Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/3133312e302e3133362e302f32322d3232203d3e203631343637.roa
File:                     3133312e302e3133362e302f32322d3232203d3e203631343637.roa (raw, json)
Hash identifier:          OpB7ayqxh5pKyfH16p08x66PKsKIUgsBieuoYbMVQ8s=
Subject key identifier:   23:84:CB:9F:41:7E:3B:A4:1B:B6:AD:57:67:FE:E5:73:2D:C6:33:D3
Certificate issuer:       /CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
Certificate serial:       015BB2175F3E87ACC3F187CF0DB83572E374F896
Authority key identifier: D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/3133312e302e3133362e302f32322d3232203d3e203631343637.roa
Signing time:             Tue 05 Mar 2024 17:58:47 +0000
ROA not before:           Tue 05 Mar 2024 17:53:47 +0000
ROA not after:            Tue 04 Mar 2025 17:58:47 +0000
asID:                     61467
IP address blocks:        131.0.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5b:b2:17:5f:3e:87:ac:c3:f1:87:cf:0d:b8:35:72:e3:74:f8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D308735DCFBD4439F1F61A6179DBE920D86B1E28
        Validity
            Not Before: Mar  5 17:53:47 2024 GMT
            Not After : Mar  4 17:58:47 2025 GMT
        Subject: CN=2384CB9F417E3BA41BB6AD5767FEE5732DC633D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:02:26:78:0a:8d:a0:6e:a3:9e:c4:39:74:58:
                    61:ec:d0:12:e0:11:11:17:91:f9:d1:02:cd:8e:f5:
                    a2:35:51:a3:0a:28:f6:60:8f:66:3e:9e:d0:ef:3c:
                    03:22:bb:6d:7b:10:70:cd:d2:a0:9c:62:ca:b8:a6:
                    b1:06:bf:79:4c:ff:84:52:ce:28:84:5b:3f:c9:d1:
                    14:73:f5:fa:25:e6:32:8e:e6:8a:ad:c0:bb:05:35:
                    92:f6:ee:eb:53:61:67:08:bd:c3:07:20:9b:fb:ee:
                    43:49:1a:e9:f1:cc:6c:21:49:6e:cf:6d:a7:a4:a3:
                    cd:f7:d5:b4:69:94:29:eb:1c:2f:c0:3f:4e:ba:2d:
                    5a:f2:9a:6d:9c:55:ab:97:3b:1d:b2:ed:34:2a:c4:
                    83:06:7a:c8:fd:d9:52:15:55:59:9c:8f:55:e4:19:
                    c2:cb:49:8d:0f:8f:02:dd:8a:cd:78:b0:96:26:f5:
                    bd:1e:6e:08:40:f6:9e:9e:af:7a:ca:ce:62:fe:c2:
                    c2:56:de:57:4b:26:4e:b3:70:50:2a:3c:38:ce:b2:
                    90:49:1b:8c:01:8a:cc:d5:a9:66:98:a7:16:36:31:
                    7e:8d:1d:d0:7b:41:d7:3c:e3:17:25:04:77:ff:0d:
                    34:2f:3c:41:7a:12:d9:01:c1:f5:24:38:93:83:56:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:84:CB:9F:41:7E:3B:A4:1B:B6:AD:57:67:FE:E5:73:2D:C6:33:D3
            X509v3 Authority Key Identifier:
                keyid:D3:08:73:5D:CF:BD:44:39:F1:F6:1A:61:79:DB:E9:20:D8:6B:1E:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D308735DCFBD4439F1F61A6179DBE920D86B1E28.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AF437DD7D11F28C583295F93B9C54CFE98025CADD277A5364BC056749618869/0/3133312e302e3133362e302f32322d3232203d3e203631343637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:39:2d:52:3c:8b:36:2f:e9:cb:74:ca:0f:6a:f9:94:fe:
         2c:7a:b2:33:8c:4d:6b:6e:ed:57:dd:99:07:7b:aa:f2:2c:73:
         ab:74:fa:e1:bc:c5:d7:33:4d:c6:56:e3:ca:98:df:9c:57:5c:
         58:3c:d6:ba:93:1a:47:d8:56:72:53:13:2f:f7:f4:1e:a4:ea:
         96:6d:ae:9c:2e:2e:7f:a5:ed:11:3d:f0:0e:bc:15:53:c8:03:
         7c:e6:04:85:97:3c:ee:3c:b8:3c:67:80:07:5e:8c:b3:d8:ac:
         c0:05:ad:0c:6c:8a:f9:ae:de:6e:4d:66:ae:11:ec:d2:c0:b9:
         e3:5c:bc:8c:f5:af:cc:7f:6f:48:74:2f:aa:93:07:63:e9:72:
         c6:80:cb:31:d7:78:57:f0:29:9e:53:77:bb:7e:b2:8e:d9:7b:
         ff:00:b7:b7:5d:3a:32:35:9c:fc:95:5e:69:7d:c9:4a:4a:fb:
         e0:dd:ef:1b:43:0e:d1:33:bb:58:af:17:d2:15:87:00:df:72:
         1f:d5:49:39:cc:d1:fe:da:cf:37:ba:97:86:1c:08:da:5d:79:
         41:06:79:5d:04:1b:9d:ec:1d:21:12:cc:4f:1d:b0:b9:e6:8f:
         86:86:00:aa:e2:dc:ef:c2:62:68:43:0e:56:3c:b0:e2:2a:7f:
         ec:a0:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----