Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa
File:                     3135302e3138352e302e302f31362d3230203d3e203230333132.roa (raw, json)
Hash identifier:          9YaWRZ1Dz1mWVL3ORWvMAsK87GE2q/SjbYzQPNzipmM=
Subject key identifier:   29:C3:86:99:AC:0D:39:5E:CF:35:EF:A2:0C:84:8F:DF:3B:A8:8E:5A
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       5D44F838F18E30520013266AF92D95E0E3C12016
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa
Signing time:             Tue 05 Mar 2024 17:49:27 +0000
ROA not before:           Tue 05 Mar 2024 17:44:27 +0000
ROA not after:            Tue 04 Mar 2025 17:49:27 +0000
asID:                     20312
IP address blocks:        150.185.0.0/16 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:44:f8:38:f1:8e:30:52:00:13:26:6a:f9:2d:95:e0:e3:c1:20:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:27 2024 GMT
            Not After : Mar  4 17:49:27 2025 GMT
        Subject: CN=29C38699AC0D395ECF35EFA20C848FDF3BA88E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:d2:8d:2b:56:f0:59:cc:bc:54:db:61:27:
                    ae:12:36:21:f6:34:f8:e1:0f:a6:60:dc:2c:da:10:
                    17:c1:d5:0b:5c:e1:ed:6c:e1:8e:9b:b3:77:f4:72:
                    82:71:b4:d2:7b:77:c8:82:8f:07:43:29:b4:2f:6b:
                    9d:7f:16:52:58:6d:70:13:d0:98:74:61:16:c5:21:
                    52:be:7f:21:5d:e6:8a:93:13:a5:4e:0b:4e:1c:64:
                    ce:1e:67:8a:46:ce:b0:60:d5:97:e7:d2:e4:2e:57:
                    23:ef:be:83:bc:c6:5e:0c:3a:13:99:8b:52:6a:4a:
                    49:65:85:d2:86:a0:e9:6d:d1:46:63:10:e1:54:16:
                    f6:63:85:a4:d4:36:47:67:ab:5c:6c:77:d4:53:77:
                    7c:9c:1a:74:73:e9:4c:4e:52:a6:df:31:d1:69:e8:
                    8f:b4:ec:b3:64:23:87:7d:92:ce:73:b3:d1:be:a1:
                    be:66:54:2c:59:b7:65:22:28:1d:14:d8:6e:69:44:
                    46:5d:f7:aa:91:a2:e5:12:04:12:e6:ea:56:b0:ac:
                    f3:fe:17:d8:f6:11:e8:35:15:98:f0:3e:a6:60:fa:
                    c0:a3:4e:2e:9e:4b:07:e0:9c:1d:47:bb:75:bf:54:
                    fe:b5:11:48:f8:65:ed:1c:25:12:ac:5c:f3:e5:dc:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C3:86:99:AC:0D:39:5E:CF:35:EF:A2:0C:84:8F:DF:3B:A8:8E:5A
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138352e302e302f31362d3230203d3e203230333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.185.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dc:61:24:0f:18:c0:25:a3:e7:34:d1:55:72:6f:d7:8c:fb:8f:
         97:1e:57:7d:dc:3d:61:cb:74:45:45:62:b1:e8:87:1e:3d:c9:
