Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
File:                     3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa (raw, json)
Hash identifier:          ZDuZ0DxGCG1k+OZF8VCumeV5Sy1EiUAffBXWTh43d3s=
Subject key identifier:   D1:26:F6:B7:81:F4:3D:01:15:B0:D6:B1:A4:28:FD:7F:09:4D:E9:0A
Certificate issuer:       /CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
Certificate serial:       31627ACBC9FB15819ED21DB066F7F90B5B68979A
Authority key identifier: CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa
Signing time:             Tue 05 Mar 2024 17:53:12 +0000
ROA not before:           Tue 05 Mar 2024 17:48:12 +0000
ROA not after:            Tue 04 Mar 2025 17:53:12 +0000
asID:                     52350
IP address blocks:        186.148.200.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:62:7a:cb:c9:fb:15:81:9e:d2:1d:b0:66:f7:f9:0b:5b:68:97:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE1FC93A3F20326BE83B6424F678E2EA6714433C
        Validity
            Not Before: Mar  5 17:48:12 2024 GMT
            Not After : Mar  4 17:53:12 2025 GMT
        Subject: CN=D126F6B781F43D0115B0D6B1A428FD7F094DE90A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:6b:63:a4:0e:b7:97:4c:45:27:9f:42:b5:
                    a2:7d:11:b3:09:6b:d1:f4:cf:41:f8:5a:09:fd:57:
                    4c:53:35:12:54:7b:66:34:00:57:13:a0:08:1a:a9:
                    09:af:d3:ab:9f:36:4f:33:b9:c0:e5:17:be:30:11:
                    9a:d1:73:f7:41:b8:ed:aa:d5:db:3c:b0:49:e8:05:
                    87:32:d7:7a:7e:cb:70:45:62:13:c4:52:9a:08:8a:
                    d2:53:fe:70:f1:ce:4b:4f:ce:33:87:82:94:25:f7:
                    0f:1c:c1:e2:75:61:96:70:8d:1f:a9:0d:e9:a0:df:
                    e6:d9:bc:40:df:13:77:7e:e2:1a:b5:cc:fb:67:06:
                    b5:5e:9c:ac:41:13:c0:e9:7d:f4:c8:fa:87:1d:2c:
                    f2:a3:ba:c3:ce:f5:8f:d0:0c:14:3c:c1:f6:31:92:
                    ee:cc:d4:eb:d4:99:97:88:d5:3c:57:c0:70:9d:40:
                    b6:90:4a:a2:20:24:18:cb:4d:64:56:4d:02:c1:5b:
                    86:f3:b7:a5:ba:56:2c:56:39:9c:d1:6f:55:9a:41:
                    3f:b9:55:07:6c:2d:04:50:26:86:91:68:51:5e:3f:
                    12:a0:d8:24:8f:2c:cf:1a:99:9a:a5:c7:0a:eb:75:
                    33:fc:f7:3d:9c:9f:5f:ad:06:c1:04:92:c5:55:f7:
                    c2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:26:F6:B7:81:F4:3D:01:15:B0:D6:B1:A4:28:FD:7F:09:4D:E9:0A
            X509v3 Authority Key Identifier:
                keyid:CE:1F:C9:3A:3F:20:32:6B:E8:3B:64:24:F6:78:E2:EA:67:14:43:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE1FC93A3F20326BE83B6424F678E2EA6714433C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/867D4F42CC3AD6ADFC36A4857E4D8A29E722A6909A853F0E6C118E0370A1A96F/0/3138362e3134382e3230302e302f32312d3234203d3e203532333530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.200.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:fb:20:c1:9a:ee:94:eb:8a:09:8b:7a:0c:4e:c2:5d:ad:
