Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232362e302f32332d3233203d3e203634313233.roa
File:                     3138362e3134382e3232362e302f32332d3233203d3e203634313233.roa (raw, json)
Hash identifier:          pNktpzZLfGgYIvepI/u1x8gHxqf6Wn3Sh5RoyYXjbno=
Subject key identifier:   A3:0B:3D:1C:35:D1:A6:8E:F9:B3:32:B3:B3:D7:C2:87:3B:DA:F7:BF
Certificate issuer:       /CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
Certificate serial:       307BD5874871B1FDC0E50BFDB7A47E0FBD4512AF
Authority key identifier: 73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232362e302f32332d3233203d3e203634313233.roa
Signing time:             Sat 30 Nov 2024 15:00:01 +0000
ROA not before:           Sat 30 Nov 2024 14:55:01 +0000
ROA not after:            Sat 29 Nov 2025 15:00:01 +0000
asID:                     64123
IP address blocks:        186.148.226.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:7b:d5:87:48:71:b1:fd:c0:e5:0b:fd:b7:a4:7e:0f:bd:45:12:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73309007D51C9AEAAE8E51400EFDD8F38A93501F
        Validity
            Not Before: Nov 30 14:55:01 2024 GMT
            Not After : Nov 29 15:00:01 2025 GMT
        Subject: CN=A30B3D1C35D1A68EF9B332B3B3D7C2873BDAF7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:07:05:5d:0a:58:0c:fe:06:b2:07:d0:26:
                    2f:fa:f7:e8:59:62:4c:9e:1e:6a:02:67:75:ed:ae:
                    ff:87:a4:0b:63:13:5a:dc:26:5d:0b:30:34:dd:e3:
                    98:a6:9d:10:73:f4:4b:01:07:3f:5d:9e:2e:f2:5e:
                    e0:bc:50:0a:ae:35:ff:98:17:e3:a8:39:87:ab:7c:
                    1c:ac:bb:60:71:ef:15:e1:c6:76:46:02:b2:69:d5:
                    30:98:3a:08:11:c2:c8:81:ca:06:0a:c4:c6:c0:97:
                    9e:8f:b3:7e:3b:8d:63:05:cb:69:3f:dd:8c:04:6d:
                    77:87:08:5d:c8:d6:60:ce:f5:4e:74:7a:84:e8:99:
                    f0:ad:c5:e2:37:0f:35:a4:c7:2c:9f:d3:4f:d3:69:
                    db:d2:22:09:c2:ba:0a:54:8b:42:b0:76:48:eb:2d:
                    03:64:0b:44:87:fe:2d:0f:52:3a:f9:b0:f6:66:cf:
                    be:8e:73:ca:82:ef:3d:36:eb:99:62:26:f1:bb:63:
                    6c:44:21:79:3b:05:ba:17:f3:83:c3:44:ef:ef:ea:
                    0f:52:26:db:5a:96:d4:8c:22:c3:3b:09:4f:14:d5:
                    23:77:11:55:0d:fa:36:fb:c6:75:1b:2b:84:fe:f1:
                    0b:3a:67:94:98:26:0b:83:4b:2e:61:c6:0d:db:17:
                    70:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0B:3D:1C:35:D1:A6:8E:F9:B3:32:B3:B3:D7:C2:87:3B:DA:F7:BF
            X509v3 Authority Key Identifier:
                keyid:73:30:90:07:D5:1C:9A:EA:AE:8E:51:40:0E:FD:D8:F3:8A:93:50:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73309007D51C9AEAAE8E51400EFDD8F38A93501F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1C3A1C9E27FC3279D7580FC85D67963634BCA8BA935B76BF060C4C03F586FEE/0/3138362e3134382e3232362e302f32332d3233203d3e203634313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:3b:e9:26:0d:cd:ee:64:af:4e:72:02:66:f8:14:44:2d:fd:
         4e:b7:5d:11:6d:21:23:19:04:12:e5:8d:dc:41:13:74:a8:4f:
         ed:1a:75:36:7c:f7:a8:84:bb:80:91:e5:50:6d:e8:3f:71:8d:
         aa:ad:04:a1:f2:90:11:42:f3:d0:eb:ec:5f:e3:86:05:66:02:
         97:45:8d:10:00:b9:7e:b9:33:e2:f6:9c:50:bf:bc:53:9a:49:
         20:21:1b:d9:3a:e6:8c:ab:d2:d6:d1:b9:39:76:d2:ed:ca:59:
         f2:3b:0c:24:42:c5:49:66:e9:88:45:5c:2a:46:b7:ff:9d:27:
         df:84:0e:52:84:37:22:e3:e2:61:9e:5d:45:c6:58:01:b5:cb:
         a0:b7:0f:e0:c6:6c:3f:ca:fd:75:74:dc:ad:5d:c1:c5:08:ed:
         a3:cc:7e:21:70:08:a9:25:67:37:7d:a8:3d:1a:f8:d6:8f:f4:
         cc:49:77:81:d4:f9:c8:f4:51:be:6d:0d:64:15:67:51:09:e9:
         76:30:a7:c9:09:77:78:28:18:ce:69:32:ae:af:0b:99:84:cc:
         d7:96:86:b4:92:c7:56:55:e6:26:c0:84:ab:f1:57:a5:be:8f:
         3a:f1:f2:98:98:bb:19:fd:32:bd:6f:3d:0e:1d:13:83:ef:71:
         59:1a:26:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----