Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa
File:                     3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa (raw, json)
Hash identifier:          /GY8o98YC6lcUWzgV0KwDJUElaDTi8EJwnKa7t6Ws54=
Subject key identifier:   D5:63:03:B5:B3:42:D8:28:AB:6D:31:29:C4:16:20:E0:F1:E5:8C:9F
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       32B1C6DC080069E13CCE0B6B96F819D7B0ED66CE
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa
Signing time:             Tue 05 Mar 2024 18:17:52 +0000
ROA not before:           Tue 05 Mar 2024 18:12:52 +0000
ROA not after:            Tue 04 Mar 2025 18:17:52 +0000
asID:                     32098
IP address blocks:        201.174.104.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b1:c6:dc:08:00:69:e1:3c:ce:0b:6b:96:f8:19:d7:b0:ed:66:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Mar  5 18:12:52 2024 GMT
            Not After : Mar  4 18:17:52 2025 GMT
        Subject: CN=D56303B5B342D828AB6D3129C41620E0F1E58C9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:57:a0:a2:72:e2:48:56:3c:d8:c2:29:26:
                    d7:12:61:40:55:0f:eb:09:14:3d:79:72:be:ba:af:
                    bd:43:a1:bd:0e:52:2c:f6:81:61:c1:04:f4:75:a0:
                    a5:bc:35:88:d8:0f:66:d0:61:d8:69:6c:b8:24:e3:
                    e1:63:4c:39:e2:ed:22:7d:4b:bc:f6:e5:d0:9c:84:
                    f5:10:c1:22:7f:01:e8:73:d5:ca:d9:20:39:a1:11:
                    24:0e:86:b3:5f:8e:ad:f9:32:b9:99:a0:d1:08:d6:
                    71:2e:f3:8d:46:56:d8:79:31:d8:35:3b:eb:94:bc:
                    c0:92:32:51:b3:0c:11:34:53:4c:62:e0:36:f6:b1:
                    72:cc:a2:8d:5b:61:52:59:a3:5e:45:1b:32:7a:16:
                    90:05:a6:32:2a:4c:7c:f3:b9:65:65:ee:89:7f:44:
                    ba:4c:35:07:eb:29:bb:b8:6e:74:b0:73:34:43:9b:
                    9e:83:f0:45:cb:5b:f7:4c:bc:e1:81:06:26:f4:80:
                    90:fd:d7:ed:fc:57:d0:fb:ff:ed:ad:54:ed:f8:b9:
                    0d:94:06:8d:a1:08:91:1a:ea:f4:83:af:86:a9:f0:
                    24:d6:31:3f:cf:b8:cc:64:11:40:68:6f:34:2a:61:
                    6f:9b:da:ea:22:52:ea:13:32:3e:e3:1e:89:c4:7b:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:63:03:B5:B3:42:D8:28:AB:6D:31:29:C4:16:20:E0:F1:E5:8C:9F
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3230312e3137342e3130342e302f32332d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.174.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:0d:5c:b6:32:e3:cf:74:6b:ee:2a:56:08:89:c0:c4:16:d9:
         87:9d:dd:14:24:64:30:55:9c:58:f9:5a:39:8d:71:91:59:71:
         f9:36:ad:6d:ba:9f:25:37:9f:0f:f8:c5:74:2a:00:fd:2e:db:
         27:c9:40:bd:df:37:f3:87:b2:c6:a2:a2:ab:35:ca:b5:3e:e8:
         fb:b0:01:49:4d:22:5b:83:c4:a3:8b:9c:ab:1b:40:a6:63:c1:
         15:4b:12:f7:42:ea:a3:ca:93:ae:dd:83:36:b2:96:83:e2:df:
         3b:9c:aa:9c:9e:e4:76:19:d9:01:7e:79:e6:ea:49:e8:07:d7:
         d3:a3:c6:07:3f:6e:06:a2:ff:46:e5:75:80:c7:2a:6c:42:71:
         e9:02:4b:af:9c:42:05:21:c6:8a:44:b0:70:ca:cd:7e:e9:cc:
         0d:9b:90:58:72:38:c9:53:dd:35:c1:7e:a5:57:c0:38:e0:f0:
         77:35:ba:70:e8:78:5c:68:f9:1f:0d:b0:f5:d4:47:a5:48:00:
         da:e5:12:ea:75:e3:20:5e:40:71:1d:a0:7f:ee:cc:d6:3d:b8:
         d2:6f:b8:2c:bd:a3:75:27:ff:1a:3e:bf:5a:a0:70:98:3c:d6:
         fe:c4:02:1f:1d:29:4e:df:85:91:14:b8:9f:67:c0:1e:c9:da:
         d6:3f:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----