Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632313937.roa
File:                     3138362e33322e3136302e302f31392d3234203d3e20323632313937.roa (raw, json)
Hash identifier:          eVpVagmvWIMKV7ZcankfjodGh64gJviM/V1Bf15NVuk=
Subject key identifier:   9D:16:82:24:83:2C:9B:3C:D6:D5:D3:D5:8C:E8:96:5B:29:11:ED:38
Certificate issuer:       /CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
Certificate serial:       738AC55390F32218763BC9F320FA9B1DFD8BB42F
Authority key identifier: E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632313937.roa
Signing time:             Tue 05 Mar 2024 17:59:49 +0000
ROA not before:           Tue 05 Mar 2024 17:54:49 +0000
ROA not after:            Tue 04 Mar 2025 17:59:49 +0000
asID:                     262197
IP address blocks:        186.32.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:8a:c5:53:90:f3:22:18:76:3b:c9:f3:20:fa:9b:1d:fd:8b:b4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E
        Validity
            Not Before: Mar  5 17:54:49 2024 GMT
            Not After : Mar  4 17:59:49 2025 GMT
        Subject: CN=9D168224832C9B3CD6D5D3D58CE8965B2911ED38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:54:34:dd:39:b0:03:d2:44:24:7d:c9:91:e2:
                    e1:59:16:f3:b5:bb:be:5c:f9:57:69:73:73:fa:a6:
                    50:e2:5f:ba:e1:14:e0:83:4b:21:b6:8c:18:ff:7b:
                    57:7e:51:46:73:b1:df:52:81:d6:c2:b0:cb:fc:2e:
                    3b:5a:24:a9:61:77:db:98:43:ec:7e:95:ea:4a:c3:
                    7c:0e:03:40:44:3a:26:59:79:7c:6c:83:fa:e0:a3:
                    87:ce:2b:ee:37:3c:62:42:8b:2a:b2:a2:e0:0c:38:
                    16:f3:53:1b:65:87:8b:94:b9:71:91:f9:84:95:59:
                    18:00:46:8e:f6:5c:25:73:96:e4:44:f0:53:d1:5b:
                    9a:1f:a5:1d:12:b0:28:86:c6:73:da:b1:73:2a:87:
                    1f:64:12:c1:c0:8f:f5:58:aa:e2:92:28:27:21:7c:
                    f7:bc:16:d5:ed:49:33:64:75:24:d9:73:8e:d0:f3:
                    58:13:93:de:89:9b:50:75:99:0b:81:e2:7f:11:b5:
                    5a:3c:0b:6c:ca:11:16:17:6a:51:18:91:c5:7d:7b:
                    79:09:e5:fe:de:8e:d6:f5:9d:16:67:f3:53:7e:aa:
                    4f:23:92:52:53:84:ee:cc:45:a8:c1:55:5f:33:44:
                    33:cd:2e:16:a5:d4:c7:da:8c:7c:9c:ce:53:19:6a:
                    bc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:82:24:83:2C:9B:3C:D6:D5:D3:D5:8C:E8:96:5B:29:11:ED:38
            X509v3 Authority Key Identifier:
                keyid:E5:A5:51:0C:7F:CD:96:6E:02:48:6D:32:57:2B:F6:BC:B1:B8:FF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5A5510C7FCD966E02486D32572BF6BCB1B8FF2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52E70868904CEE7BACC48379AA3F2E2693AE13291411C58F339B427F330A98BF/0/3138362e33322e3136302e302f31392d3234203d3e20323632313937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:3a:98:a1:f8:58:d2:7a:ca:46:93:cc:51:d7:e0:08:77:8a:
