Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa
File:                     3139312e3130332e302e302f31382d3231203d3e203238303438.roa (raw, json)
Hash identifier:          R5oqf7D2IJ052E/QMgSOe4CUvb9YamOomBvmtuFSZIc=
Subject key identifier:   4C:71:AF:ED:4F:C1:81:96:36:E2:80:8E:7D:54:E9:E8:00:F6:A5:02
Certificate issuer:       /CN=E545F04AB379D8134DE636206977A39FA5008712
Certificate serial:       3660D461BFEAEC0F68157AEA8BF946C2DF1ED610
Authority key identifier: E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa
Signing time:             Tue 05 Mar 2024 18:04:53 +0000
ROA not before:           Tue 05 Mar 2024 17:59:53 +0000
ROA not after:            Tue 04 Mar 2025 18:04:53 +0000
asID:                     28048
IP address blocks:        191.103.0.0/18 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:60:d4:61:bf:ea:ec:0f:68:15:7a:ea:8b:f9:46:c2:df:1e:d6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E545F04AB379D8134DE636206977A39FA5008712
        Validity
            Not Before: Mar  5 17:59:53 2024 GMT
            Not After : Mar  4 18:04:53 2025 GMT
        Subject: CN=4C71AFED4FC1819636E2808E7D54E9E800F6A502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d1:99:b9:f3:c3:14:9e:4b:4d:67:3c:7f:bb:
                    d5:87:4b:3e:8c:b8:24:06:fe:8f:ad:b3:2c:7b:4f:
                    7d:2d:0d:41:eb:37:cf:69:a3:78:86:f6:69:9f:22:
                    f8:13:4f:e0:80:93:a7:9b:4f:e8:0c:47:73:3c:66:
                    a9:9d:55:c6:b0:01:b0:b1:06:4d:c8:da:b5:7e:dd:
                    29:f8:b0:2d:1e:56:91:c4:a4:90:23:ae:e7:a2:84:
                    a8:5a:13:96:5e:61:92:84:3f:da:df:96:2f:fd:ae:
                    bb:f0:e9:bb:f4:7a:01:03:f8:b8:e0:03:b1:26:7b:
                    17:a4:95:7e:59:ee:5a:a6:70:db:da:70:d1:97:82:
                    f3:a7:79:d0:f8:5b:d5:6b:17:f2:58:9f:69:0a:f0:
                    b9:be:aa:59:08:60:a3:52:b5:d8:6b:66:47:12:d1:
                    46:87:f6:ac:a3:b2:57:6f:eb:c8:90:21:ab:12:93:
                    48:27:cc:bb:06:1c:ca:27:d8:00:26:bc:b0:f4:8a:
                    f0:69:40:ff:a7:e3:aa:ec:68:d4:48:83:82:32:82:
                    b7:a1:7c:b4:bc:17:ed:09:30:d7:37:86:8a:f0:42:
                    0e:b0:8c:7a:40:49:7a:fe:b9:0d:00:02:45:a3:4c:
                    11:1f:25:b3:4e:63:92:a1:bc:71:c5:16:cf:2d:56:
                    c1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:71:AF:ED:4F:C1:81:96:36:E2:80:8E:7D:54:E9:E8:00:F6:A5:02
            X509v3 Authority Key Identifier:
                keyid:E5:45:F0:4A:B3:79:D8:13:4D:E6:36:20:69:77:A3:9F:A5:00:87:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/E545F04AB379D8134DE636206977A39FA5008712.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E545F04AB379D8134DE636206977A39FA5008712.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685D74E7B9DDC4DA6522992D46C0E68F8F7B62FE759C79B27F4D3958F4291EF6/0/3139312e3130332e302e302f31382d3231203d3e203238303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:77:c2:d8:cf:da:4d:1c:85:66:be:4a:40:a3:84:9b:58:de:
