Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
File:                     3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa (raw, json)
Hash identifier:          t6XJ/XYzHZPo7KN8aXEqA6hm4qCkrz4OpJU1ExfIE8g=
Subject key identifier:   19:C3:8D:C5:8D:3C:DD:C6:C8:A6:1A:24:13:E8:1B:D5:F3:D6:FF:2A
Certificate issuer:       /CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
Certificate serial:       5033A828CF21C3B4CC71D611EACCC44262147012
Authority key identifier: E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa
Signing time:             Tue 05 Mar 2024 17:43:27 +0000
ROA not before:           Tue 05 Mar 2024 17:38:27 +0000
ROA not after:            Tue 04 Mar 2025 17:43:27 +0000
asID:                     28509
IP address blocks:        201.139.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:33:a8:28:cf:21:c3:b4:cc:71:d6:11:ea:cc:c4:42:62:14:70:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1BAAC863FA77DA084FB6FF68CC4D5008C31552A
        Validity
            Not Before: Mar  5 17:38:27 2024 GMT
            Not After : Mar  4 17:43:27 2025 GMT
        Subject: CN=19C38DC58D3CDDC6C8A61A2413E81BD5F3D6FF2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:4f:3a:61:08:aa:a9:2b:9f:3d:13:92:31:
                    87:43:b6:4c:d8:9b:87:5f:a3:44:a4:3f:4f:ff:4f:
                    35:2e:92:7d:12:3f:60:28:a7:d9:0d:20:2c:33:37:
                    d8:54:3a:f7:fc:f7:54:0c:10:7a:f8:74:cc:51:ef:
                    29:c9:75:ae:55:d8:4e:b2:80:b0:f1:3f:74:a7:c9:
                    e0:81:ea:4e:0b:48:11:93:ca:7c:42:ea:10:38:32:
                    4a:13:3e:a4:2d:cd:57:ca:65:21:bf:c6:35:f4:82:
                    3e:33:4f:db:67:7b:a0:7a:4e:7c:03:c0:68:de:f8:
                    2d:95:ae:65:4a:9b:0a:91:08:77:16:30:98:67:7a:
                    25:ca:ac:7b:30:c4:a3:14:b8:c5:77:89:67:3a:e6:
                    81:ab:bf:ea:a7:3a:02:44:a4:77:77:40:99:f6:86:
                    4c:d8:35:39:21:97:b4:48:e3:c4:c7:6f:61:29:48:
                    03:85:f7:12:f5:75:8d:20:13:85:b0:28:f5:9d:7b:
                    2d:27:9d:98:6e:d7:14:63:ff:57:6d:53:dd:1f:dc:
                    db:7a:a9:55:7e:23:f3:b6:d6:e9:29:d8:41:2c:6f:
                    72:91:e2:22:30:70:00:37:93:51:b2:a5:93:a0:01:
                    b1:bb:a0:ab:e4:68:4c:aa:8f:ef:c8:b4:a8:81:cb:
                    0b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C3:8D:C5:8D:3C:DD:C6:C8:A6:1A:24:13:E8:1B:D5:F3:D6:FF:2A
            X509v3 Authority Key Identifier:
                keyid:E1:BA:AC:86:3F:A7:7D:A0:84:FB:6F:F6:8C:C4:D5:00:8C:31:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1BAAC863FA77DA084FB6FF68CC4D5008C31552A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFACFB8BC7A43BB957D8E486209C80BC90118DFD3ED5EB2CD3282DFA17EA1639/0/3230312e3133392e3134342e302f32302d3230203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.139.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:55:82:11:9e:a2:d3:99:48:43:4a:1f:d8:8a:5b:ab:7e:f7:
