Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
File:                     3136312e302e302e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          ZZZSZVXdUoC9d7boRj+vZQUyG2j19Uv2CUndAaGWaCc=
Subject key identifier:   6D:45:3F:CC:B1:85:C9:9F:FC:3C:F2:CA:A6:EC:03:6A:8C:56:47:28
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       2CBD692546F8A5DE0C5CAA5FCAC64D9EAA298F0F
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:31 +0000
ROA not before:           Tue 05 Mar 2024 17:42:31 +0000
ROA not after:            Tue 04 Mar 2025 17:47:31 +0000
asID:                     263740
IP address blocks:        161.0.0.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:bd:69:25:46:f8:a5:de:0c:5c:aa:5f:ca:c6:4d:9e:aa:29:8f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:31 2024 GMT
            Not After : Mar  4 17:47:31 2025 GMT
        Subject: CN=6D453FCCB185C99FFC3CF2CAA6EC036A8C564728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:89:80:4b:da:10:fe:e2:84:5c:3c:4b:5e:
                    7c:52:d8:0d:13:09:00:55:2e:73:a6:77:46:7b:76:
                    60:12:ff:58:a4:c4:b8:57:a9:27:67:33:57:2c:a2:
                    a9:9d:93:b2:56:6c:52:19:fd:7a:1d:8d:76:a8:4c:
                    43:bc:50:4d:10:e9:70:cf:2d:4b:68:e0:1a:a4:24:
                    f7:3e:10:93:a8:7d:34:91:a1:50:f6:17:20:75:e9:
                    2c:df:de:cb:30:f2:40:91:c7:c3:f5:eb:42:51:92:
                    70:a8:70:d6:95:28:f6:ad:38:f3:84:94:8a:9b:93:
                    f1:ff:7c:9b:d6:c7:da:66:bd:13:5b:d6:1b:09:49:
                    01:a2:8d:38:a8:37:c7:7b:36:04:5c:ed:c6:72:c0:
                    44:ce:8f:cf:cd:77:74:f5:9a:37:a9:f1:29:40:d9:
                    84:11:2e:64:5c:c1:a3:0b:69:64:a0:aa:fa:6d:d7:
                    f1:d8:20:ef:06:b6:af:66:1c:da:07:80:88:14:33:
                    29:f9:d9:99:fa:d2:27:c1:00:ed:ed:a6:a9:47:1b:
                    93:cc:cc:fb:78:91:11:9f:03:4e:30:b3:b6:8f:de:
                    e8:5b:6f:80:c9:00:17:f5:3c:ff:0b:ad:99:21:9d:
                    6a:cb:90:cc:33:0a:73:c1:09:73:f1:ba:5a:e5:4b:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:45:3F:CC:B1:85:C9:9F:FC:3C:F2:CA:A6:EC:03:6A:8C:56:47:28
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e302e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:19:e7:38:e4:e6:63:27:0c:0f:a1:af:81:5e:eb:43:46:2e:
         69:d4:f9:78:0d:c7:2a:6d:fe:d5:af:10:e9:e1:23:b9:b7:fc:
         86:16:16:e5:81:6c:bc:77:36:ef:96:36:26:26:2f:47:2f:4b:
         2d:cc:d1:ca:64:b8:d4:19:e8:cc:7e:f7:a9:1e:9c:1d:79:b1:
         25:48:3d:03:01:89:c9:b5:d3:fa:96:99:62:6f:44:be:db:30:
         5b:a0:a4:8f:c5:25:4d:73:c7:3d:2b:6d:21:f8:b2:47:47:36:
         69:bd:64:ef:17:40:f3:5c:20:e5:90:da:e7:8f:bd:71:e9:6a:
         47:d0:d1:66:eb:34:23:2c:5a:86:c5:cf:66:9c:47:a8:94:4b:
         6e:92:41:2f:65:06:88:17:8c:c5:f3:18:a2:15:f0:0f:09:74:
         ad:a5:af:7f:32:f5:d2:ed:d1:c7:d7:bf:b5:e8:44:6c:bf:ad:
         2f:32:35:8f:b5:2d:ce:33:72:8a:cc:ae:3c:bb:b3:be:70:f5:
         b7:dc:cd:5d:dc:28:fc:45:de:1d:c8:12:bf:f0:d8:63:7d:b6:
         21:20:86:0b:77:b0:db:6f:b3:ae:fb:56:ab:87:2f:6d:65:73:
         28:50:e7:ed:dc:14:86:ba:bc:3b:e2:de:9b:0a:21:f4:92:76:
         28:61:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----