Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa
File:                     3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa (raw, json)
Hash identifier:          QbsVV9ymkZDF5ugByKCVGLcND/CET4YIovdwDVtRd7w=
Subject key identifier:   DB:D4:31:ED:72:38:3D:9B:1A:41:F7:9B:8A:4F:58:C7:03:1E:57:9F
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       3F8F35078C1AD8B0AEF0EBFE0533C5E757A9CB36
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa
Signing time:             Tue 05 Mar 2024 17:59:50 +0000
ROA not before:           Tue 05 Mar 2024 17:54:50 +0000
ROA not after:            Tue 04 Mar 2025 17:59:50 +0000
asID:                     262202
IP address blocks:        186.176.194.184/29 maxlen: 29
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:8f:35:07:8c:1a:d8:b0:ae:f0:eb:fe:05:33:c5:e7:57:a9:cb:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:50 2024 GMT
            Not After : Mar  4 17:59:50 2025 GMT
        Subject: CN=DBD431ED72383D9B1A41F79B8A4F58C7031E579F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e6:d0:e4:bd:c7:05:dc:3d:8d:dd:c1:5f:8b:
                    a0:db:1e:67:4d:d3:72:eb:3e:af:bb:06:dc:4b:96:
                    e1:79:05:89:47:54:71:49:e9:38:39:5d:4f:a3:9d:
                    5f:00:db:4f:57:6e:56:69:c3:37:51:6b:b1:fd:96:
                    56:56:88:47:70:bc:3b:a1:93:04:a3:ff:30:61:d7:
                    81:bb:48:00:2d:e1:8c:fc:a3:ef:43:17:53:92:7d:
                    02:01:6a:4b:cd:60:02:dd:73:5e:2c:f4:06:57:ae:
                    15:b9:1e:2e:d4:83:79:17:37:e8:d3:db:85:5c:64:
                    6d:2c:af:39:c5:fb:99:bc:6d:13:e6:28:36:b8:04:
                    2e:be:4a:f4:f3:ef:50:a8:65:0e:2e:32:81:2d:7c:
                    b5:ae:59:44:7b:69:4e:9b:04:04:9d:3e:1e:83:62:
                    79:38:18:8b:1e:ec:f5:b6:a7:7a:3b:21:ef:a6:7f:
                    9e:54:e0:73:87:a0:75:9f:a7:22:22:4d:32:ff:87:
                    2b:91:f3:57:3c:4d:42:bb:60:67:56:1c:cf:60:a1:
                    4b:67:f9:0d:f7:2d:9a:b8:07:35:3c:47:63:16:f9:
                    94:a7:a3:ff:d4:74:5c:aa:a3:af:e4:9b:1d:62:2b:
                    20:2d:83:c9:60:a5:9c:d1:dc:a7:97:69:c5:8a:f6:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D4:31:ED:72:38:3D:9B:1A:41:F7:9B:8A:4F:58:C7:03:1E:57:9F
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e3137362e3139342e3138342f32392d3239203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.176.194.184/29

    Signature Algorithm: sha256WithRSAEncryption
         46:39:92:63:e9:7b:66:fd:da:00:fc:7d:47:66:ef:cd:68:3a:
         89:45:6d:94:90:03:b0:75:0a:8a:32:f2:ed:9f:45:69:58:3e:
         44:bc:ac:0b:f8:8c:1d:20:48:57:27:5b:4a:e1:64:e2:88:ff:
         88:62:49:1a:b5:f6:b7:9c:30:2c:52:53:06:7a:6b:6a:e7:1a:
         41:f9:3d:0d:ae:59:bb:0a:3f:7f:7c:8c:1e:b2:50:a6:d3:2a:
         dd:76:4e:28:69:f9:2d:0a:14:11:26:0e:1c:75:e0:10:1b:59:
         2a:92:09:dd:f2:bb:85:78:25:0a:56:47:f2:c2:d4:fb:bf:a3:
         27:70:1b:f9:e2:48:3b:ab:ca:dc:c7:7d:85:c6:b5:76:6d:f7:
         38:f6:49:28:87:32:c5:fd:7d:73:0c:a0:cb:6f:05:98:34:c7:
         1a:f2:36:70:a1:6e:56:a3:83:ff:62:17:c1:5d:97:3b:4c:ec:
         7f:48:80:39:f3:14:84:1a:3d:f1:69:14:5f:4e:e8:41:8d:62:
         f9:bf:0d:64:de:15:8a:54:55:88:de:06:84:58:ce:7e:2d:cc:
         76:50:72:f3:3e:18:a9:fb:46:63:63:35:16:95:38:30:a8:6b:
         47:c3:3a:0e:38:a2:70:59:96:14:fe:e8:0f:03:cb:e2:b0:ad:
         71:62:cd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----