         aa:2d:c9:13:63:ee:78:1a:57:22:ff:f8:ec:00:17:c1:05:5f:
         df:a1:cf:8d:24:9f:92:01:5e:e0:54:47:e0:fa:ba:19:4a:f8:
         28:3f:cc:15:4e:b1:89:c4:b2:a1:0f:98:f6:12:79:f9:dd:bb:
         b6:1c:16:e8:61:9e:2b:00:7b:f7:d7:98:aa:0b:0c:70:04:6a:
         b1:7c:d2:c9:72:f2:b3:e6:3c:e1:66:4a:0e:3e:9a:93:31:c4:
         ce:6f:de:c0:b8:17:b7:58:d8:bc:d6:14:13:9e:ae:83:1d:be:
         4a:c9:7c:47:49:73:85:b5:c9:c8:19:83:95:d8:b1:b6:2a:09:
         50:98:6e:63:a5:a1:3c:45:c2:3c:2d:76:f1:44:73:97:b0:0c:
         27:6f:96:6e:e2:1c:5b:97:08:6a:1d:a6:76:38:f7:72:fd:27:
         9d:2a:1f:8c:32:ff:fb:a7:39:5e:6a:cb:a0:05:76:f8:70:03:
         1e:07:92:d4:36:b6:b5:20:4b:44:a3:17:06:74:59:55:a0:fc:
         a2:21:7e:22:a2:94:44:e5:99:40:82:d0:54:e8:a1:6d:66:93:
         69:e2:ef:3f:63:a5:a3:5d:72:9c:63:64:be:e0:9c:f2:8d:aa:
         04:49:e1:d6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUc4rFU5DzIhh2O8nzIPqbHf2LtC8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBNTUxMEM3RkNEOTY2RTAyNDg2RDMyNTcyQkY2QkNC
MUI4RkYyRTAeFw0yNDAzMDUxNzU0NDlaFw0yNTAzMDQxNzU5NDlaMDMxMTAvBgNV
BAMTKDlEMTY4MjI0ODMyQzlCM0NENkQ1RDNENThDRTg5NjVCMjkxMUVEMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVDTdObAD0kQkfcmR4uFZFvO1
u75c+Vdpc3P6plDiX7rhFOCDSyG2jBj/e1d+UUZzsd9SgdbCsMv8LjtaJKlhd9uY
Q+x+lepKw3wOA0BEOiZZeXxsg/rgo4fOK+43PGJCiyqyouAMOBbzUxtlh4uUuXGR
+YSVWRgARo72XCVzluRE8FPRW5ofpR0SsCiGxnPasXMqhx9kEsHAj/VYquKSKCch
fPe8FtXtSTNkdSTZc47Q81gTk96Jm1B1mQuB4n8RtVo8C2zKERYXalEYkcV9e3kJ
5f7ejtb1nRZn81N+qk8jklJThO7MRajBVV8zRDPNLhal1MfajHyczlMZarzlAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnRaCJIMsmzzW1dPVjOiWWykR7TgwHwYDVR0j
BBgwFoAU5aVRDH/Nlm4CSG0yVyv2vLG4/y4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MkU3MDg2ODkwNENFRTdCQUNDNDgzNzlBQTNGMkUyNjkz
QUUxMzI5MTQxMUM1OEYzMzlCNDI3RjMzMEE5OEJGLzAvRTVBNTUxMEM3RkNEOTY2
RTAyNDg2RDMyNTcyQkY2QkNCMUI4RkYyRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNUE1NTEwQzdGQ0Q5NjZFMDI0
ODZEMzI1NzJCRjZCQ0IxQjhGRjJFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTJFNzA4Njg5MDRDRUU3QkFDQzQ4Mzc5QUEzRjJFMjY5M0FFMTMyOTE0
MTFDNThGMzM5QjQyN0YzMzBBOThCRi8wLzMxMzgzNjJlMzMzMjJlMzEzNjMwMmUz
MDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFuiCg
MA0GCSqGSIb3DQEBCwUAA4IBAQB7Opih+FjSespGk8xR1+AId4qqLckTY+54Glci
//jsABfBBV/foc+NJJ+SAV7gVEfg+roZSvgoP8wVTrGJxLKhD5j2Enn53bu2HBbo
YZ4rAHv315iqCwxwBGqxfNLJcvKz5jzhZkoOPpqTMcTOb97AuBe3WNi81hQTnq6D
Hb5KyXxHSXOFtcnIGYOV2LG2KglQmG5jpaE8RcI8LXbxRHOXsAwnb5Zu4hxblwhq
HaZ2OPdy/SedKh+MMv/7pzleasugBXb4cAMeB5LUNra1IEtEoxcGdFlVoPyiIX4i
opRE5ZlAgtBU6KFtZpNp4u8/Y6WjXXKcY2S+4JzyjaoESeHW
-----END CERTIFICATE-----