Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e34382e302f32312d3231203d3e203237383931.roa
File:                     3135302e3138392e34382e302f32312d3231203d3e203237383931.roa (raw, json)
Hash identifier:          fTTeN5GfKTKIb1I1xL9ALCzSSCLDyW/HFQDnloTuXvw=
Subject key identifier:   E4:14:B6:24:37:E9:BA:D6:A9:A0:8B:80:FC:73:38:C8:0E:57:6A:1F
Certificate issuer:       /CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
Certificate serial:       12C8A669A189EACCC14346A62D7CD4766875ABC5
Authority key identifier: F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e34382e302f32312d3231203d3e203237383931.roa
Signing time:             Tue 05 Mar 2024 17:49:33 +0000
ROA not before:           Tue 05 Mar 2024 17:44:33 +0000
ROA not after:            Tue 04 Mar 2025 17:49:33 +0000
asID:                     27891
IP address blocks:        150.189.48.0/21 maxlen: 21
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c8:a6:69:a1:89:ea:cc:c1:43:46:a6:2d:7c:d4:76:68:75:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F12B38684DA6941D5BD82882438B5A6A1BC3EF83
        Validity
            Not Before: Mar  5 17:44:33 2024 GMT
            Not After : Mar  4 17:49:33 2025 GMT
        Subject: CN=E414B62437E9BAD6A9A08B80FC7338C80E576A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:e5:40:8b:59:8c:ff:d8:5f:80:a1:bf:8f:
                    cb:91:e5:13:24:d0:6f:e2:86:e4:71:2a:57:d2:60:
                    c8:74:62:0c:7f:70:f1:ac:d5:78:dd:f2:1f:31:e5:
                    cc:9d:e5:a2:2f:b1:a8:10:9e:3a:13:34:a8:2e:b8:
                    39:e5:84:cb:07:2e:5c:2c:29:7f:51:29:f9:db:6e:
                    6b:de:38:39:c5:7c:9b:58:58:ab:44:8d:9f:cd:d8:
                    f0:40:60:a3:ec:3c:cd:47:64:e3:bb:f6:b8:97:37:
                    f3:0d:d6:9c:29:e9:94:06:bf:98:4c:24:44:23:8e:
                    79:67:a9:61:22:d8:20:96:cf:50:cb:ef:cd:be:7c:
                    f5:a5:19:38:f1:93:47:c7:06:70:51:d9:04:9d:55:
                    26:0d:06:3d:26:46:48:85:48:40:f5:96:20:77:9c:
                    54:39:91:00:12:16:c3:24:8c:8a:e2:49:e0:7d:a3:
                    3c:6f:a3:55:2b:ec:4d:a8:2f:cb:6c:85:cc:cf:c9:
                    31:60:28:63:2e:48:f6:b6:a0:eb:8f:07:92:39:a8:
                    9d:5f:d0:fe:8d:85:a8:7c:29:e6:00:65:dc:bd:2a:
                    c4:cf:96:52:23:9d:52:09:ac:fd:ed:9f:3f:1a:d2:
                    ce:92:55:16:93:93:c8:2a:85:ff:3a:ca:be:99:00:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:14:B6:24:37:E9:BA:D6:A9:A0:8B:80:FC:73:38:C8:0E:57:6A:1F
            X509v3 Authority Key Identifier:
                keyid:F1:2B:38:68:4D:A6:94:1D:5B:D8:28:82:43:8B:5A:6A:1B:C3:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F12B38684DA6941D5BD82882438B5A6A1BC3EF83.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3BBD9B306F675DD9C65FC359A3E8BD02E8800D80737DF1EC845AF5619882349/0/3135302e3138392e34382e302f32312d3231203d3e203237383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.189.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:19:fb:53:64:f6:38:ab:1e:e3:a8:86:db:ee:93:d3:0f:
         4a:fd:d5:14:f1:b4:a6:ad:d8:fd:6e:bb:cd:0e:a1:3b:ae:f7:
         77:48:2e:b3:70:fd:5b:cc:ca:ce:28:c8:fb:3a:c1:d5:ef:68:
         67:05:af:65:58:0e:68:9b:ee:16:80:88:12:6e:dc:78:26:04:
         d1:53:b9:3b:a9:0a:a5:89:2b:1d:03:05:fb:b0:f5:8c:ca:1f:
         2e:68:76:42:6b:94:f3:7b:6b:ed:bf:79:8a:01:3a:24:36:97:
         eb:6d:d8:ea:d4:a7:05:52:a3:c9:11:0d:e8:c1:f7:c8:25:cc:
         34:3c:43:b2:07:21:f6:3e:f0:f9:08:a1:c4:54:2d:c6:85:29:
         85:c9:aa:37:84:69:1d:f9:cf:88:16:dc:01:2f:51:20:96:ab:
         51:a2:dd:d1:6f:22:e2:6a:76:e2:3e:96:b1:34:9b:1b:54:93:
         fb:77:f2:a7:4e:a8:9c:6e:a6:a1:f9:bb:8c:8f:a5:ad:2f:07:
         62:fe:1c:95:45:48:f2:c7:72:41:fe:1f:dc:4d:fb:c3:5e:8d:
         81:d3:47:2d:11:76:5f:6f:da:ab:1b:3e:d9:83:70:97:53:2f:
         7c:3a:20:02:b3:7a:36:b2:a2:69:11:04:8d:b3:f2:ec:c5:39:
         a5:c2:bb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----