Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
File:                     3134382e3231332e302e302f31362d3136203d3e203135323336.roa (raw, json)
Hash identifier:          rLDBAbJ8fki3EUxvwBKnlIk16QjUhCEA/n4kRZwGY+4=
Subject key identifier:   F3:E2:9B:1C:75:49:D7:78:CA:4D:8E:4A:32:81:FD:86:F9:CA:8B:7B
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       2A58E02267BCD17A17C0FE86611C8F51AE128CB7
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:51 +0000
ROA not before:           Tue 05 Mar 2024 18:12:51 +0000
ROA not after:            Tue 04 Mar 2025 18:17:51 +0000
asID:                     15236
IP address blocks:        148.213.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:58:e0:22:67:bc:d1:7a:17:c0:fe:86:61:1c:8f:51:ae:12:8c:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:51 2024 GMT
            Not After : Mar  4 18:17:51 2025 GMT
        Subject: CN=F3E29B1C7549D778CA4D8E4A3281FD86F9CA8B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:83:28:05:b3:b7:e7:1f:5a:b3:ab:76:de:
                    68:1d:74:99:44:34:9e:41:a9:0b:a5:b8:5d:b8:71:
                    ba:4a:d2:ac:6b:ff:bd:24:6b:93:bb:6c:2a:27:1d:
                    83:54:f3:1b:a1:1e:48:c1:57:cb:dc:1b:34:4b:0a:
                    6e:5d:c2:31:fd:f0:b3:b7:9d:91:07:3c:a3:2c:6d:
                    20:cb:67:f4:c0:01:02:75:56:f3:78:7b:3e:47:e0:
                    2d:82:b8:1d:0f:64:1d:fe:41:2c:d6:01:c0:6b:63:
                    d2:f9:79:fb:73:8c:b2:2a:28:5f:89:09:f3:59:68:
                    d7:58:e4:78:a2:42:2c:6e:e5:06:48:34:5a:07:d3:
                    07:4b:f0:5f:81:76:c6:8e:83:1b:68:d7:a6:23:5b:
                    c1:48:f0:44:b8:35:6f:e5:0a:3e:19:e4:d8:0b:8b:
                    b8:32:f7:6e:f2:e9:99:1a:b7:42:39:e9:e1:7c:0b:
                    c3:10:35:e4:6a:95:6c:9c:a8:9d:e7:e9:ab:21:03:
                    ce:2d:4b:5f:d5:0a:a1:04:5c:cf:eb:b4:8c:f1:76:
                    f8:23:58:84:b3:c9:0e:ab:da:8f:18:e5:e4:f2:bc:
                    14:67:01:35:c0:3d:22:4b:a6:f7:b3:9c:f0:17:3d:
                    b8:76:fd:90:08:ca:8d:c2:bb:2c:bc:fa:d0:6b:db:
                    52:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E2:9B:1C:75:49:D7:78:CA:4D:8E:4A:32:81:FD:86:F9:CA:8B:7B
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e302e302f31362d3136203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:36:b5:36:1c:48:9c:cd:8c:87:52:d0:15:ba:26:49:09:d4:
         43:fc:a1:5a:1f:c8:91:4a:7a:43:01:e8:80:4a:3c:b1:a9:81:
         5c:a2:99:15:5a:bf:02:27:01:5a:95:87:16:6c:10:53:ec:01:
         20:da:3b:7a:f4:e2:a4:4a:8a:f8:4b:38:92:74:c8:3b:1a:e2:
         74:9a:fb:93:e0:2f:7a:49:71:24:3e:52:b9:d9:aa:6d:6e:73:
         ea:e9:f0:01:33:22:7c:a6:2f:5b:3c:fa:7e:b1:bb:05:95:0b:
         2b:53:63:b3:93:e8:6c:fe:13:2f:fc:60:0a:f9:b6:4b:45:0b:
         c4:02:d0:47:c1:a9:04:06:0b:13:24:77:44:9d:29:63:19:56:
         37:32:9d:49:a6:aa:41:3e:f9:0b:40:1a:d1:1e:5b:2c:7d:6f:
         7d:0e:42:f8:e7:71:2b:d9:eb:0f:90:15:b1:81:8d:3b:d7:9c:
         b3:98:ce:41:b4:a7:f8:e8:cc:22:6c:f2:21:fd:0c:81:e4:6f:
         a3:9d:aa:22:04:d2:e0:a6:60:b4:c5:62:83:ca:e4:b3:a3:f2:
         ae:a0:d9:53:32:ac:3f:c9:7b:f8:79:66:3f:0f:9b:01:09:96:
         87:35:3e:c7:c5:69:a1:b1:90:ef:92:1a:cc:b0:f9:51:42:8a:
         6d:42:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----