Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203132303636.roa
File:                     3133312e3232312e342e302f32322d3232203d3e203132303636.roa (raw, json)
Hash identifier:          1Hd0k2wpaJ5MrCFMdO4aONEyaf6h+9t5ejmaST8OURk=
Subject key identifier:   0D:29:55:E4:F7:5E:C3:1F:49:8B:8D:E1:EA:45:2E:2A:2A:D0:6D:91
Certificate issuer:       /CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
Certificate serial:       3349978B56CB590865248009FA5613621668B6A8
Authority key identifier: BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 17:52:46 +0000
ROA not before:           Tue 05 Mar 2024 17:47:46 +0000
ROA not after:            Tue 04 Mar 2025 17:52:46 +0000
asID:                     12066
IP address blocks:        131.221.4.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:49:97:8b:56:cb:59:08:65:24:80:09:fa:56:13:62:16:68:b6:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA1555F56F1EE9CECA76B3AD5D23EE829D006D98
        Validity
            Not Before: Mar  5 17:47:46 2024 GMT
            Not After : Mar  4 17:52:46 2025 GMT
        Subject: CN=0D2955E4F75EC31F498B8DE1EA452E2A2AD06D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:bd:fc:98:7a:86:5f:05:31:50:e0:46:a3:
                    4d:f5:df:c4:aa:18:41:ec:4a:e5:53:74:50:8a:ab:
                    18:81:d6:52:98:29:6d:fd:3f:60:58:7f:85:34:3c:
                    84:60:fe:bd:84:a2:77:7e:e0:1e:37:a3:d8:b6:4e:
                    f8:b4:4f:6e:fc:e9:cf:6b:e4:26:88:b3:9e:de:0b:
                    67:64:ba:72:0d:e9:38:30:29:c6:bd:02:7a:6f:69:
                    22:5e:c0:40:6b:9f:31:62:61:1f:6c:24:c7:19:5b:
                    4c:31:0d:0d:e1:ed:9a:6c:19:df:44:46:8c:3d:3d:
                    e7:90:9b:db:49:79:3e:52:4c:81:9d:bb:13:dc:cb:
                    48:6b:01:96:c8:25:e2:78:47:91:c1:a9:1d:7a:8a:
                    8d:b3:18:93:ce:84:89:ce:3a:d2:6d:46:cd:65:51:
                    77:dc:13:9c:83:c8:d0:0d:e6:89:de:76:d2:fe:5c:
                    68:50:e9:d3:49:8f:02:33:93:98:ba:00:7c:1b:e4:
                    3e:c8:0e:33:8b:87:0b:fc:0a:02:24:69:34:af:d0:
                    91:53:1f:80:1e:3e:ad:0d:3f:55:37:2d:2c:a5:5e:
                    65:bb:2e:ab:bc:99:24:bb:5b:61:80:8b:ff:2c:2c:
                    73:a2:56:4b:04:4b:22:38:b4:62:36:7f:72:41:be:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:29:55:E4:F7:5E:C3:1F:49:8B:8D:E1:EA:45:2E:2A:2A:D0:6D:91
            X509v3 Authority Key Identifier:
                keyid:BA:15:55:F5:6F:1E:E9:CE:CA:76:B3:AD:5D:23:EE:82:9D:00:6D:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA1555F56F1EE9CECA76B3AD5D23EE829D006D98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AE7BDDB80FC5E9DE20624E93E7F65668F98B4369CB1616AA475344237A87FF4/0/3133312e3232312e342e302f32322d3232203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:23:f6:62:cd:17:c7:ae:f9:fa:5a:de:81:cc:8e:95:bd:12:
         f0:7a:4a:44:48:69:df:f8:fc:d6:23:04:9e:09:a7:41:25:3c:
         23:c8:6e:fc:80:55:84:9e:07:79:9f:e8:1e:47:59:68:5a:72:
         cc:b3:e1:c0:85:93:55:ae:57:8d:b9:02:76:c5:a5:7a:ce:51:
         10:68:b9:b7:ea:8f:e4:e8:8b:79:43:30:d6:1b:e8:22:9b:15:
         98:2b:d4:d7:65:6f:05:70:fd:4c:3e:8f:b7:c0:9b:b5:17:4a:
         b5:8f:59:04:6b:31:b4:b8:61:19:c6:2c:81:f6:53:99:9a:e4:
         e6:28:b9:55:ae:93:e3:e0:92:ce:81:ff:2c:d8:a5:bc:bf:a1:
         85:46:01:02:77:ab:00:3b:bd:da:1e:b6:24:94:79:1e:b8:f4:
         e8:fe:7f:91:df:34:34:1f:9f:dd:27:d9:db:0f:97:f3:38:01:
         f1:4d:5f:4e:35:34:ae:d1:df:59:6b:57:78:a8:a2:65:d9:14:
         79:3a:05:3a:9a:4e:10:02:06:f1:14:06:15:8f:db:01:c7:b7:
         7f:3e:85:74:80:5e:58:7e:68:f0:a2:4f:69:98:ad:8a:77:27:
         71:0c:73:72:2b:00:ad:a7:b0:2a:44:c2:86:58:8f:d0:bd:fd:
         89:aa:75:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----