Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e39362e302f32302d3230203d3e203135323336.roa
File:                     3134382e3231332e39362e302f32302d3230203d3e203135323336.roa (raw, json)
Hash identifier:          5lYjIxgxUIp1J09xKlVD0lOsk0B3h8SvEOdD5tL1FHA=
Subject key identifier:   E5:53:70:91:E6:97:C0:DB:3A:E2:1A:ED:41:10:B4:A3:11:1B:DA:37
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       32F62530B35CED30612EEFF9D1F82576B039E9AF
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e39362e302f32302d3230203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:49 +0000
ROA not before:           Tue 05 Mar 2024 18:12:49 +0000
ROA not after:            Tue 04 Mar 2025 18:17:49 +0000
asID:                     15236
IP address blocks:        148.213.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:f6:25:30:b3:5c:ed:30:61:2e:ef:f9:d1:f8:25:76:b0:39:e9:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:49 2024 GMT
            Not After : Mar  4 18:17:49 2025 GMT
        Subject: CN=E5537091E697C0DB3AE21AED4110B4A3111BDA37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:05:1f:7c:51:f0:87:58:4b:b4:19:54:6c:d8:
                    d9:9c:bc:78:f2:10:95:63:cf:be:0e:4a:7d:cf:77:
                    e2:f8:35:f4:f7:2b:7e:86:76:83:35:bb:4a:4a:6d:
                    28:9f:19:5a:14:e1:2d:30:b0:5c:32:b2:5e:54:63:
                    e6:9d:99:45:8e:c6:1c:88:9e:4b:73:a1:75:6c:7d:
                    7b:ef:3c:1b:d0:4d:f8:d8:c3:23:65:55:7d:86:40:
                    05:35:e1:1c:e3:b7:7d:ed:0e:02:9a:12:eb:b5:05:
                    06:13:be:ed:c3:df:a7:f6:82:46:56:de:e2:2b:f9:
                    5d:e3:21:1f:a3:cb:8c:3e:96:50:a1:f7:de:99:8c:
                    ec:67:1b:95:7a:21:62:13:2c:16:0c:a9:3c:f3:9c:
                    09:ff:89:72:49:7a:d2:fd:59:bd:16:81:a3:1e:41:
                    1d:57:cd:f2:16:a6:76:c3:47:6a:30:91:6d:0f:ef:
                    d0:b9:25:1e:91:66:e1:a8:27:09:d6:60:18:54:94:
                    8c:23:45:c4:4d:74:b5:8d:d1:da:13:ee:80:a8:93:
                    ba:27:d3:c4:7f:95:df:96:73:8b:b8:d5:e1:83:c5:
                    a9:30:f5:c0:e2:44:1b:8a:fb:7c:70:4b:c0:55:14:
                    f9:c4:f7:0b:ba:32:f9:b1:11:3d:8e:0c:05:f3:60:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:53:70:91:E6:97:C0:DB:3A:E2:1A:ED:41:10:B4:A3:11:1B:DA:37
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e39362e302f32302d3230203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:f2:63:6b:74:8f:16:0d:d1:17:7c:98:59:56:e1:71:b7:27:
         04:ff:a1:f4:17:5f:de:2f:bf:56:d1:d7:3a:25:d2:de:2a:cd:
         a0:76:62:d9:06:60:ee:8b:45:46:ee:f0:ec:12:f8:d8:70:ee:
         4b:b3:fd:8c:5f:86:91:ee:e5:f5:01:83:e4:0d:bc:80:2c:57:
         d5:29:77:ab:86:73:ad:52:a0:c9:13:24:d6:be:31:75:c6:66:
         6d:1d:c0:b9:77:e0:0a:64:ab:3b:21:af:bf:0a:62:25:b6:ba:
         04:86:d8:4a:da:ca:32:a1:8c:31:dc:32:3f:53:26:cc:27:84:
         47:2a:20:55:13:c8:45:27:96:cf:f6:29:37:77:93:ac:2c:09:
         c4:cb:94:7e:ff:4d:39:75:fa:3f:d7:c2:fb:0f:d7:99:e2:c0:
         ca:eb:43:05:7b:88:ac:34:af:0f:c4:6d:05:f8:2e:6c:6c:32:
         da:ee:4c:7b:28:9d:e2:fb:48:ee:12:e3:7e:bb:60:83:87:4a:
         cf:33:3a:4d:9a:57:e4:37:9d:f7:73:18:4e:a6:18:2c:63:1d:
         42:f1:dd:d6:a7:a2:08:5a:bb:c6:91:e1:5a:ce:7e:4d:33:61:
         31:40:ba:1f:6a:22:41:9c:53:96:f1:db:5c:a2:7c:59:3b:5a:
         81:a2:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----