Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f31392d3139203d3e20323633373430.roa
File:                     3136312e302e302e302f31392d3139203d3e20323633373430.roa (raw, json)
Hash identifier:          mjwi8pLYZqKVDc+OktuMIFcC6nrZqLs652CbWjB8r1g=
Subject key identifier:   11:55:30:BB:38:39:DF:10:12:2C:ED:75:98:A1:0F:2D:83:9B:F9:AA
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       56F67CCA830B1143ABECA93BEC3533C8B97B279B
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f31392d3139203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:31 +0000
ROA not before:           Tue 05 Mar 2024 17:42:31 +0000
ROA not after:            Tue 04 Mar 2025 17:47:31 +0000
asID:                     263740
IP address blocks:        161.0.0.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f6:7c:ca:83:0b:11:43:ab:ec:a9:3b:ec:35:33:c8:b9:7b:27:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:31 2024 GMT
            Not After : Mar  4 17:47:31 2025 GMT
        Subject: CN=115530BB3839DF10122CED7598A10F2D839BF9AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d6:65:4e:b5:4f:7e:90:67:6c:c9:36:4d:3f:
                    d5:01:29:63:51:38:86:0f:98:ac:9d:48:2a:df:4c:
                    ab:fd:9b:6c:89:28:fa:3e:5c:a1:c8:48:53:4b:66:
                    c4:ec:22:9e:4d:16:e1:3e:e7:ad:da:22:a6:48:5b:
                    59:a2:47:86:8b:4a:d2:f5:f0:5a:24:c4:a2:82:94:
                    f7:87:f9:e1:94:97:8e:22:9d:f5:40:69:77:8f:63:
                    57:2e:1a:17:e4:ed:57:72:21:8d:f6:0d:3b:99:1a:
                    6b:3d:6d:ac:9e:24:e8:11:74:03:d8:dc:3f:80:43:
                    c5:6d:b9:b8:6c:c4:0e:b7:46:aa:14:aa:6c:7b:ac:
                    35:c8:1a:0b:28:7b:64:b0:28:c0:56:d6:d0:df:03:
                    a4:72:af:1c:a7:33:8e:2b:81:9a:61:04:bf:38:72:
                    3f:a9:40:c9:08:17:d4:4b:5e:9a:d8:d9:b7:8f:76:
                    56:e8:9b:62:18:94:b1:2b:42:61:95:4e:8e:09:86:
                    b4:58:ca:62:22:88:c5:d0:6b:48:27:d3:da:2f:d3:
                    eb:78:bc:5c:70:6e:63:02:41:75:67:dc:2f:de:10:
                    20:62:91:bc:ff:99:1e:26:b4:43:bd:6e:6d:30:07:
                    01:e4:4a:ae:c7:20:38:3f:56:34:cd:f4:8c:2a:90:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:55:30:BB:38:39:DF:10:12:2C:ED:75:98:A1:0F:2D:83:9B:F9:AA
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f31392d3139203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:71:2d:da:bd:64:21:75:4d:b2:ed:ce:18:3d:d6:9d:24:42:
         fb:7e:bc:07:ab:33:e7:b2:7e:61:e6:a1:55:75:80:bf:ed:21:
