Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa
File:                     3138362e39362e36342e302f32302d3234203d3e20333934363834.roa (raw, json)
Hash identifier:          UPqDGoTe/x7X05AJC5EGSlTwdLXTw3lzn1fTL7A1uKk=
Subject key identifier:   46:AA:CA:F1:2F:35:C8:B5:51:45:BC:E3:DF:0C:72:92:6A:A3:B6:D2
Certificate issuer:       /CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
Certificate serial:       38E83A85E2B6C5CECDD835DF1E513741D3C8D88C
Authority key identifier: 00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa
Signing time:             Tue 05 Mar 2024 17:51:23 +0000
ROA not before:           Tue 05 Mar 2024 17:46:23 +0000
ROA not after:            Tue 04 Mar 2025 17:51:23 +0000
asID:                     394684
IP address blocks:        186.96.64.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e8:3a:85:e2:b6:c5:ce:cd:d8:35:df:1e:51:37:41:d3:c8:d8:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00C0ACD86F331A95D261959180F50CBCC82F52AB
        Validity
            Not Before: Mar  5 17:46:23 2024 GMT
            Not After : Mar  4 17:51:23 2025 GMT
        Subject: CN=46AACAF12F35C8B55145BCE3DF0C72926AA3B6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:d0:af:68:7c:82:ce:54:a0:f1:86:16:f8:
                    63:a9:23:8d:c9:24:39:c2:3e:72:6a:95:23:ac:21:
                    5d:8f:f7:50:9f:0d:41:db:d3:e0:6c:54:a9:5e:20:
                    1a:ea:8f:12:5f:c4:75:4e:fa:c2:43:73:9e:b3:e1:
                    ec:4f:44:17:5a:74:14:d7:1a:90:a8:36:2f:5a:5e:
                    ca:61:bf:c7:a6:10:95:6e:ba:3f:d0:31:58:47:70:
                    74:58:fe:b7:4e:36:e6:bf:d1:b0:e0:39:5e:9f:7e:
                    d4:ca:89:da:c4:d3:36:10:6a:cd:c3:44:7a:b8:e4:
                    47:c5:fd:38:de:8b:28:15:20:0c:99:fe:84:81:60:
                    fd:65:38:fe:09:d3:04:d2:17:95:13:4e:ce:57:9e:
                    86:3a:72:0e:28:b3:ba:42:3e:2d:99:4b:4e:2d:d2:
                    88:d9:d3:b2:15:0b:ab:58:a5:9a:67:a8:df:09:f0:
                    2f:1b:94:13:60:16:13:f1:49:41:f9:11:6e:02:33:
                    60:57:4b:ca:25:3e:1a:7b:a4:45:3f:fd:6a:12:c8:
                    24:47:e3:6a:eb:dc:cc:5d:83:82:fd:e8:ee:ef:e9:
                    5a:d9:64:93:dd:ee:6e:7d:63:bd:aa:11:86:52:18:
                    d5:8a:87:c3:7e:71:8a:09:45:28:d8:80:4d:50:7f:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AA:CA:F1:2F:35:C8:B5:51:45:BC:E3:DF:0C:72:92:6A:A3:B6:D2
            X509v3 Authority Key Identifier:
                keyid:00:C0:AC:D8:6F:33:1A:95:D2:61:95:91:80:F5:0C:BC:C8:2F:52:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00C0ACD86F331A95D261959180F50CBCC82F52AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/585E16F22B3A513BB6975769CF815AAB853A91127D446D3A0E4CC11562F8BCC9/0/3138362e39362e36342e302f32302d3234203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:37:53:ba:8e:60:8f:e6:c9:9e:89:08:b8:3c:af:de:74:04:
