Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32332d3233203d3e203634313233.roa
File:                     3138362e3134382e3232342e302f32332d3233203d3e203634313233.roa (raw, json)
Hash identifier:          wFsbTfby3aTSQ8vsiQxoLCjjDBbAXObN5dnC2XQqusM=
Subject key identifier:   BC:A1:8E:16:81:27:DB:F8:F3:FE:0C:FB:5A:55:90:37:4A:79:01:36
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       6B13236CFA5546E928DA4D95AFFF3284F122BC7C
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32332d3233203d3e203634313233.roa
Signing time:             Sat 30 Nov 2024 15:00:01 +0000
ROA not before:           Sat 30 Nov 2024 14:55:01 +0000
ROA not after:            Sat 29 Nov 2025 15:00:01 +0000
asID:                     64123
IP address blocks:        186.148.224.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:13:23:6c:fa:55:46:e9:28:da:4d:95:af:ff:32:84:f1:22:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Nov 30 14:55:01 2024 GMT
            Not After : Nov 29 15:00:01 2025 GMT
        Subject: CN=BCA18E168127DBF8F3FE0CFB5A5590374A790136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:a2:79:77:a7:73:21:26:fa:87:ca:5a:f1:
                    c2:71:41:80:20:cb:6a:d2:78:a2:f3:f0:d1:56:5f:
                    c6:64:20:b2:e1:06:05:b5:75:6f:c8:6a:85:21:a2:
                    3a:d3:b0:fe:7f:47:e7:60:31:e0:cc:30:3d:b4:2c:
                    92:35:c5:50:57:23:fa:90:58:15:fc:19:67:25:f2:
                    a4:b3:c8:cb:60:75:f4:a0:80:a4:8e:3c:bc:fc:59:
                    87:bc:b1:a2:af:64:fe:90:62:51:9d:40:6c:81:2e:
                    0b:24:19:4a:bc:7e:8b:56:81:70:4d:71:32:01:33:
                    ff:72:ff:26:2a:ba:e0:8d:0b:e6:fa:bd:0a:08:b1:
                    81:1e:94:4e:89:49:77:23:0e:5e:fb:c5:67:31:b9:
                    59:d6:30:65:05:79:98:e4:41:45:6a:4d:cb:80:77:
                    bd:ad:9a:6d:b1:07:c2:51:93:d3:23:3a:3f:56:1f:
                    22:e5:cd:08:c7:87:9d:1f:70:4e:f6:05:96:5f:7e:
                    02:7f:2d:13:aa:d8:31:97:97:7f:eb:e0:df:79:b4:
                    8c:a5:02:42:32:a6:a0:8f:09:85:8e:88:1a:dd:7f:
                    01:33:ce:80:cb:a4:fe:23:69:56:2a:c3:ca:0a:0a:
                    a4:1e:ca:a1:de:60:67:e2:7f:14:78:4b:e1:bf:05:
                    91:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:8E:16:81:27:DB:F8:F3:FE:0C:FB:5A:55:90:37:4A:79:01:36
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232342e302f32332d3233203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:da:35:e5:61:3a:de:0a:c5:ca:96:91:60:11:a7:59:a7:
         4a:db:94:71:dd:e5:52:95:68:39:21:8d:5c:bf:63:57:6d:be:
         00:e2:e6:a6:8f:df:16:ad:e2:80:3f:2d:05:a7:3a:c1:95:84:
         15:99:bb:da:5b:85:79:41:fb:97:21:18:3d:60:4a:4b:47:f4:
         a6:3f:f6:76:6a:7e:96:7d:b9:2c:10:e3:b8:ef:09:0f:0f:15:
         0e:aa:82:db:03:0c:cc:a1:69:43:07:36:9f:30:de:20:dd:f1:
         e5:90:2c:be:2f:4a:19:69:d0:a3:ee:fd:54:55:55:17:96:65:
         65:22:5a:b0:54:c1:c7:28:71:2f:d9:aa:62:16:ba:bd:2f:dc:
         89:e0:7c:8d:ff:ff:10:be:9d:0a:8c:a8:d4:56:2b:69:7a:02:
         94:9c:61:a9:ab:79:79:c1:b4:1d:6e:c3:5d:ae:05:7f:5a:ee:
         b1:fd:6b:41:6f:74:e1:bb:fd:be:a9:98:a6:b9:57:de:a1:2f:
         95:a0:90:7f:41:c3:73:18:96:c2:58:44:df:3f:01:01:4f:8f:
         48:38:bd:6f:c4:6f:ef:6b:2d:f3:cd:0a:e8:62:dd:c9:1f:b3:
         2f:36:40:ed:db:01:ca:10:fb:e3:b1:da:73:8e:ab:97:31:8d:
         ff:1d:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----