Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3134382e3136302e302f31392d3234203d3e20323632313836.roa
File:                     3138362e3134382e3136302e302f31392d3234203d3e20323632313836.roa (raw, json)
Hash identifier:          eoBrF3FFCMlj+jBCGJGS9FUj8lfCdn+7bEchFW/LwFE=
Subject key identifier:   8B:4B:50:03:29:AA:03:0E:F5:D1:D7:CB:74:A0:78:5F:B9:6F:30:7B
Certificate issuer:       /CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
Certificate serial:       4AC013E9622EB6C2349B164D5F8553E12205F5BE
Authority key identifier: 81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3134382e3136302e302f31392d3234203d3e20323632313836.roa
Signing time:             Tue 05 Mar 2024 18:11:08 +0000
ROA not before:           Tue 05 Mar 2024 18:06:08 +0000
ROA not after:            Tue 04 Mar 2025 18:11:08 +0000
asID:                     262186
IP address blocks:        186.148.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c0:13:e9:62:2e:b6:c2:34:9b:16:4d:5f:85:53:e1:22:05:f5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81D6C23F88D2D34992A43FAB01EF5A5B04037BAB
        Validity
            Not Before: Mar  5 18:06:08 2024 GMT
            Not After : Mar  4 18:11:08 2025 GMT
        Subject: CN=8B4B500329AA030EF5D1D7CB74A0785FB96F307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:02:91:8d:8e:08:9a:0c:37:41:b6:31:ab:fb:
                    d7:42:8c:e5:89:b9:5a:e2:47:09:d0:65:a5:60:bb:
                    12:c7:86:85:48:5a:3a:d2:6f:d5:5f:6e:3d:be:0c:
                    dc:9b:78:07:79:81:b4:d2:66:f7:08:58:64:ac:df:
                    26:ee:3f:d8:34:6d:1a:38:04:e9:2a:81:70:84:88:
                    5c:91:e1:c0:4d:e0:b9:25:63:cb:f7:7b:ab:7a:a0:
                    04:4d:5e:1b:f1:21:3b:1d:e3:49:6b:f6:cd:a5:bb:
                    2e:f5:6f:b2:7c:ce:3c:58:7d:fa:df:f6:5f:1c:c9:
                    2e:31:e2:a5:1a:c4:03:d6:3a:4e:c7:00:7b:06:49:
                    15:af:1e:c1:58:55:c7:a1:5c:f0:27:d2:6d:11:9d:
                    83:fb:03:0a:9f:7e:a0:11:7d:20:df:dd:ba:4c:e0:
                    66:7b:25:66:87:b7:6d:10:65:95:fa:f4:5a:84:fe:
                    38:7b:9e:1f:07:a2:24:c6:e7:1e:99:91:b1:8a:32:
                    8a:d4:b6:8d:a4:fc:79:7e:63:66:9e:8b:23:f3:86:
                    97:63:b1:cc:08:6e:4c:8a:87:52:d9:62:af:95:84:
                    29:54:bb:b9:c0:31:57:1c:3b:15:2d:09:83:8f:de:
                    71:2d:66:67:c9:78:e1:e6:b6:72:24:f5:56:38:e1:
                    de:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4B:50:03:29:AA:03:0E:F5:D1:D7:CB:74:A0:78:5F:B9:6F:30:7B
            X509v3 Authority Key Identifier:
                keyid:81:D6:C2:3F:88:D2:D3:49:92:A4:3F:AB:01:EF:5A:5B:04:03:7B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/81D6C23F88D2D34992A43FAB01EF5A5B04037BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46FE705F6DDBD162B8DEDBA9935386FCFF6B2A810DBF8C7F333E276285B9CF0F/0/3138362e3134382e3136302e302f31392d3234203d3e20323632313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:85:7c:72:6b:07:d9:eb:22:cb:4a:32:aa:cf:07:f5:6c:9f:
         4a:84:d9:c9:cd:6a:74:3d:20:41:00:93:90:42:75:26:67:04:
         9b:6c:58:da:79:e8:00:43:93:d8:f2:cc:14:01:91:48:9e:05:
         dd:c1:3a:c4:35:e5:d1:85:03:65:de:4e:85:39:bd:d2:d1:f6:
         42:98:32:e5:24:4d:bc:68:e1:41:1d:f0:67:a0:c5:09:be:f7:
         b3:c2:7c:f5:e5:eb:66:f9:13:96:1a:f6:16:7b:04:a3:81:88:
         db:cc:8d:b4:30:20:5c:e6:f0:5f:70:87:ca:fe:d6:7b:59:b9:
         45:d8:5e:49:48:1b:38:86:07:d2:0f:21:12:fc:7e:2e:95:db:
         25:1a:12:12:84:5a:11:30:67:00:b6:a2:c3:7a:a1:91:1f:41:
         67:1b:20:0c:fb:0f:7f:6a:61:e1:d3:ea:6b:7c:ab:b3:fb:eb:
         cc:59:2b:c3:6a:59:5c:5c:19:fe:e8:6e:3c:38:96:ab:ae:db:
         01:42:49:6a:ca:fc:49:3f:9d:8a:2d:0f:6e:c8:ed:f5:4a:be:
         f2:7c:ad:70:d3:10:75:1d:7e:7f:30:e8:60:35:0f:65:1e:1d:
         d4:71:40:0c:cc:5e:b4:df:f4:e0:66:ed:5f:5d:f9:76:6e:80:
         5e:39:53:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----