         6e:63:d2:9d:95:d9:e7:01:fa:43:c2:ed:a1:dd:65:5d:05:aa:
         94:56:38:ae:b5:4a:28:f3:db:0a:02:ac:68:55:b3:f5:04:a3:
         3f:dd:e4:56:f8:0b:cb:58:2c:29:cd:20:bd:a2:b1:cb:b6:48:
         07:62:d0:43:a4:a0:94:ac:81:56:6a:5c:c9:7b:64:c0:a5:a9:
         9f:24:1a:41:c2:93:51:25:be:00:6a:8e:e6:c3:81:cf:ba:f9:
         1d:ac:b3:3c:c5:11:9e:19:2c:65:09:5b:cf:64:e5:1b:71:e5:
         f2:ad:e5:d6:22:0d:ce:78:11:f8:ed:04:a0:71:cb:e4:9c:0f:
         8e:e8:e2:bd:95:46:fa:b9:4a:77:41:41:2b:33:13:df:05:9a:
         54:eb:0e:11:f7:0b:63:e6:b6:19:4a:28:b4:28:81:a1:66:14:
         09:6a:d4:52:44:c4:78:38:3d:1b:59:fe:78:84:27:7a:d8:2c:
         3a:77:35:0e:98:7b:01:98:3b:01:8b:84:e0:00:aa:ae:30:48:
         82:37:79:d3:ef:bf:47:8a:a4:3c:0c:fe:19:07:ca:99:75:5a:
         4f:b3:57:b1:1f:0b:df:46:0c:1e:32:ec:2b:52:18:11:d0:da:
         3f:74:04:9f
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUOOg6heK2xc7N2DXfHlE3QdPI2IwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDBDMEFDRDg2RjMzMUE5NUQyNjE5NTkxODBGNTBDQkND
ODJGNTJBQjAeFw0yNDAzMDUxNzQ2MjNaFw0yNTAzMDQxNzUxMjNaMDMxMTAvBgNV
BAMTKDQ2QUFDQUYxMkYzNUM4QjU1MTQ1QkNFM0RGMEM3MjkyNkFBM0I2RDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZdCvaHyCzlSg8YYW+GOpI43J
JDnCPnJqlSOsIV2P91CfDUHb0+BsVKleIBrqjxJfxHVO+sJDc56z4exPRBdadBTX
GpCoNi9aXsphv8emEJVuuj/QMVhHcHRY/rdONua/0bDgOV6fftTKidrE0zYQas3D
RHq45EfF/TjeiygVIAyZ/oSBYP1lOP4J0wTSF5UTTs5XnoY6cg4os7pCPi2ZS04t
0ojZ07IVC6tYpZpnqN8J8C8blBNgFhPxSUH5EW4CM2BXS8olPhp7pEU//WoSyCRH
42rr3Mxdg4L96O7v6VrZZJPd7m59Y72qEYZSGNWKh8N+cYoJRSjYgE1Qf+YfAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQURqrK8S81yLVRRbzj3wxykmqjttIwHwYDVR0j
BBgwFoAUAMCs2G8zGpXSYZWRgPUMvMgvUqswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81ODVFMTZGMjJCM0E1MTNCQjY5NzU3NjlDRjgxNUFBQjg1
M0E5MTEyN0Q0NDZEM0EwRTRDQzExNTYyRjhCQ0M5LzAvMDBDMEFDRDg2RjMzMUE5
NUQyNjE5NTkxODBGNTBDQkNDODJGNTJBQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMEMwQUNEODZGMzMxQTk1RDI2
MTk1OTE4MEY1MENCQ0M4MkY1MkFCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTg1RTE2RjIyQjNBNTEzQkI2OTc1NzY5Q0Y4MTVBQUI4NTNBOTExMjdE
NDQ2RDNBMEU0Q0MxMTU2MkY4QkNDOS8wLzMxMzgzNjJlMzkzNjJlMzYzNDJlMzAy
ZjMyMzAyZDMyMzQyMDNkM2UyMDMzMzkzNDM2MzgzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBLpgQDAN
BgkqhkiG9w0BAQsFAAOCAQEA0TdTuo5gj+bJnokIuDyv3nQEbmPSnZXZ5wH6Q8Lt
od1lXQWqlFY4rrVKKPPbCgKsaFWz9QSjP93kVvgLy1gsKc0gvaKxy7ZIB2LQQ6Sg
lKyBVmpcyXtkwKWpnyQaQcKTUSW+AGqO5sOBz7r5HayzPMURnhksZQlbz2TlG3Hl
8q3l1iINzngR+O0EoHHL5JwPjujivZVG+rlKd0FBKzMT3wWaVOsOEfcLY+a2GUoo
tCiBoWYUCWrUUkTEeDg9G1n+eIQnetgsOnc1Dph7AZg7AYuE4ACqrjBIgjd50++/
R4qkPAz+GQfKmXVaT7NXsR8L30YMHjLsK1IYEdDaP3QEnw==
-----END CERTIFICATE-----