         c3:22:0e:c1:6b:54:4e:11:3f:10:fc:e6:04:b5:b5:85:16:d4:
         3d:63:02:5f:6b:3f:ee:04:88:07:e9:46:50:36:63:27:2a:95:
         7e:87:75:1a:4a:0b:d8:11:52:f7:1d:b1:31:4d:86:17:ae:ba:
         8e:57:1a:70:6f:e9:25:ef:fc:9d:2f:40:f8:d1:39:8e:39:66:
         40:cd:d8:4f:04:81:5d:a2:12:a3:a7:28:70:09:c3:20:b6:b3:
         f9:26:f8:a4:16:7c:11:00:9c:ea:34:dc:4c:b6:ce:b7:00:f2:
         0a:ef:f5:1e:cf:bc:76:4a:cf:d3:15:f7:bc:42:77:8a:78:1a:
         61:88:be:8a:df:72:0d:70:92:8f:f0:7a:d9:52:18:5c:ce:b3:
         ff:a1:53:ac:6b:29:e7:a2:1c:a5:44:d8:e4:9c:cb:de:5a:ee:
         b4:1e:40:ba:74:30:2c:12:3b:b1:ec:5e:92:06:70:2d:38:b4:
         f2:69:d3:36:63:09:aa:6e:52:fd:06:9f:33:ba:33:43:f8:0a:
         ab:7d:72:a5:6a:2c:83:d6:bd:0d:ab:8c:02:f6:e3:a3:52:b4:
         45:5b:4c:e2:58:3d:ef:94:c9:ba:fd:cb:53:81:b0:c0:33:99:
         c9:98:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----