Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e3131322e302f32302d3230203d3e203237363836.roa
File:                     3135302e3138362e3131322e302f32302d3230203d3e203237363836.roa (raw, json)
Hash identifier:          ktb8WMFOhgXHoYT/Z76ZIdRDn8SKwkL+RS4vuPsTrpY=
Subject key identifier:   92:2D:11:87:2E:60:45:71:81:CD:76:F5:72:CC:26:AE:CA:5F:06:8E
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       784C53490155DDB48EE9FB32316F5E99AA8D33D0
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e3131322e302f32302d3230203d3e203237363836.roa
Signing time:             Tue 05 Mar 2024 17:49:28 +0000
ROA not before:           Tue 05 Mar 2024 17:44:28 +0000
ROA not after:            Tue 04 Mar 2025 17:49:28 +0000
asID:                     27686
IP address blocks:        150.186.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4c:53:49:01:55:dd:b4:8e:e9:fb:32:31:6f:5e:99:aa:8d:33:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:28 2024 GMT
            Not After : Mar  4 17:49:28 2025 GMT
        Subject: CN=922D11872E60457181CD76F572CC26AECA5F068E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e6:7f:08:77:59:d5:66:49:46:af:c9:fd:45:
                    aa:13:9f:18:f0:be:78:fe:98:1c:27:df:c1:5d:a2:
                    76:63:2a:06:42:9e:74:80:ad:03:13:a1:38:16:63:
                    f5:1c:c0:3f:d6:f5:02:05:2c:8b:ae:e4:10:f7:78:
                    48:c7:9c:e8:e8:7d:6e:79:cb:38:18:be:ba:9c:82:
                    ba:5f:3a:2e:d4:c9:9f:6a:46:23:7c:e0:dd:f1:a1:
                    04:fc:36:be:08:31:11:bb:f7:d5:74:ca:eb:11:e7:
                    58:91:57:98:3b:07:e3:53:7f:71:3b:7a:e2:2b:92:
                    ed:0c:00:5b:f1:b2:ac:09:8e:6b:09:c1:b2:22:af:
                    eb:0b:83:ed:3c:4b:1e:4f:82:81:8f:9c:09:04:68:
                    0b:41:bc:8a:ca:04:4d:d6:cd:cd:c2:69:6e:79:61:
                    93:b8:8d:6d:71:5c:4a:98:b1:8d:51:db:02:b4:9a:
                    c0:5e:0c:60:5a:68:de:32:f9:39:8f:e3:04:bf:c3:
                    11:5e:76:f2:df:81:1f:22:a8:c9:68:94:d7:df:84:
                    31:10:af:72:d5:28:b2:26:36:61:6e:6e:40:b8:ad:
                    04:5b:0f:9c:05:30:3c:b3:d5:14:31:ca:34:f0:81:
                    03:57:9f:1f:a8:5c:ae:e5:13:1d:57:b1:46:ac:bb:
                    ca:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:11:87:2E:60:45:71:81:CD:76:F5:72:CC:26:AE:CA:5F:06:8E
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138362e3131322e302f32302d3230203d3e203237363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.186.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a6:cd:39:ad:06:44:03:50:97:32:bb:38:22:f2:37:a9:3a:7f:
         9d:ca:64:08:f9:cd:54:4e:9b:5e:80:08:14:2f:8e:41:39:e6:
         84:10:47:51:37:76:f4:a7:f9:86:ec:53:f7:9a:64:30:8a:f4:
         bf:31:91:29:3b:93:f6:5d:c1:8c:30:8f:b5:d4:58:ee:6a:b6:
         1f:4f:56:00:f3:38:2c:88:9d:43:74:63:5e:bc:e7:75:73:59:
         88:d2:68:74:b2:eb:99:1e:c6:5f:c1:bc:f2:ea:87:66:ba:56:
         de:42:66:85:07:6f:23:88:85:f7:3d:2a:9e:4c:6f:1a:b4:96:
         73:e0:d6:12:e5:6e:25:05:e1:92:65:21:42:ee:ee:2b:e4:55:
         dc:22:f5:f7:95:64:22:ba:24:eb:69:02:83:6c:0c:9c:80:75:
         86:1c:fb:75:e4:2f:35:99:27:68:55:24:a1:2e:54:37:38:31:
         09:c3:73:61:b6:a6:1e:74:52:bc:f1:e8:15:3d:69:71:02:8a:
         5c:b4:d4:2b:db:6e:1d:d2:bd:89:bc:7f:0d:48:ab:bb:87:1b:
         03:e3:97:67:33:ce:a1:04:dc:b1:9e:f0:82:6f:b8:d3:ed:fe:
         df:47:45:6a:2b:65:ae:70:a0:da:2d:bf:7c:b5:db:bf:fa:8e:
         0c:2f:e2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----