Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa
File:                     3138362e39362e36342e302f32302d3234203d3e203238303037.roa (raw, json)
Hash identifier:          58T4ikw3/fLRhtWy3CwXxFeYYakeNuuQjzfFkE7dA2Q=
Subject key identifier:   2E:E3:AE:C2:AC:93:66:43:1B:3E:FA:69:A0:4F:F2:89:DE:7C:23:43
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       0242DA8FB97FD124C8F9845FC4CD53805F814218
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa
Signing time:             Tue 05 Mar 2024 17:51:23 +0000
ROA not before:           Tue 05 Mar 2024 17:46:23 +0000
ROA not after:            Tue 04 Mar 2025 17:51:23 +0000
asID:                     28007
IP address blocks:        186.96.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:42:da:8f:b9:7f:d1:24:c8:f9:84:5f:c4:cd:53:80:5f:81:42:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:23 2024 GMT
            Not After : Mar  4 17:51:23 2025 GMT
        Subject: CN=2EE3AEC2AC9366431B3EFA69A04FF289DE7C2343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9a:56:d8:2b:58:d5:98:a6:a9:26:de:06:63:
                    d5:a6:20:c2:0d:b8:d3:ab:87:57:12:9d:7e:b1:a5:
                    bd:0a:1c:49:3a:e8:8d:ca:48:97:28:d1:80:5b:a2:
                    25:ad:52:90:be:0d:be:16:40:03:e3:e6:51:a5:a3:
                    87:86:59:d2:f4:49:04:94:9e:7d:a0:34:07:d5:c3:
                    5a:aa:cb:de:b5:21:58:5b:7e:60:78:39:3c:a5:63:
                    ec:e3:24:e5:4f:e7:c8:98:57:94:d0:58:a3:ae:0a:
                    ed:1e:1c:05:26:81:d5:53:93:1a:6e:c2:d5:47:48:
                    6a:7e:de:89:ad:7a:1d:b9:f3:04:61:32:b0:d8:57:
                    5e:c0:81:b2:34:a2:59:c7:30:38:98:f8:30:77:39:
                    d7:b6:ec:a1:17:40:16:d7:da:db:ea:41:c4:1e:9b:
                    c6:61:c9:a3:77:68:91:2d:5c:b2:2f:a8:de:40:9e:
                    02:8b:7c:cd:55:28:4f:c1:c5:a0:45:35:e4:7d:8a:
                    04:13:45:aa:98:42:f4:25:6d:9a:f7:22:3a:51:9c:
                    7c:82:58:f0:77:e2:9c:16:00:41:63:b0:52:a0:00:
                    9d:66:fb:6f:31:d2:66:c2:18:0b:41:7e:dc:f5:87:
                    2b:c5:b3:ba:f5:8e:dd:9e:62:fe:e1:7f:72:4b:c1:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E3:AE:C2:AC:93:66:43:1B:3E:FA:69:A0:4F:F2:89:DE:7C:23:43
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:93:c9:52:28:f0:d8:95:0a:d3:6b:ad:03:b2:09:9b:7d:
         8b:ff:db:41:6b:ef:4a:5c:e5:ac:6b:17:31:be:eb:1b:d9:ec:
         7c:2e:23:2a:47:11:05:fd:54:32:da:57:67:33:1b:cb:35:24:
         aa:89:89:81:d8:90:c4:d7:72:26:06:17:91:e4:e3:a6:f8:57:
         b4:64:bc:2d:f4:d0:26:2a:93:7d:39:d4:b9:08:ae:47:c9:d0:
         66:0b:7c:0a:de:db:52:c7:89:ba:48:d8:49:e2:a6:3e:ed:3a:
         a0:3d:0d:11:33:76:81:dc:89:be:1e:49:e6:2b:93:6c:cf:5c:
         75:a2:cf:a3:01:00:14:67:e9:bc:c4:ab:19:01:d2:32:f9:ae:
         96:d3:43:a2:b6:a1:7a:90:6a:ee:11:df:3a:14:25:2a:11:5a:
         d1:00:1e:1e:ed:97:8a:c9:e8:3f:05:1f:13:04:6e:23:f6:67:
         c7:82:ed:12:7d:5f:f0:8e:cc:f7:5b:b1:34:11:0a:a0:04:54:
         24:0f:9d:8e:90:42:68:75:7d:34:e0:bb:2b:8e:e9:23:61:5c:
         c4:77:1e:41:f3:93:99:b5:cd:9b:77:e4:ac:2f:53:16:8f:21:
         4f:8f:08:93:b4:a7:02:82:25:a3:dc:b6:ed:f1:0d:40:59:76:
         5b:5d:05:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----