Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa
File:                     3139312e36342e302e302f31322d3137203d3e203236363131.roa (raw, json)
Hash identifier:          saIhOLL47Nn3EmCrHbvtUjPavNEy43EHbW1CldtQi9w=
Subject key identifier:   BD:34:45:7A:A2:F2:AB:59:5A:8A:22:99:BE:3F:CE:D7:7E:EC:C3:EF
Certificate issuer:       /CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Certificate serial:       23D6912E99FB4C37499A46B268477ADC1CAA1943
Authority key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa
Signing time:             Tue 05 Mar 2024 18:01:05 +0000
ROA not before:           Tue 05 Mar 2024 17:56:05 +0000
ROA not after:            Tue 04 Mar 2025 18:01:05 +0000
asID:                     26611
IP address blocks:        191.64.0.0/12 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d6:91:2e:99:fb:4c:37:49:9a:46:b2:68:47:7a:dc:1c:aa:19:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
        Validity
            Not Before: Mar  5 17:56:05 2024 GMT
            Not After : Mar  4 18:01:05 2025 GMT
        Subject: CN=BD34457AA2F2AB595A8A2299BE3FCED77EECC3EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:0e:c1:4d:40:cc:02:23:a9:6a:79:81:7d:
                    3d:e7:21:73:f3:5f:8e:f2:43:ec:53:d1:d1:b3:5b:
                    34:3d:3f:68:37:53:7a:ba:07:1c:56:0a:ee:5a:1c:
                    55:e5:a2:68:3c:1c:2f:68:44:e7:82:38:d6:da:0f:
                    96:6f:9e:91:e3:18:0b:5d:f4:35:8b:9c:94:1a:56:
                    98:57:84:c4:41:6f:e5:a4:c6:7e:9e:7b:ae:ec:f5:
                    f8:b7:4d:cb:a2:9f:df:7f:e1:5a:1f:8e:6c:9f:cd:
                    77:6c:d4:0b:8a:fa:4c:8f:3a:7e:bd:e1:41:a2:06:
                    c2:b3:c4:18:d3:f1:3d:b7:8c:23:15:4c:95:3a:d0:
                    84:ee:c8:54:d9:6a:34:b6:e1:90:e0:69:f4:ee:bc:
                    3d:d5:72:bf:8c:c0:b0:70:54:ff:b5:c6:59:2a:97:
                    7d:85:0f:56:f8:62:70:7c:86:51:30:84:04:c6:07:
                    2e:b6:38:2e:a5:1a:8a:79:45:1b:56:81:68:1f:c6:
                    fe:9f:34:34:f2:18:dc:05:e1:eb:55:9a:0f:ad:04:
                    93:41:77:a2:1b:99:67:c2:ba:b6:40:0e:90:5a:38:
                    b3:51:ff:6c:8b:22:76:74:9c:73:d5:18:77:b4:2f:
                    66:61:31:d6:9b:56:13:e4:cb:4e:c0:c0:c5:93:d4:
                    73:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:45:7A:A2:F2:AB:59:5A:8A:22:99:BE:3F:CE:D7:7E:EC:C3:EF
            X509v3 Authority Key Identifier:
                keyid:43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/3139312e36342e302e302f31322d3137203d3e203236363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.64.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         b0:41:1e:9c:53:1a:23:c5:ae:c7:c0:97:c2:59:35:e6:1e:50:
