Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e2037333033.roa
File:                     3139312e35322e3230382e302f32322d3234203d3e2037333033.roa (raw, json)
Hash identifier:          fn9AUNB8QiOcuH425FW3dQ0SJew6WlhXRCysyk0KoXo=
Subject key identifier:   98:58:B5:41:23:69:03:EB:FE:87:04:7A:CF:18:E8:3B:42:2C:72:87
Certificate issuer:       /CN=BFFF9ED422983457E784A1C5DF441797B00B1886
Certificate serial:       439FD2DD1B72607E9A348C40CD5288EACA75C843
Authority key identifier: BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e2037333033.roa
Signing time:             Wed 07 Aug 2024 17:05:00 +0000
ROA not before:           Wed 07 Aug 2024 17:00:00 +0000
ROA not after:            Wed 06 Aug 2025 17:05:00 +0000
asID:                     7303
IP address blocks:        191.52.208.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:9f:d2:dd:1b:72:60:7e:9a:34:8c:40:cd:52:88:ea:ca:75:c8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFFF9ED422983457E784A1C5DF441797B00B1886
        Validity
            Not Before: Aug  7 17:00:00 2024 GMT
            Not After : Aug  6 17:05:00 2025 GMT
        Subject: CN=9858B541236903EBFE87047ACF18E83B422C7287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:75:8f:56:a4:bb:1b:28:12:47:22:40:ba:85:
                    c9:9f:a8:07:d3:dd:f0:52:da:1f:c2:6e:b5:27:61:
                    aa:e7:27:46:63:e2:8f:c5:f9:74:dd:9d:d7:02:69:
                    2a:75:fa:bf:73:de:b4:cc:25:98:d1:ea:d5:3f:6c:
                    4f:8c:cd:e5:3a:a2:b7:a3:e7:f7:92:37:e1:fc:01:
                    16:70:50:ac:0b:5a:6a:4b:dc:20:1b:b0:bb:63:ec:
                    3c:ca:52:69:64:b3:e2:74:f6:d7:6f:cc:a4:a3:19:
                    39:0b:39:1c:01:9e:24:04:e8:12:ff:99:98:16:7d:
                    77:7c:82:cc:d6:ba:e2:99:a3:f0:1d:a7:41:96:3b:
                    19:f5:3d:b0:94:04:0e:5a:42:90:af:c3:33:7d:13:
                    4f:ce:dd:f0:66:58:e9:90:67:db:8f:ca:b5:0e:04:
                    7b:f8:c4:2e:50:68:57:1e:93:40:a6:bd:a5:5c:b5:
                    07:34:41:87:fa:eb:34:70:38:b6:c1:b6:c9:f2:1b:
                    64:9a:b1:cf:cf:3f:47:cd:8b:86:c7:fd:e2:66:06:
                    83:5b:94:ba:27:c9:18:9f:db:69:f8:44:c9:14:86:
                    6b:ef:1f:ae:2e:fa:d7:4d:db:3b:32:1d:2e:71:c8:
                    b4:f7:dd:95:a6:31:8c:68:7c:48:c6:ec:c1:df:af:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:B5:41:23:69:03:EB:FE:87:04:7A:CF:18:E8:3B:42:2C:72:87
            X509v3 Authority Key Identifier:
                keyid:BF:FF:9E:D4:22:98:34:57:E7:84:A1:C5:DF:44:17:97:B0:0B:18:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/BFFF9ED422983457E784A1C5DF441797B00B1886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFFF9ED422983457E784A1C5DF441797B00B1886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/406B1063718A61AE561DB18A870F583D14D6513C99E94DC14F47D6DBFBBC0A2C/0/3139312e35322e3230382e302f32322d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:49:8f:f6:21:7b:7c:20:88:82:0c:cf:51:27:38:4b:ac:2f:
