Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3138362e39362e3235322e302f32322d3234203d3e20323632313436.roa
File:                     3138362e39362e3235322e302f32322d3234203d3e20323632313436.roa (raw, json)
Hash identifier:          sVDEwEIGJMe3CLK1xWja97k4HxuJy7YA3NexZym4kdA=
Subject key identifier:   29:CA:AB:D6:B6:FE:DF:74:89:2B:3B:DC:A6:9D:31:0F:C3:0B:86:D8
Certificate issuer:       /CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
Certificate serial:       690D597B1A284282BD67693EF62B73EC58D93607
Authority key identifier: E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3138362e39362e3235322e302f32322d3234203d3e20323632313436.roa
Signing time:             Tue 05 Mar 2024 17:56:39 +0000
ROA not before:           Tue 05 Mar 2024 17:51:39 +0000
ROA not after:            Tue 04 Mar 2025 17:56:39 +0000
asID:                     262146
IP address blocks:        186.96.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:0d:59:7b:1a:28:42:82:bd:67:69:3e:f6:2b:73:ec:58:d9:36:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683
        Validity
            Not Before: Mar  5 17:51:39 2024 GMT
            Not After : Mar  4 17:56:39 2025 GMT
        Subject: CN=29CAABD6B6FEDF74892B3BDCA69D310FC30B86D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:88:79:93:4f:fb:59:0e:bc:e2:14:cb:7a:
                    5e:fc:97:e8:fe:c5:ba:a7:8d:ee:64:4a:d0:15:c6:
                    a1:a4:f1:3f:6f:ba:f5:de:e1:9c:a1:ee:57:ba:44:
                    93:70:e2:7a:07:b5:3e:15:86:55:fb:3a:7b:20:eb:
                    c8:12:40:ee:6d:81:86:e2:51:ae:9a:e0:f1:64:18:
                    85:e9:a7:07:f5:69:d3:9c:49:16:f5:36:65:83:61:
                    7b:c4:66:f0:9a:40:1a:f2:f1:67:b3:e3:35:74:a5:
                    9c:fb:70:77:b8:16:ae:79:50:a3:8f:c1:0e:db:1b:
                    e6:7e:17:b6:da:59:0c:86:78:3e:2d:33:60:d3:6e:
                    d7:f5:ef:2a:0f:51:5b:fa:f2:26:0f:8c:58:4f:9a:
                    ba:50:6a:e7:99:43:7d:86:f5:74:ce:d9:75:62:6e:
                    5c:20:8d:d6:6d:61:07:2a:ce:83:2d:1f:48:e8:f6:
                    f8:bb:98:ad:58:3c:3d:a1:ae:99:40:65:ee:ff:39:
                    11:37:4b:87:58:c0:f9:77:99:70:1d:40:14:22:6b:
                    c0:8b:ac:c8:de:9f:58:35:77:71:c1:b1:9b:ad:48:
                    45:65:ab:ab:9f:53:51:e0:4e:e3:1e:45:ad:be:53:
                    8e:ad:a6:39:a4:ae:12:a0:38:f2:4e:ae:ea:9c:80:
                    8e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CA:AB:D6:B6:FE:DF:74:89:2B:3B:DC:A6:9D:31:0F:C3:0B:86:D8
            X509v3 Authority Key Identifier:
                keyid:E8:9E:A7:20:75:24:FF:2A:C1:EC:7B:A9:F4:DB:06:11:6C:C6:D6:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E89EA7207524FF2AC1EC7BA9F4DB06116CC6D683.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AC3FC7664DC1A1621E7A5D246643C20BE3DEA6345AB0EE180974D4B4D5FFFD59/0/3138362e39362e3235322e302f32322d3234203d3e20323632313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.96.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:81:9a:51:25:63:2f:81:4f:e5:96:30:30:2b:d3:49:84:74:
         ed:c8:12:67:94:f2:12:0d:4c:b2:c0:0e:c4:a6:bf:f4:fe:18:
         94:9f:e4:67:dc:01:a5:5d:6a:3f:d9:f5:13:f2:63:f9:03:50:
         6b:92:59:cb:7c:e6:74:dd:27:98:16:dd:c4:2d:f6:b3:89:eb:
         a4:7e:57:c5:41:8f:ee:66:38:7c:32:63:b0:16:86:51:7a:a9:
         13:9a:dc:bd:26:90:c5:ad:72:f1:28:89:91:9c:78:d9:00:08:
         33:be:a5:b5:b8:bc:3b:af:4f:c2:8c:25:a7:cd:93:e8:fe:12:
         57:4f:8a:1c:1b:cc:da:60:d2:ca:9f:dd:d8:c9:12:47:8a:68:
         29:40:23:0a:a7:71:68:8b:83:fd:02:c7:7b:3f:3f:b7:de:ee:
         88:7a:bf:4b:56:4f:9d:23:4f:7c:7a:1a:23:c1:09:e2:f2:96:
         fb:76:4b:27:0f:be:3b:7f:52:61:63:bb:1b:59:95:fb:3c:b7:
         91:64:8d:0a:48:ff:9b:da:cd:71:8b:1c:3c:21:d0:06:65:92:
         c9:d3:9a:27:91:8e:ad:d8:82:11:2d:ed:cd:a1:a0:75:46:3f:
         cb:56:35:96:5c:47:8a:15:94:c1:6d:2a:4d:5c:7d:a9:43:62:
         9c:25:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----