         96:95:f7:fa:a7:26:8b:c6:76:2f:52:0a:5e:6a:44:89:0d:bb:
         2c:96:25:d9:2c:94:e7:7a:18:4c:e2:11:c7:ce:8d:86:82:69:
         72:61:2e:c9:5f:81:9b:a0:7c:85:f8:8b:13:e6:c8:40:59:a6:
         41:74:6a:12:98:21:78:af:df:a0:1a:9f:55:2f:db:1e:24:72:
         1e:f9:1f:3c:9c:21:94:6e:ed:1e:78:9b:2c:30:d2:b9:c5:75:
         94:9b:41:8f:80:60:04:74:b9:59:98:f4:f8:e2:ed:fb:3a:18:
         ea:d5:cd:15:df:96:b8:72:f3:23:c3:ff:ca:40:12:38:ad:55:
         ca:8e:52:9c:c9:bc:6f:6b:48:c0:6c:12:73:ea:72:cb:b3:8c:
         a5:b8:d4:ac:3e:99:50:22:ae:28:4b:06:b8:a5:21:18:05:40:
         6a:cd:11:50:75:77:7a:22:a7:c8:16:21:56:7b:1b:64:7c:8f:
         d6:c1:0b:a0:af:be:56:67:ec:f7:3e:3c:5e:e7:00:f3:a6:e0:
         5b:74:b1:24:da:df:66:c6:c0:7d:cb:73:e6:06:c2:3d:70:6e:
         64:e2:b7:0e:96:b4:01:c2:10:a5:00:27:81:6e:88:1e:39:b7:
         5d:19:10:18
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUMWJ6y8n7FYGe0h2wZvf5C1tol5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0UxRkM5M0EzRjIwMzI2QkU4M0I2NDI0RjY3OEUyRUE2
NzE0NDMzQzAeFw0yNDAzMDUxNzQ4MTJaFw0yNTAzMDQxNzUzMTJaMDMxMTAvBgNV
BAMTKEQxMjZGNkI3ODFGNDNEMDExNUIwRDZCMUE0MjhGRDdGMDk0REU5MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyWtjpA63l0xFJ59CtaJ9EbMJ
a9H0z0H4Wgn9V0xTNRJUe2Y0AFcToAgaqQmv06ufNk8zucDlF74wEZrRc/dBuO2q
1ds8sEnoBYcy13p+y3BFYhPEUpoIitJT/nDxzktPzjOHgpQl9w8cweJ1YZZwjR+p
Demg3+bZvEDfE3d+4hq1zPtnBrVenKxBE8DpffTI+ocdLPKjusPO9Y/QDBQ8wfYx
ku7M1OvUmZeI1TxXwHCdQLaQSqIgJBjLTWRWTQLBW4bzt6W6VixWOZzRb1WaQT+5
VQdsLQRQJoaRaFFePxKg2CSPLM8amZqlxwrrdTP89z2cn1+tBsEEksVV98JXAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0Sb2t4H0PQEVsNaxpCj9fwlN6QowHwYDVR0j
BBgwFoAUzh/JOj8gMmvoO2Qk9nji6mcUQzwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NjdENEY0MkNDM0FENkFERkMzNkE0ODU3RTREOEEyOUU3
MjJBNjkwOUE4NTNGMEU2QzExOEUwMzcwQTFBOTZGLzAvQ0UxRkM5M0EzRjIwMzI2
QkU4M0I2NDI0RjY3OEUyRUE2NzE0NDMzQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRTFGQzkzQTNGMjAzMjZCRTgz
QjY0MjRGNjc4RTJFQTY3MTQ0MzNDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODY3RDRGNDJDQzNBRDZBREZDMzZBNDg1N0U0RDhBMjlFNzIyQTY5MDlB
ODUzRjBFNkMxMThFMDM3MEExQTk2Ri8wLzMxMzgzNjJlMzEzNDM4MmUzMjMwMzAy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNTMyMzMzNTMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDupTI
MA0GCSqGSIb3DQEBCwUAA4IBAQB6W/sgwZrulOuKCYt6DE7CXa2Wlff6pyaLxnYv
UgpeakSJDbssliXZLJTnehhM4hHHzo2GgmlyYS7JX4GboHyF+IsT5shAWaZBdGoS
mCF4r9+gGp9VL9seJHIe+R88nCGUbu0eeJssMNK5xXWUm0GPgGAEdLlZmPT44u37
Ohjq1c0V35a4cvMjw//KQBI4rVXKjlKcybxva0jAbBJz6nLLs4yluNSsPplQIq4o
Swa4pSEYBUBqzRFQdXd6IqfIFiFWextkfI/WwQugr75WZ+z3Pjxe5wDzpuBbdLEk
2t9mxsB9y3PmBsI9cG5k4rcOlrQBwhClACeBbogeObddGRAY
-----END CERTIFICATE-----