         97:97:30:38:08:b7:ce:ed:14:3c:9e:62:94:ff:1f:f2:7b:f8:
         91:3b:f8:56:39:76:7e:0c:f3:7c:f9:5f:09:32:97:8d:f3:31:
         7a:bb:ac:ff:f3:9f:8e:66:46:b3:69:cd:a2:00:a0:94:da:39:
         f4:df:08:0a:21:66:c0:b9:7d:99:a4:a7:c0:c0:53:8b:1e:e6:
         d0:66:0e:bf:3e:e6:7b:5f:cd:7c:bd:50:47:fe:88:eb:24:b3:
         47:bc:ea:16:19:d0:dd:d2:26:29:95:fa:18:03:75:21:02:34:
         8c:94:48:32:eb:5e:fd:f9:19:bf:3f:60:7c:9b:ce:dd:4c:cc:
         45:93:aa:ed:c7:ba:58:4e:b4:3a:9c:75:33:01:4c:96:61:5f:
         ad:ca:21:8d:5f:36:d5:00:73:84:52:2a:a2:e3:1f:aa:01:b6:
         10:8d:24:5f:33:65:a6:2e:fe:09:da:12:d4:0a:53:c2:a7:a8:
         61:0e:5a:97:79:44:05:af:ad:85:f4:a0:4f:65:2c:98:9e:5c:
         d3:74:51:8d:b8:c3:74:3a:ba:9e:ba:bd:3c:08:ba:94:21:3d:
         6d:87:ce:ea:bf:93:88:b2:57:ba:ab:10:cc:1e:d2:4e:f4:b4:
         20:c0:0d:1b
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUQ5/S3RtyYH6aNIxAzVKI6sp1yEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkZGRjlFRDQyMjk4MzQ1N0U3ODRBMUM1REY0NDE3OTdC
MDBCMTg4NjAeFw0yNDA4MDcxNzAwMDBaFw0yNTA4MDYxNzA1MDBaMDMxMTAvBgNV
BAMTKDk4NThCNTQxMjM2OTAzRUJGRTg3MDQ3QUNGMThFODNCNDIyQzcyODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dY9WpLsbKBJHIkC6hcmfqAfT
3fBS2h/CbrUnYarnJ0Zj4o/F+XTdndcCaSp1+r9z3rTMJZjR6tU/bE+MzeU6orej
5/eSN+H8ARZwUKwLWmpL3CAbsLtj7DzKUmlks+J09tdvzKSjGTkLORwBniQE6BL/
mZgWfXd8gszWuuKZo/Adp0GWOxn1PbCUBA5aQpCvwzN9E0/O3fBmWOmQZ9uPyrUO
BHv4xC5QaFcek0CmvaVctQc0QYf66zRwOLbBtsnyG2Sasc/PP0fNi4bH/eJmBoNb
lLonyRif22n4RMkUhmvvH64u+tdN2zsyHS5xyLT33ZWmMYxofEjG7MHfrwbTAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUmFi1QSNpA+v+hwR6zxjoO0IscocwHwYDVR0j
BBgwFoAUv/+e1CKYNFfnhKHF30QXl7ALGIYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDZCMTA2MzcxOEE2MUFFNTYxREIxOEE4NzBGNTgzRDE0
RDY1MTNDOTlFOTREQzE0RjQ3RDZEQkZCQkMwQTJDLzAvQkZGRjlFRDQyMjk4MzQ1
N0U3ODRBMUM1REY0NDE3OTdCMDBCMTg4Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CRkZGOUVENDIyOTgzNDU3RTc4
NEExQzVERjQ0MTc5N0IwMEIxODg2LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA2QjEwNjM3MThBNjFBRTU2MURCMThBODcwRjU4M0QxNEQ2NTEzQzk5
RTk0REMxNEY0N0Q2REJGQkJDMEEyQy8wLzMxMzkzMTJlMzUzMjJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzczMzMwMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK/NNAwDQYJ
KoZIhvcNAQELBQADggEBABtJj/Yhe3wgiIIMz1EnOEusL5eXMDgIt87tFDyeYpT/
H/J7+JE7+FY5dn4M83z5Xwkyl43zMXq7rP/zn45mRrNpzaIAoJTaOfTfCAohZsC5
fZmkp8DAU4se5tBmDr8+5ntfzXy9UEf+iOsks0e86hYZ0N3SJimV+hgDdSECNIyU
SDLrXv35Gb8/YHybzt1MzEWTqu3HulhOtDqcdTMBTJZhX63KIY1fNtUAc4RSKqLj
H6oBthCNJF8zZaYu/gnaEtQKU8KnqGEOWpd5RAWvrYX0oE9lLJieXNN0UY24w3Q6
up66vTwIupQhPW2Hzuq/k4iyV7qrEMwe0k70tCDADRs=
-----END CERTIFICATE-----