Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa
File:                     3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa (raw, json)
Hash identifier:          xdxpL3EOwSe4LDhmJa+Jp/uvznCW7QGrjVFAi68heMg=
Subject key identifier:   66:5C:24:13:DA:EF:E8:33:F6:D3:B0:5F:6C:57:F7:82:59:52:1B:A6
Certificate issuer:       /CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
Certificate serial:       1B15F6BACA00D36C8726CAA0FB412E71DAD646AD
Authority key identifier: 20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa
Signing time:             Tue 05 Mar 2024 18:11:29 +0000
ROA not before:           Tue 05 Mar 2024 18:06:29 +0000
ROA not after:            Tue 04 Mar 2025 18:11:29 +0000
asID:                     52371
IP address blocks:        186.159.126.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:15:f6:ba:ca:00:d3:6c:87:26:ca:a0:fb:41:2e:71:da:d6:46:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209A4B66D92052DAA8A5358DB465449F02D52BAB
        Validity
            Not Before: Mar  5 18:06:29 2024 GMT
            Not After : Mar  4 18:11:29 2025 GMT
        Subject: CN=665C2413DAEFE833F6D3B05F6C57F78259521BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:0f:ef:76:04:00:3f:55:7b:90:5c:8d:4b:
                    78:a6:61:f9:b0:dd:7f:d4:1b:d4:ae:0c:c2:38:a6:
                    a1:11:34:04:8d:2f:eb:e5:8f:77:c2:4b:c0:be:3f:
                    af:e4:f2:58:71:36:0f:fb:41:7a:83:4d:bf:57:06:
                    57:d5:b9:41:63:b4:62:5d:66:85:b6:29:bd:a8:5d:
                    1b:5b:49:3f:84:32:0a:77:00:4a:05:f5:66:75:e0:
                    3e:f5:bd:06:c0:a4:8b:84:54:44:39:67:8c:85:77:
                    11:6d:cb:72:de:3d:76:60:54:16:02:e6:5c:81:70:
                    3f:81:e7:36:af:14:96:83:95:c5:44:84:91:ba:c8:
                    0a:82:c1:17:ae:70:f8:4c:88:7e:f3:e3:47:51:3e:
                    4b:3c:c3:1f:12:0a:9f:8b:7f:eb:13:e9:45:33:aa:
                    92:c6:37:f4:2d:a7:fd:1d:02:4e:a3:e8:7f:f8:dc:
                    dd:a4:5a:18:43:d0:12:ea:d1:58:8e:87:0e:c1:49:
                    3e:ea:a2:9f:9f:3d:ae:f6:e2:d5:7c:c2:5f:9c:08:
                    a3:cc:c6:f4:23:5e:fb:1f:c3:87:e6:52:06:72:4d:
                    08:64:66:46:45:e1:cc:96:49:3d:f7:a3:dd:b3:75:
                    70:70:3a:3d:9a:6c:04:64:7b:10:cd:11:df:c8:fe:
                    e7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5C:24:13:DA:EF:E8:33:F6:D3:B0:5F:6C:57:F7:82:59:52:1B:A6
            X509v3 Authority Key Identifier:
                keyid:20:9A:4B:66:D9:20:52:DA:A8:A5:35:8D:B4:65:44:9F:02:D5:2B:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/209A4B66D92052DAA8A5358DB465449F02D52BAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5F6B308C36647EBE9E96D1F4A4100BC872D37877B9FC553A7F593FC4F9C2BD67/0/3138362e3135392e3132362e302f32342d3234203d3e203532333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:15:0c:55:5c:e9:6d:87:ea:b8:ca:a5:ef:94:b9:e3:08:ac:
         a3:2f:eb:40:d5:1b:16:a3:50:3c:be:2a:c5:8e:29:06:df:50:
         c9:51:79:4a:9b:d7:4d:ef:cb:cf:2f:99:1c:42:f2:62:ed:8a:
         f1:c7:a9:2a:d4:37:c3:c1:ae:f1:06:4f:7d:3e:52:67:bd:30:
         3a:55:61:4e:ce:fe:cb:21:fa:99:2d:4c:97:c0:49:29:08:78:
         f6:e5:89:7a:38:2a:38:d6:f5:ba:bb:68:56:83:49:21:dc:73:
         72:e4:99:6d:c9:1b:a0:bf:0a:e6:9e:c9:c4:3a:ed:7d:2c:6b:
         ab:ff:f4:cf:73:cd:28:80:71:b2:fc:46:86:b6:a6:55:46:21:
         4a:49:fa:9e:29:78:89:5e:00:d4:ce:e1:84:9c:f9:10:b9:a7:
         70:0a:db:32:0d:51:61:1a:7c:fa:3b:71:e3:e9:1d:e3:fa:aa:
         7a:b8:3e:b0:95:ee:52:e2:89:5a:fa:99:1b:43:d4:5f:26:34:
         8d:d2:7a:3a:28:47:23:f6:49:48:11:a2:4d:4e:3b:c6:b8:96:
         02:c0:12:da:a0:2f:37:d8:59:4b:d6:b3:87:8a:b9:81:f8:fd:
         77:68:c2:53:ea:7c:ed:8b:56:89:42:a5:f9:95:67:cb:57:1a:
         c2:9e:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----