         a6:d5:09:21:20:be:77:2b:12:b9:b6:33:f9:b2:39:62:84:c1:
         ed:05:01:54:f2:66:c9:f8:de:20:21:c6:20:9f:2f:d9:e4:70:
         fd:18:7b:0e:ef:33:68:34:bc:5c:84:20:2a:18:75:51:f2:08:
         70:aa:8d:1b:2f:b3:f0:c1:f7:48:31:9f:d9:4d:0d:3f:58:13:
         04:98:cb:a0:93:66:c9:9b:f2:60:42:36:f8:60:e1:c1:cf:48:
         8f:32:a0:03:7f:63:d7:3c:9a:2c:97:e3:28:5e:b3:a4:73:ec:
         89:48:1d:44:b8:d3:12:dc:1d:73:b1:3a:d4:e2:f6:60:a8:25:
         ee:7d:31:8f:da:51:40:20:4f:5b:65:c1:9c:1a:68:12:d6:c6:
         22:99:f0:48:36:ce:ba:63:c4:82:08:cf:0f:3b:c4:9e:de:ef:
         f4:8a:07:a3:38:6d:f3:67:62:57:75:b8:aa:53:44:f3:6c:d0:
         39:37:53:22:41:a7:93:70:3d:f8:69:90:db:9c:5c:18:37:a4:
         1f:c1:f3:75:93:b0:33:af:80:7c:c4:d1:ce:d6:74:49:ac:54:
         a7:20:d6:83:db:cd:e2:d4:a1:21:3e:59:3a:38:6c:93:64:b6:
         f4:7e:0c:eb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUNmDUYb/q7A9oFXrqi/lGwt8e1hAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTU0NUYwNEFCMzc5RDgxMzRERTYzNjIwNjk3N0EzOUZB
NTAwODcxMjAeFw0yNDAzMDUxNzU5NTNaFw0yNTAzMDQxODA0NTNaMDMxMTAvBgNV
BAMTKDRDNzFBRkVENEZDMTgxOTYzNkUyODA4RTdENTRFOUU4MDBGNkE1MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0Zm588MUnktNZzx/u9WHSz6M
uCQG/o+tsyx7T30tDUHrN89po3iG9mmfIvgTT+CAk6ebT+gMR3M8ZqmdVcawAbCx
Bk3I2rV+3Sn4sC0eVpHEpJAjrueihKhaE5ZeYZKEP9rfli/9rrvw6bv0egED+Ljg
A7EmexeklX5Z7lqmcNvacNGXgvOnedD4W9VrF/JYn2kK8Lm+qlkIYKNStdhrZkcS
0UaH9qyjsldv68iQIasSk0gnzLsGHMon2AAmvLD0ivBpQP+n46rsaNRIg4Iygreh
fLS8F+0JMNc3horwQg6wjHpASXr+uQ0AAkWjTBEfJbNOY5KhvHHFFs8tVsGlAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUTHGv7U/BgZY24oCOfVTp6AD2pQIwHwYDVR0j
BBgwFoAU5UXwSrN52BNN5jYgaXejn6UAhxIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82ODVENzRFN0I5RERDNERBNjUyMjk5MkQ0NkMwRTY4RjhG
N0I2MkZFNzU5Qzc5QjI3RjREMzk1OEY0MjkxRUY2LzAvRTU0NUYwNEFCMzc5RDgx
MzRERTYzNjIwNjk3N0EzOUZBNTAwODcxMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNTQ1RjA0QUIzNzlEODEzNERF
NjM2MjA2OTc3QTM5RkE1MDA4NzEyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjg1RDc0RTdCOUREQzREQTY1MjI5OTJENDZDMEU2OEY4RjdCNjJGRTc1
OUM3OUIyN0Y0RDM5NThGNDI5MUVGNi8wLzMxMzkzMTJlMzEzMDMzMmUzMDJlMzAy
ZjMxMzgyZDMyMzEyMDNkM2UyMDMyMzgzMDM0Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa/ZwAwDQYJ
KoZIhvcNAQELBQADggEBAIV3wtjP2k0chWa+SkCjhJtY3qbVCSEgvncrErm2M/my
OWKEwe0FAVTyZsn43iAhxiCfL9nkcP0Yew7vM2g0vFyEICoYdVHyCHCqjRsvs/DB
90gxn9lNDT9YEwSYy6CTZsmb8mBCNvhg4cHPSI8yoAN/Y9c8miyX4yhes6Rz7IlI
HUS40xLcHXOxOtTi9mCoJe59MY/aUUAgT1tlwZwaaBLWxiKZ8Eg2zrpjxIIIzw87
xJ7e7/SKB6M4bfNnYld1uKpTRPNs0Dk3UyJBp5NwPfhpkNucXBg3pB/B83WTsDOv
gHzE0c7WdEmsVKcg1oPbzeLUoSE+WTo4bJNktvR+DOs=
-----END CERTIFICATE-----