         e5:40:fc:bd:69:8e:e3:8b:69:5e:3d:67:3f:38:08:6a:02:08:
         91:ec:fa:c6:4c:1c:40:93:00:ff:0b:f2:86:75:90:52:63:25:
         8b:e2:eb:0a:7c:1f:dc:38:9c:26:ba:6a:d1:9d:8f:fc:06:00:
         9d:0b:27:1e:52:01:54:5d:1a:52:03:d5:74:d8:45:18:5e:4e:
         95:65:e0:88:b2:85:b4:2c:61:92:00:eb:ab:fe:78:49:be:60:
         9e:48:e3:64:29:06:98:05:7a:de:39:61:ab:0d:ad:55:27:7d:
         b7:a1:55:13:d5:03:af:5a:b0:ab:fa:bc:6d:85:d8:e1:b9:1b:
         06:09:f4:f2:1c:94:e2:b7:ce:6f:32:f3:54:1b:5d:25:07:c2:
         c1:86:05:60:3d:f0:87:2f:88:a1:48:80:1f:2b:0e:80:bc:b0:
         79:db:58:eb:3c:11:4b:b7:88:26:4c:c6:2c:94:74:30:84:0d:
         b7:2d:9c:02:c2:4a:9b:32:9e:4d:12:c7:87:b2:5c:9a:13:fc:
         bd:7d:f1:c4:a9:96:11:57:d6:cc:b6:43:f0:ad:a3:dc:e2:c2:
         c2:30:04:28:20:07:dd:ca:d1:66:5d:c6:0e:46:b1:01:bb:c4:
         d9:e1:1a:a7
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUI9aRLpn7TDdJmkayaEd63ByqGUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDNGRjFDOEFFMEI0NzU3RTY4RUREMDhBRTFBRUIyQURB
RDg2NTNENTAeFw0yNDAzMDUxNzU2MDVaFw0yNTAzMDQxODAxMDVaMDMxMTAvBgNV
BAMTKEJEMzQ0NTdBQTJGMkFCNTk1QThBMjI5OUJFM0ZDRUQ3N0VFQ0MzRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4fA7BTUDMAiOpanmBfT3nIXPz
X47yQ+xT0dGzWzQ9P2g3U3q6BxxWCu5aHFXlomg8HC9oROeCONbaD5ZvnpHjGAtd
9DWLnJQaVphXhMRBb+Wkxn6ee67s9fi3Tcuin99/4VofjmyfzXds1AuK+kyPOn69
4UGiBsKzxBjT8T23jCMVTJU60ITuyFTZajS24ZDgafTuvD3Vcr+MwLBwVP+1xlkq
l32FD1b4YnB8hlEwhATGBy62OC6lGop5RRtWgWgfxv6fNDTyGNwF4etVmg+tBJNB
d6IbmWfCurZADpBaOLNR/2yLInZ0nHPVGHe0L2ZhMdabVhPky07AwMWT1HP7AgMB
AAGjggLDMIICvzAdBgNVHQ4EFgQUvTRFeqLyq1laiiKZvj/O137sw+8wHwYDVR0j
BBgwFoAUQ/8ciuC0dX5o7dCK4a6yra2GU9UwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MTI0MEU3OTYyQjkzODBBM0U2MjdDOTQ0NDFFQTZCQjJD
Q0EzREIxRDIyRTkzNEI2Q0M5REM1QjYzNUVGNDkxLzAvNDNGRjFDOEFFMEI0NzU3
RTY4RUREMDhBRTFBRUIyQURBRDg2NTNENS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80M0ZGMUM4QUUwQjQ3NTdFNjhF
REQwOEFFMUFFQjJBREFEODY1M0Q1LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTEyNDBFNzk2MkI5MzgwQTNFNjI3Qzk0NDQxRUE2QkIyQ0NBM0RCMUQy
MkU5MzRCNkNDOURDNUI2MzVFRjQ5MS8wLzMxMzkzMTJlMzYzNDJlMzAyZTMwMmYz
MTMyMmQzMTM3MjAzZDNlMjAzMjM2MzYzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEv0AwDQYJKoZI
hvcNAQELBQADggEBALBBHpxTGiPFrsfAl8JZNeYeUOVA/L1pjuOLaV49Zz84CGoC
CJHs+sZMHECTAP8L8oZ1kFJjJYvi6wp8H9w4nCa6atGdj/wGAJ0LJx5SAVRdGlID
1XTYRRheTpVl4IiyhbQsYZIA66v+eEm+YJ5I42QpBpgFet45YasNrVUnfbehVRPV
A69asKv6vG2F2OG5GwYJ9PIclOK3zm8y81QbXSUHwsGGBWA98IcviKFIgB8rDoC8
sHnbWOs8EUu3iCZMxiyUdDCEDbctnALCSpsynk0Sx4eyXJoT/L198cSplhFX1sy2
Q/Cto9ziwsIwBCggB93K0WZdxg5GsQG7xNnhGqc=
-----END CERTIFICATE-----