Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa
File:                     3138362e33322e3232342e302f32302d3231203d3e203230323939.roa (raw, json)
Hash identifier:          Nb8LpgCsTlgxd+YmaDwU8AQk/1iVP3nusn71+/uqc5o=
Subject key identifier:   D6:0E:12:42:D6:70:FC:9E:45:0D:D2:B1:26:E2:6A:8D:88:88:42:D1
Certificate issuer:       /CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
Certificate serial:       47BC77AD64C43B7A5324449010197941DABB2FF2
Authority key identifier: E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa
Signing time:             Tue 05 Mar 2024 18:19:38 +0000
ROA not before:           Tue 05 Mar 2024 18:14:38 +0000
ROA not after:            Tue 04 Mar 2025 18:19:38 +0000
asID:                     20299
IP address blocks:        186.32.224.0/20 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:bc:77:ad:64:c4:3b:7a:53:24:44:90:10:19:79:41:da:bb:2f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5E5088F6D810D9F305D23A4C593A5E8F30F529F
        Validity
            Not Before: Mar  5 18:14:38 2024 GMT
            Not After : Mar  4 18:19:38 2025 GMT
        Subject: CN=D60E1242D670FC9E450DD2B126E26A8D888842D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:1f:c2:9d:c6:32:6b:08:c4:dc:03:a7:0f:
                    47:11:5b:00:4d:f5:77:20:4a:2b:96:4c:ee:4b:ac:
                    12:67:33:3a:77:2f:8f:1d:3c:0a:49:b5:94:e1:5d:
                    dc:ad:09:cd:42:03:d0:be:36:a8:4d:30:55:6e:de:
                    df:57:ef:8b:8c:8e:a1:c5:6d:b5:e0:a1:7d:e4:bb:
                    26:10:01:09:37:dc:5e:4f:21:d1:2e:d4:48:0c:dd:
                    84:1f:2e:05:c6:9e:95:fc:a0:03:bb:75:c7:8c:06:
                    8e:f8:30:28:8b:a4:7f:cd:c6:fa:a6:4f:ff:19:74:
                    35:c0:27:dd:f5:1b:30:50:ac:02:36:83:a9:cb:d3:
                    e7:2a:b2:ad:e1:79:72:d7:24:a1:d8:ca:2c:d7:f2:
                    41:52:ea:18:58:d9:0a:ef:74:df:93:1d:52:dd:70:
                    10:bb:a6:a6:8a:dc:df:63:5b:d8:22:9c:31:4b:68:
                    09:ca:fc:0b:b1:5a:e9:18:fc:06:43:71:74:29:93:
                    63:13:3a:2a:ce:86:c4:3a:33:42:0f:96:ab:db:3d:
                    40:04:19:e9:31:ff:16:7f:08:6b:fc:13:1d:91:d4:
                    19:44:76:ef:3f:1b:c5:bc:99:1f:90:9a:f9:53:58:
                    af:f4:71:78:6c:c3:ea:de:56:08:e9:e3:e1:d6:3a:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0E:12:42:D6:70:FC:9E:45:0D:D2:B1:26:E2:6A:8D:88:88:42:D1
            X509v3 Authority Key Identifier:
                keyid:E5:E5:08:8F:6D:81:0D:9F:30:5D:23:A4:C5:93:A5:E8:F3:0F:52:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E5E5088F6D810D9F305D23A4C593A5E8F30F529F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FE18A2ACA3C71B9F1F6B9F1BBF5A38543A527FA6C747533CECF11E64E0D6B3/0/3138362e33322e3232342e302f32302d3231203d3e203230323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.32.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:aa:d3:ac:e7:9f:87:9e:70:ea:e1:55:7e:61:24:62:88:e6:
         30:93:23:4d:03:c3:b3:1a:62:84:01:66:56:3a:6a:04:67:80:
         d5:33:bc:9e:13:d1:30:6b:03:c0:7f:d9:e3:a4:0f:3b:0d:7b:
         28:55:b7:1d:b3:89:94:98:3c:0d:2d:1b:de:f7:27:7b:28:00:
         00:5c:f4:14:c3:c1:b9:12:d8:5d:26:da:52:f4:cb:c6:c6:c2:
         8d:4f:b0:a7:cc:02:4a:66:df:12:b2:a4:18:c8:dc:fe:22:0c:
         17:c0:f5:aa:b4:c0:1c:bc:c3:a3:a7:64:33:e9:81:88:4b:4f:
         1e:8f:9e:1e:1c:7d:da:93:a1:fc:32:43:73:4c:84:05:d6:bd:
         ed:b7:dd:0e:b3:6e:d2:2d:18:78:b8:71:b5:a2:bb:72:5d:1e:
         4f:da:86:d1:cb:5e:46:d0:5d:bb:c9:cb:fc:27:d0:91:71:80:
         20:d3:4f:0e:6f:eb:ad:a2:f3:a6:04:3b:3f:e0:4c:9a:93:73:
         3f:e1:00:59:f4:d9:e3:99:80:73:d4:24:3a:ea:e5:c5:2d:f7:
         6a:fd:00:c7:b1:68:95:8c:30:ae:7f:b6:52:57:08:d7:e0:26:
         a3:4a:50:a6:e9:2f:13:7d:a7:b8:ab:2b:b1:c7:84:73:34:13:
         b3:1e:ce:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----