         df:f8:dd:d2:74:cd:b8:b9:df:25:ea:27:64:e3:99:3d:41:a1:
         5e:97:7f:2f:12:f1:dc:3d:29:0c:69:44:18:6c:02:b8:35:f8:
         4e:46:8c:f9:c6:fe:16:e7:4f:1d:e8:7a:e1:8a:38:55:61:c9:
         9c:41:e2:7a:40:6f:de:c8:1f:c7:0c:c1:8f:41:50:df:66:43:
         b1:67:c5:ad:04:35:73:1d:67:c8:48:96:c2:b9:b3:74:cb:b4:
         cb:6e:33:10:d4:fb:dc:27:b5:b1:f3:6f:91:66:40:ec:25:2e:
         26:f4:75:b3:b2:57:bd:8f:6c:48:d3:72:5d:12:9f:bf:96:7e:
         7d:2c:9e:54:e1:1d:d5:21:88:81:84:93:7d:95:b2:78:14:e5:
         70:80:54:9b:b1:67:07:cd:58:8d:7e:72:20:72:c8:4d:07:56:
         03:c4:af:49:eb:c6:af:01:cf:81:0f:2c:ae:28:6d:2d:86:5d:
         d6:ca:71:c0:2d:b8:eb:00:24:78:55:b6:a4:59:e6:bc:e0:4c:
         24:7a:8b:b8:4d:fc:27:6c:c8:3a:4a:95:e7:42:fd:2a:d0:2c:
         79:a7:14:e4
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUXUT4OPGOMFIAEyZq+S2V4OPBIBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjEyQjM4Njg0REE2OTQxRDVCRDgyODgyNDM4QjVBNkEx
QkMzRUY4MzAeFw0yNDAzMDUxNzQ0MjdaFw0yNTAzMDQxNzQ5MjdaMDMxMTAvBgNV
BAMTKDI5QzM4Njk5QUMwRDM5NUVDRjM1RUZBMjBDODQ4RkRGM0JBODhFNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmSdKNK1bwWcy8VNthJ64SNiH2
NPjhD6Zg3CzaEBfB1Qtc4e1s4Y6bs3f0coJxtNJ7d8iCjwdDKbQva51/FlJYbXAT
0Jh0YRbFIVK+fyFd5oqTE6VOC04cZM4eZ4pGzrBg1Zfn0uQuVyPvvoO8xl4MOhOZ
i1JqSkllhdKGoOlt0UZjEOFUFvZjhaTUNkdnq1xsd9RTd3ycGnRz6UxOUqbfMdFp
6I+07LNkI4d9ks5zs9G+ob5mVCxZt2UiKB0U2G5pREZd96qRouUSBBLm6lawrPP+
F9j2Eeg1FZjwPqZg+sCjTi6eSwfgnB1Hu3W/VP61EUj4Ze0cJRKsXPPl3OIDAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUKcOGmawNOV7PNe+iDISP3zuojlowHwYDVR0j
BBgwFoAU8Ss4aE2mlB1b2CiCQ4taahvD74MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CM0JCRDlCMzA2RjY3NUREOUM2NUZDMzU5QTNFOEJEMDJF
ODgwMEQ4MDczN0RGMUVDODQ1QUY1NjE5ODgyMzQ5LzAvRjEyQjM4Njg0REE2OTQx
RDVCRDgyODgyNDM4QjVBNkExQkMzRUY4My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTJCMzg2ODREQTY5NDFENUJE
ODI4ODI0MzhCNUE2QTFCQzNFRjgzLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjNCQkQ5QjMwNkY2NzVERDlDNjVGQzM1OUEzRThCRDAyRTg4MDBEODA3
MzdERjFFQzg0NUFGNTYxOTg4MjM0OS8wLzMxMzUzMDJlMzEzODM1MmUzMDJlMzAy
ZjMxMzYyZDMyMzAyMDNkM2UyMDMyMzAzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCWuTANBgkq
hkiG9w0BAQsFAAOCAQEA3GEkDxjAJaPnNNFVcm/XjPuPlx5Xfdw9Yct0RUViseiH
Hj3J3/jd0nTNuLnfJeonZOOZPUGhXpd/LxLx3D0pDGlEGGwCuDX4TkaM+cb+FudP
Heh64Yo4VWHJnEHiekBv3sgfxwzBj0FQ32ZDsWfFrQQ1cx1nyEiWwrmzdMu0y24z
ENT73Ce1sfNvkWZA7CUuJvR1s7JXvY9sSNNyXRKfv5Z+fSyeVOEd1SGIgYSTfZWy
eBTlcIBUm7FnB81YjX5yIHLITQdWA8SvSevGrwHPgQ8srihtLYZd1spxwC246wAk
eFW2pFnmvOBMJHqLuE38J2zIOkqV50L9KtAseacU5A==
-----END CERTIFICATE-----