Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e382e302f32332d3233203d3e203332303938.roa
File:                     3138372e3235312e382e302f32332d3233203d3e203332303938.roa (raw, json)
Hash identifier:          OQIkaGxRA681QZtMlAfqg+LiFyPDPsOWkTRXgNX9LQs=
Subject key identifier:   A9:7D:A7:DD:8A:8C:16:3B:0E:58:45:CF:64:22:4E:5B:73:1A:4A:D6
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       2991E40B3B4DD696003BB362568A29E44027E336
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e382e302f32332d3233203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:49 +0000
ROA not before:           Tue 05 Mar 2024 18:12:49 +0000
ROA not after:            Tue 04 Mar 2025 18:17:49 +0000
asID:                     32098
IP address blocks:        187.251.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:91:e4:0b:3b:4d:d6:96:00:3b:b3:62:56:8a:29:e4:40:27:e3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:49 2024 GMT
            Not After : Mar  4 18:17:49 2025 GMT
        Subject: CN=A97DA7DD8A8C163B0E5845CF64224E5B731A4AD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:74:5b:fc:e7:d8:22:03:81:d8:cb:db:93:
                    91:ca:f0:a9:f4:9c:51:e3:5e:a7:37:33:1d:9d:fc:
                    f1:e9:3b:ac:8a:88:cb:a2:21:b5:0e:b4:56:a5:33:
                    9b:25:01:7d:87:4c:cd:b7:09:6b:77:e5:5c:0b:02:
                    cf:d9:9d:76:48:22:87:13:57:23:db:7e:3c:1c:3b:
                    ca:f8:2c:14:9e:59:ef:75:7a:fa:49:45:94:db:aa:
                    09:d1:1d:0f:2f:68:f3:7c:2c:63:b1:fb:79:26:16:
                    04:a3:12:63:05:e3:4f:59:4f:05:3a:a9:73:f9:b0:
                    a4:27:02:df:7a:ea:f6:5c:76:25:66:68:9a:7e:5c:
                    c2:92:91:ba:7c:05:33:c1:d2:6b:a4:91:74:08:a8:
                    e4:cf:1b:c9:f6:bc:e4:dd:da:f4:31:68:f4:32:24:
                    c4:df:7d:ae:72:75:88:53:ec:01:ef:8e:b9:4b:08:
                    af:65:01:71:92:de:91:12:7e:c6:f6:f7:c2:a7:50:
                    78:65:ec:84:09:b7:22:25:8b:02:63:a4:f4:56:24:
                    96:63:f0:76:94:36:2a:37:87:94:d1:40:e0:b4:c8:
                    64:02:9e:45:b0:50:b5:94:da:87:73:cb:f0:6c:55:
                    ec:89:fe:95:e0:ec:71:ca:08:f7:e9:29:1e:c3:d2:
                    70:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7D:A7:DD:8A:8C:16:3B:0E:58:45:CF:64:22:4E:5B:73:1A:4A:D6
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3138372e3235312e382e302f32332d3233203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.251.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:f9:ef:17:7d:c1:08:5d:17:d7:90:e7:ad:be:49:9d:b8:ec:
         16:63:d8:1b:6c:50:77:22:a9:96:72:f5:9e:ed:98:aa:07:d2:
         d8:e5:ee:db:62:e5:f5:4f:9b:e3:aa:06:c4:78:2d:34:60:0a:
         6a:53:92:ca:e5:12:36:7b:11:fc:ad:b6:80:8b:76:46:46:14:
         80:49:95:99:d5:e1:57:f9:fa:89:59:66:65:d4:b0:77:0f:10:
         63:83:45:39:08:35:fe:ea:0d:24:73:59:15:81:07:55:dd:c3:
         c3:36:06:be:7c:ac:4b:c0:56:57:d4:36:ee:8b:a6:27:a5:a1:
         34:2b:47:0c:9b:b3:23:02:42:4b:38:ab:0b:19:03:55:19:ee:
         b7:d0:f6:f1:2a:a2:97:47:a7:da:c2:c6:45:79:af:7f:e1:53:
         ef:b1:6e:62:a3:cd:b1:aa:35:f3:cc:ab:5e:48:2a:ed:01:f8:
         5c:81:a6:74:be:77:60:b0:a0:dc:e1:00:95:d2:70:d1:31:3a:
         4d:c0:b6:2a:8e:53:66:77:82:1d:68:ef:b5:27:42:2b:24:cc:
         b1:e2:0e:3c:c3:18:32:56:59:b2:d9:be:4a:e1:2b:b2:ad:48:
         f2:0a:38:9b:4e:3f:7c:c3:1e:9f:c5:74:5e:53:bc:b8:7e:f5:
         13:1c:27:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----