         68:c5:95:07:c2:2b:13:8b:b8:67:38:30:3a:59:30:86:65:f0:
         cd:fd:c4:22:51:97:e2:68:b1:ed:ff:a4:5d:db:71:04:62:08:
         0b:1a:84:4e:33:0b:2b:09:af:1b:e4:eb:d4:99:15:c2:45:19:
         06:35:0a:fe:6a:69:df:a3:03:9f:9d:48:47:e0:fc:79:c2:56:
         95:13:8e:0d:83:8e:2f:e4:51:2f:f0:c1:d9:d4:4c:a6:79:9f:
         14:bb:87:25:b4:92:e2:94:56:f6:df:df:f9:39:1e:d9:04:56:
         28:7c:9c:6b:f0:4b:79:c9:98:12:04:26:54:48:8e:28:e2:0a:
         fd:9d:dc:f7:a4:d8:6a:70:14:61:5c:63:76:ba:9c:39:2b:dc:
         8c:c8:6e:04:6a:92:f1:c0:d0:ee:dd:0f:a9:fa:8d:ad:9b:3a:
         6e:63:92:1a:0e:01:04:26:27:14:b1:84:d7:b6:10:8a:88:9b:
         d4:bb:46:53:a8:dc:8e:41:61:47:64:6a:3d:f6:16:5c:ae:91:
         03:8d:4c:0e:b9:05:70:3c:c2:a4:f3:9a:bf:9f:4f:b6:df:42:
         32:ce:b2:2b:34:6d:e0:20:91:be:bc:82:ad:f2:32:ce:7d:c5:
         b8:42:3a:7f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUUDOoKM8hw7TMcdYR6szEQmIUcBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFCQUFDODYzRkE3N0RBMDg0RkI2RkY2OENDNEQ1MDA4
QzMxNTUyQTAeFw0yNDAzMDUxNzM4MjdaFw0yNTAzMDQxNzQzMjdaMDMxMTAvBgNV
BAMTKDE5QzM4REM1OEQzQ0REQzZDOEE2MUEyNDEzRTgxQkQ1RjNENkZGMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ak86YQiqqSufPROSMYdDtkzY
m4dfo0SkP0//TzUukn0SP2Aop9kNICwzN9hUOvf891QMEHr4dMxR7ynJda5V2E6y
gLDxP3SnyeCB6k4LSBGTynxC6hA4MkoTPqQtzVfKZSG/xjX0gj4zT9tne6B6TnwD
wGje+C2VrmVKmwqRCHcWMJhneiXKrHswxKMUuMV3iWc65oGrv+qnOgJEpHd3QJn2
hkzYNTkhl7RI48THb2EpSAOF9xL1dY0gE4WwKPWdey0nnZhu1xRj/1dtU90f3Nt6
qVV+I/O21ukp2EEsb3KR4iIwcAA3k1GypZOgAbG7oKvkaEyqj+/ItKiBywsZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUGcONxY083cbIphokE+gb1fPW/yowHwYDVR0j
BBgwFoAU4bqshj+nfaCE+2/2jMTVAIwxVSowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkFDRkI4QkM3QTQzQkI5NTdEOEU0ODYyMDlDODBCQzkw
MTE4REZEM0VENUVCMkNEMzI4MkRGQTE3RUExNjM5LzAvRTFCQUFDODYzRkE3N0RB
MDg0RkI2RkY2OENDNEQ1MDA4QzMxNTUyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMUJBQUM4NjNGQTc3REEwODRG
QjZGRjY4Q0M0RDUwMDhDMzE1NTJBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZBQ0ZCOEJDN0E0M0JCOTU3RDhFNDg2MjA5QzgwQkM5MDExOERGRDNF
RDVFQjJDRDMyODJERkExN0VBMTYzOS8wLzMyMzAzMTJlMzEzMzM5MmUzMTM0MzQy
ZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzMjM4MzUzMDM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyYuQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBOVYIRnqLTmUhDSh/YilurfvdoxZUHwisTi7hn
ODA6WTCGZfDN/cQiUZfiaLHt/6Rd23EEYggLGoROMwsrCa8b5OvUmRXCRRkGNQr+
amnfowOfnUhH4Px5wlaVE44Ng44v5FEv8MHZ1EymeZ8Uu4cltJLilFb239/5OR7Z
BFYofJxr8Et5yZgSBCZUSI4o4gr9ndz3pNhqcBRhXGN2upw5K9yMyG4EapLxwNDu
3Q+p+o2tmzpuY5IaDgEEJicUsYTXthCKiJvUu0ZTqNyOQWFHZGo99hZcrpEDjUwO
uQVwPMKk85q/n0+230IyzrIrNG3gIJG+vIKt8jLOfcW4Qjp/
-----END CERTIFICATE-----