Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
File:                     3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa (raw, json)
Hash identifier:          o5O3eiO77y4tySNCyMB89mkO83odpms2xeXxLq9+PYs=
Subject key identifier:   B4:51:45:29:51:65:E1:BE:AD:D3:F7:E6:1C:30:98:4C:5A:8D:05:A5
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       60A4FE95052DD2B375C2C2EA3684C6785BBA252A
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:43 +0000
ROA not before:           Tue 05 Mar 2024 17:45:43 +0000
ROA not after:            Tue 04 Mar 2025 17:50:43 +0000
asID:                     18734
IP address blocks:        189.204.128.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:a4:fe:95:05:2d:d2:b3:75:c2:c2:ea:36:84:c6:78:5b:ba:25:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:43 2024 GMT
            Not After : Mar  4 17:50:43 2025 GMT
        Subject: CN=B45145295165E1BEADD3F7E61C30984C5A8D05A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:d4:83:f6:b4:87:6b:75:78:e5:b7:0e:a6:
                    f1:ae:49:c9:91:b6:6e:89:b7:f2:32:0c:c7:50:bc:
                    a2:e5:6f:55:0d:6a:fb:34:3e:1d:fe:a5:7f:59:2a:
                    9b:bf:c4:4f:3d:10:db:7a:a7:85:ee:d9:f7:80:5c:
                    a1:0b:fe:96:18:65:c6:96:8a:40:49:a1:95:80:83:
                    42:38:07:89:39:76:df:9e:13:76:79:0b:ee:84:d1:
                    49:dc:90:81:07:98:82:e4:1b:ad:9e:1e:d3:9d:ab:
                    8f:f4:52:fc:5b:9c:f0:68:88:38:ea:0b:eb:49:41:
                    b8:ff:a5:eb:5e:82:77:ee:e1:bb:ef:d8:92:47:7a:
                    9d:f7:cb:e1:f0:4e:bc:d1:ca:17:93:59:de:8b:59:
                    e3:fc:dd:ff:2a:07:96:fc:9c:9e:6d:87:06:d1:c9:
                    31:c5:ba:bd:00:1c:1a:86:10:c0:df:b1:7b:53:62:
                    21:b4:65:9f:23:72:2b:3e:4f:94:78:5a:b7:78:6e:
                    cf:f9:06:4c:d5:ad:42:c4:27:94:da:a2:9c:b5:7d:
                    4c:f8:f4:2c:25:68:ed:3e:8c:3e:89:62:94:3b:77:
                    ce:c7:c8:a6:41:a9:80:65:e1:3a:3f:1a:a9:13:37:
                    1d:9c:11:5b:fc:17:9c:1c:ae:fb:e3:cf:77:7f:e1:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:51:45:29:51:65:E1:BE:AD:D3:F7:E6:1C:30:98:4C:5A:8D:05:A5
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/3138392e3230342e3132382e302f31372d3234203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.204.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:ee:f2:02:9a:c6:ac:14:86:33:4b:de:bb:73:c0:6e:84:bd:
         47:a3:4f:4d:fb:5c:f9:e2:1b:24:20:bd:e9:eb:08:aa:c8:3e:
         3d:a6:4d:42:b9:db:cd:14:4b:c2:f1:c9:6d:af:ed:c4:5c:3d:
         8e:01:21:32:a8:fb:25:e2:be:9f:0a:81:8f:e6:fc:81:eb:92:
         33:86:81:c2:ff:84:3d:d4:10:68:21:8b:b7:88:eb:af:5d:b3:
         c0:d5:6b:6b:46:20:d6:ef:1b:24:4d:e1:6d:d3:f5:63:32:be:
         a0:00:aa:fa:8a:4f:a3:0a:c3:0e:4a:bf:f1:c2:ad:5b:49:fa:
         fd:b7:02:07:ff:7c:43:9c:08:8a:da:af:7e:a2:5f:32:73:e0:
         1c:47:9c:7b:63:eb:d8:1f:76:34:c4:33:9a:e9:e8:20:2e:69:
         b8:62:6e:ae:ca:32:dd:96:f9:33:4f:6a:d9:df:ed:6b:16:bb:
         80:98:15:5a:2d:bd:bc:6a:b7:fc:fa:c4:68:8f:4d:46:91:0b:
         ef:0f:03:ee:a6:88:86:36:8b:6a:98:05:2c:e9:fc:d3:c6:7e:
         31:d6:39:eb:61:98:83:b3:1a:e2:24:33:c0:f5:57:ea:94:63:
         68:25:43:36:14:07:0f:df:a8:11:56:3f:f2:38:b1:c0:66:e9:
         8c:63:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----