Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e31362e302f32302d3230203d3e20323633373430.roa
File:                     3136312e302e31362e302f32302d3230203d3e20323633373430.roa (raw, json)
Hash identifier:          J57RhwDty7ka0ky2X49ZGDaM2GNci3njZo+wQVmQ77c=
Subject key identifier:   9F:49:78:6A:5E:1F:FA:56:79:D6:F5:70:DE:0B:37:EF:99:E0:75:7B
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       4617A06509BF0A91489E7374BF25429D42FDE7DF
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e31362e302f32302d3230203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:32 +0000
ROA not before:           Tue 05 Mar 2024 17:42:32 +0000
ROA not after:            Tue 04 Mar 2025 17:47:32 +0000
asID:                     263740
IP address blocks:        161.0.16.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:17:a0:65:09:bf:0a:91:48:9e:73:74:bf:25:42:9d:42:fd:e7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:32 2024 GMT
            Not After : Mar  4 17:47:32 2025 GMT
        Subject: CN=9F49786A5E1FFA5679D6F570DE0B37EF99E0757B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:39:78:72:4c:96:77:c8:9b:f3:0a:80:8a:
                    2a:49:61:83:58:c2:39:5e:fa:00:fd:2e:7f:6a:90:
                    9d:87:64:f1:16:ef:0c:28:f4:6c:35:73:fd:5a:16:
                    19:ce:09:ec:58:54:91:2a:9c:7c:43:de:ca:2a:0c:
                    47:cf:a7:9f:4e:c5:f1:7f:6e:b4:aa:46:6a:c2:6c:
                    3b:77:68:77:ce:71:b1:c0:81:e0:b8:48:c5:69:a0:
                    f8:e2:20:4d:c8:9e:32:cd:c5:ba:c4:8d:99:ac:b0:
                    32:f5:fa:aa:99:64:66:fd:28:03:7b:9b:fc:df:7a:
                    b5:6c:dd:ca:44:ba:ca:fa:75:32:98:2d:86:17:9e:
                    90:2e:a2:5b:11:7b:cf:b6:85:dc:ba:d1:19:29:65:
                    08:e7:92:fe:89:c3:73:54:14:eb:65:bc:24:ab:88:
                    5e:b9:75:e2:7a:df:7b:77:a7:ea:27:be:c3:b4:0a:
                    05:e9:60:e9:cf:22:59:61:d1:1e:36:99:6d:65:e8:
                    d0:83:75:2a:2b:d1:b3:65:83:2d:52:a0:a9:bc:8e:
                    24:36:6b:51:69:f8:ed:f7:c4:3d:fa:9b:20:17:c0:
                    23:83:8d:18:0b:c0:49:76:da:b6:7d:45:79:c5:14:
                    b7:7d:27:33:bd:c0:f5:f8:39:04:2f:a6:bc:08:4d:
                    cb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:49:78:6A:5E:1F:FA:56:79:D6:F5:70:DE:0B:37:EF:99:E0:75:7B
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136312e302e31362e302f32302d3230203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:66:e8:eb:2e:14:da:d5:79:da:9b:f9:ed:2e:2d:d7:c1:a3:
         a5:5d:bf:ed:93:5f:ef:69:46:af:31:12:e7:3c:d7:57:24:41:
         85:5e:c6:74:12:25:a8:8c:68:de:7b:ee:7a:37:94:74:f3:0d:
         98:7d:05:27:48:37:04:6c:46:18:a2:7f:17:55:41:30:ec:51:
         3f:fd:fd:53:32:4b:40:68:95:f1:18:d2:48:69:04:ff:0c:f2:
         48:2e:aa:4a:76:af:dc:10:6f:ab:93:8f:2b:d2:3c:06:4f:09:
         e0:88:b6:4d:5a:f2:9c:9d:9d:07:67:34:fc:39:05:89:d3:53:
         d7:60:fa:a5:6c:1e:e6:30:1b:eb:d7:5a:d6:90:ab:1e:c6:3e:
         6f:75:18:40:60:ac:da:d1:19:2b:49:71:41:68:bc:90:fc:54:
         62:cf:b1:e5:83:4f:d3:88:96:32:91:d1:3d:a0:cf:94:f0:bd:
         8b:c1:41:71:fb:ea:df:ff:5f:8f:02:1a:f3:2e:dd:d0:6a:e1:
         9e:e8:b9:91:9a:68:72:e0:00:19:a6:40:32:7e:78:0b:6f:f7:
         b3:a7:2d:16:c7:1c:49:dc:99:cb:f9:33:33:98:dd:ce:12:a0:
         ab:4b:1c:53:5b:68:ed:50:ef:c0:71:0b:8e:bc:30:b7:60:08:
         64:44:fb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----