Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/3138372e38362e3136342e302f32322d3234203d3e20323730303638.roa
File:                     3138372e38362e3136342e302f32322d3234203d3e20323730303638.roa (raw, json)
Hash identifier:          KGLYcxg9loAMicnfM17rpIWgtYtjadU/Vg0c70qHDBo=
Subject key identifier:   09:27:A4:79:D3:1C:25:D9:94:FA:88:32:F7:E2:F7:B1:49:98:35:F9
Certificate issuer:       /CN=701AAE061E1228C91D250BAD56D2FDF00FB0E988
Certificate serial:       04A71BAE779A3AEEF9E27332AE751A091EBD397A
Authority key identifier: 70:1A:AE:06:1E:12:28:C9:1D:25:0B:AD:56:D2:FD:F0:0F:B0:E9:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/3138372e38362e3136342e302f32322d3234203d3e20323730303638.roa
Signing time:             Tue 05 Mar 2024 17:59:22 +0000
ROA not before:           Tue 05 Mar 2024 17:54:22 +0000
ROA not after:            Tue 04 Mar 2025 17:59:22 +0000
asID:                     270068
IP address blocks:        187.86.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a7:1b:ae:77:9a:3a:ee:f9:e2:73:32:ae:75:1a:09:1e:bd:39:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701AAE061E1228C91D250BAD56D2FDF00FB0E988
        Validity
            Not Before: Mar  5 17:54:22 2024 GMT
            Not After : Mar  4 17:59:22 2025 GMT
        Subject: CN=0927A479D31C25D994FA8832F7E2F7B1499835F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e4:8d:73:e3:d1:3d:ef:3b:2e:41:d3:2d:42:
                    17:74:79:7d:56:eb:70:8c:7d:55:87:d2:47:7d:b4:
                    77:db:69:97:23:a4:da:08:25:5e:7e:87:16:bc:b3:
                    2e:ca:90:6f:c0:8b:71:b9:e1:13:b6:33:66:19:05:
                    dd:2f:35:5c:9e:88:e2:d4:51:b4:61:6a:00:21:09:
                    41:a9:bb:74:23:76:47:bd:10:6b:a5:47:ca:f0:95:
                    ef:b9:0f:3d:89:db:3d:e8:af:16:0d:7e:f2:50:ec:
                    ed:1b:b9:ca:61:f7:ca:62:e3:25:d2:26:34:ee:85:
                    f2:f1:4b:5e:63:9b:d7:c6:77:31:75:cf:96:92:0a:
                    8e:e4:85:46:61:db:d1:47:76:d6:4e:57:c6:27:cf:
                    ae:52:e4:74:bc:8a:6d:80:aa:15:40:5c:f0:45:27:
                    7b:49:b7:e3:97:29:c9:f4:07:a5:d5:c4:2f:31:f7:
                    40:1b:f5:77:45:a3:77:ad:2f:81:47:11:8c:df:5b:
                    e5:59:06:06:2a:74:88:66:1c:02:31:b1:f0:c0:d6:
                    8b:27:83:d6:e1:ad:ef:90:23:fa:f3:b8:39:0b:47:
                    65:12:1b:12:20:d3:6d:3f:01:ed:48:b0:cb:0b:de:
                    7e:a5:57:94:9a:60:b4:d5:f9:69:af:bf:c7:55:30:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:A4:79:D3:1C:25:D9:94:FA:88:32:F7:E2:F7:B1:49:98:35:F9
            X509v3 Authority Key Identifier:
                keyid:70:1A:AE:06:1E:12:28:C9:1D:25:0B:AD:56:D2:FD:F0:0F:B0:E9:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701AAE061E1228C91D250BAD56D2FDF00FB0E988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EC3962FF26BE7872ABC4095A55F43A02AEDF0217C075928030DDF971A7C5A8F/0/3138372e38362e3136342e302f32322d3234203d3e20323730303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:42:01:1c:a5:4d:b7:cb:14:cd:e7:82:4a:92:e7:84:47:
         7c:af:bc:4c:c7:9d:b8:0d:ad:25:b6:f2:58:8f:06:3e:d6:d6:
         5c:41:69:be:a8:e7:c9:46:d5:ed:0c:00:22:ab:83:a2:6a:d6:
         82:9b:21:db:55:5a:0e:94:8b:cf:10:c8:97:0e:fb:dc:c2:86:
         49:fe:67:d9:83:1b:56:60:d3:31:20:4b:14:00:d2:5b:23:3c:
         92:6b:de:e3:1d:95:48:64:a0:ca:6f:2e:ea:34:bd:aa:88:7d:
         6d:6a:f2:66:01:cc:e7:60:fe:59:b9:84:ce:31:33:4e:0e:1d:
         28:45:81:b6:fc:e4:c3:2b:71:18:73:67:10:c8:ff:bb:5f:b8:
         d6:1f:d6:10:2c:ad:73:ac:bf:04:9a:15:c4:14:d8:8f:41:7a:
         3b:bc:90:73:c7:08:23:2f:f6:63:90:ce:94:2d:d2:98:04:54:
         ca:8b:48:25:c1:c2:3e:94:ee:9e:17:4b:8a:1b:e6:75:e9:44:
         a2:fd:fb:bd:b7:34:f8:6a:71:93:28:b4:22:ac:4d:04:dd:63:
         cb:57:1c:c6:17:5a:68:ed:b3:f4:30:bb:03:3a:6e:5c:b3:e9:
         5a:50:94:f5:8f:e3:99:4e:5d:51:2f:16:fb:27:22:b3:07:9b:
         64:a8:7c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----