Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa
File:                     3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa (raw, json)
Hash identifier:          O9PoZdDdTeqEJASYZheRyukGJ2MPA9mSf0hc0ScvL9Q=
Subject key identifier:   F2:FB:C5:79:C3:50:A0:56:16:ED:46:9E:1A:F1:7D:F9:14:30:D8:CA
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       5E505DE9D955D3271A79A11FC0FDBA36BDF99A6A
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 18:11:28 +0000
ROA not before:           Tue 05 Mar 2024 18:06:28 +0000
ROA not after:            Tue 04 Mar 2025 18:11:28 +0000
asID:                     7303
IP address blocks:        186.159.124.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:50:5d:e9:d9:55:d3:27:1a:79:a1:1f:c0:fd:ba:36:bd:f9:9a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Mar  5 18:06:28 2024 GMT
            Not After : Mar  4 18:11:28 2025 GMT
        Subject: CN=F2FBC579C350A05616ED469E1AF17DF91430D8CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:76:07:45:80:40:da:af:4a:9f:8a:a9:84:
                    b8:9b:8e:44:c9:0d:ab:dc:eb:3d:87:bc:48:de:1c:
                    f5:e9:15:c9:7c:21:5d:62:22:36:b4:96:45:d5:c7:
                    d2:60:97:ce:00:85:87:ec:25:48:a2:ea:72:01:fd:
                    f1:b5:44:0b:53:80:5d:74:a4:b8:2a:34:ba:27:64:
                    8d:b7:b8:58:45:d3:73:41:5d:fe:42:f6:67:57:b3:
                    b9:f9:a0:70:8d:46:fb:d0:f4:7a:ae:75:6f:dc:a1:
                    83:dd:aa:56:b6:c0:67:b7:38:2f:d5:43:c6:f8:38:
                    d6:5e:a1:82:de:50:f6:5d:36:ef:ec:29:7e:2f:d5:
                    9a:2e:2d:19:30:20:0f:0a:cc:79:f7:52:cb:65:8d:
                    24:93:83:00:1d:00:ca:27:62:a2:fe:f2:67:d9:48:
                    05:f9:8d:e8:b1:7b:96:22:9a:ff:ed:01:18:ff:40:
                    74:b1:59:c3:8d:89:9f:43:83:7b:8d:13:86:de:6a:
                    f2:07:28:5e:8b:06:7d:56:fe:1f:ad:b0:b4:d6:3e:
                    83:4b:06:9d:04:03:d7:da:26:16:4d:69:dd:5c:60:
                    c4:75:80:cb:a7:c7:70:0e:5d:31:ed:05:49:86:86:
                    93:84:d2:17:42:06:8a:67:b3:ce:29:ad:2a:13:4c:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FB:C5:79:C3:50:A0:56:16:ED:46:9E:1A:F1:7D:F9:14:30:D8:CA
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132342e302f32332d3233203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:83:5d:9a:4b:5e:a3:4c:8b:4a:61:df:2e:f9:5b:c0:5e:23:
         06:0a:19:4c:b6:24:92:ac:0e:f9:d8:77:5b:d8:60:04:98:9e:
         8b:9d:43:c0:0f:e1:7b:29:42:21:36:b3:72:18:37:7e:25:19:
         3b:da:60:78:8c:26:51:21:fb:8f:e1:0b:fe:63:c3:81:99:6e:
         28:d1:db:f2:0c:c1:e2:da:b5:f1:d2:22:67:57:93:0f:2a:69:
         4d:54:1c:29:b7:f8:97:8a:a6:85:4c:2b:4c:17:c8:58:92:50:
         18:f9:8f:2d:a6:a8:99:18:b4:cd:f3:5a:62:76:a0:1c:15:90:
         af:3d:7a:13:c1:11:d2:3a:8f:5c:15:18:f0:d6:b0:b9:25:7e:
         21:41:3d:85:15:38:33:6f:1d:a9:74:2d:f7:75:df:dd:fe:8d:
         db:6a:e5:26:db:01:13:b1:b7:89:36:e6:3a:27:70:58:86:6e:
         40:c8:82:3c:18:c3:7a:e0:44:63:99:df:1c:f4:83:b3:47:84:
         b0:8a:cf:ff:41:58:be:a4:d0:17:85:7d:31:35:6d:33:80:da:
         37:92:c8:1d:c1:f6:64:c8:de:41:61:e9:1c:f8:0f:28:1a:55:
         42:d7:c5:a6:0b:16:97:01:21:6a:e9:4d:a2:a6:24:2d:0d:e2:
         43:39:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----