         12:3b:02:7e:ce:d4:ae:7d:64:9a:71:12:21:15:c7:1d:27:45:
         b3:34:1a:2f:e8:13:e7:66:7d:83:ac:0a:5d:dc:a2:54:d7:a6:
         4b:aa:5e:19:55:28:ff:76:fb:32:a2:0a:44:53:fb:0c:03:bd:
         89:8e:88:8b:ca:03:aa:f5:1c:44:83:e7:21:6b:d2:0f:66:4e:
         8a:3b:00:5c:38:e8:d2:de:fa:22:3b:a2:6a:83:68:a6:2d:65:
         f2:4f:12:81:95:c9:27:e7:67:46:d1:ba:df:59:37:64:9c:df:
         ea:38:cb:12:5d:f5:09:b9:fe:36:66:af:31:62:df:90:3d:b5:
         27:99:a5:ff:2c:9d:77:9a:7a:c8:13:e5:8d:d9:e9:7d:a7:93:
         a6:80:9b:45:d6:fd:39:86:a1:dc:39:ce:05:4b:77:67:e2:d6:
         2f:20:63:44:41:3c:f2:ce:cc:0d:5b:eb:fb:ad:3c:70:e6:91:
         e5:98:7d:98:c0:44:b2:1c:b8:d3:a6:e9:ac:40:19:30:cd:18:
         27:a5:2c:e2:ae:cb:ad:c8:fc:09:f2:aa:db:a2:c7:57:4b:4d:
         b4:19:05:92
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUVvZ8yoMLEUOr7Kk77DUzyLl7J5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzA1MzcwQTE5OThDNkFFRjlCOTQyODM1MTdGNEIxRTZC
QjVBRDBCQzAeFw0yNDAzMDUxNzQyMzFaFw0yNTAzMDQxNzQ3MzFaMDMxMTAvBgNV
BAMTKDExNTUzMEJCMzgzOURGMTAxMjJDRUQ3NTk4QTEwRjJEODM5QkY5QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1mVOtU9+kGdsyTZNP9UBKWNR
OIYPmKydSCrfTKv9m2yJKPo+XKHISFNLZsTsIp5NFuE+563aIqZIW1miR4aLStL1
8FokxKKClPeH+eGUl44infVAaXePY1cuGhfk7VdyIY32DTuZGms9bayeJOgRdAPY
3D+AQ8VtubhsxA63RqoUqmx7rDXIGgsoe2SwKMBW1tDfA6RyrxynM44rgZphBL84
cj+pQMkIF9RLXprY2bePdlbom2IYlLErQmGVTo4JhrRYymIiiMXQa0gn09ov0+t4
vFxwbmMCQXVn3C/eECBikbz/mR4mtEO9bm0wBwHkSq7HIDg/VjTN9IwqkLt3AgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUEVUwuzg53xASLO11mKEPLYOb+aowHwYDVR0j
BBgwFoAUMFNwoZmMau+blCg1F/Sx5rta0LwwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NzAxQzQzMUE1MjlFQTIwRTk1MUNDRjA5ODcyNUJFQzdG
MDVEODE3M0E0MDVDMUE5REVCNjQwQkE5N0JFRTVBLzAvMzA1MzcwQTE5OThDNkFF
RjlCOTQyODM1MTdGNEIxRTZCQjVBRDBCQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zMDUzNzBBMTk5OEM2QUVGOUI5
NDI4MzUxN0Y0QjFFNkJCNUFEMEJDLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTcwMUM0MzFBNTI5RUEyMEU5NTFDQ0YwOTg3MjVCRUM3RjA1RDgxNzNB
NDA1QzFBOURFQjY0MEJBOTdCRUU1QS8wLzMxMzYzMTJlMzAyZTMwMmUzMDJmMzEz
OTJkMzEzOTIwM2QzZTIwMzIzNjMzMzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoQAAMA0GCSqG
SIb3DQEBCwUAA4IBAQCZcS3avWQhdU2y7c4YPdadJEL7frwHqzPnsn5h5qFVdYC/
7SESOwJ+ztSufWSacRIhFccdJ0WzNBov6BPnZn2DrApd3KJU16ZLql4ZVSj/dvsy
ogpEU/sMA72JjoiLygOq9RxEg+cha9IPZk6KOwBcOOjS3voiO6Jqg2imLWXyTxKB
lckn52dG0brfWTdknN/qOMsSXfUJuf42Zq8xYt+QPbUnmaX/LJ13mnrIE+WN2el9
p5OmgJtF1v05hqHcOc4FS3dn4tYvIGNEQTzyzswNW+v7rTxw5pHlmH2YwESyHLjT
pumsQBkwzRgnpSzirsutyPwJ8qrbosdXS020GQWS
-----END CERTIFICATE-----