Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa
File:                     3136382e39362e302e302f31362d3234203d3e2033353937.roa (raw, json)
Hash identifier:          avUb/X7uSGbIibrMM1JjRQAsqPs8xNo+DZKiZFG1B5c=
Subject key identifier:   13:9C:5B:39:98:D2:25:12:70:83:C3:A4:4F:9A:E8:78:57:10:9D:B7
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       7CE7F368D1521EE83D87CCA1171D1138AA731FA0
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa
Signing time:             Tue 05 Mar 2024 18:20:00 +0000
ROA not before:           Tue 05 Mar 2024 18:15:00 +0000
ROA not after:            Tue 04 Mar 2025 18:20:00 +0000
asID:                     3597
IP address blocks:        168.96.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:e7:f3:68:d1:52:1e:e8:3d:87:cc:a1:17:1d:11:38:aa:73:1f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Mar  5 18:15:00 2024 GMT
            Not After : Mar  4 18:20:00 2025 GMT
        Subject: CN=139C5B3998D225127083C3A44F9AE87857109DB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:44:a8:5d:d6:bd:84:a8:e0:09:2b:b7:f4:d1:
                    43:00:30:1f:2a:9a:31:53:02:16:46:f0:44:15:56:
                    21:dd:5d:b6:40:4c:84:b6:e8:01:c2:47:fc:23:ef:
                    64:ae:ca:85:2e:3f:4d:d6:c1:57:ed:c0:c3:e1:20:
                    f0:95:30:47:50:c8:73:4f:85:50:e7:6e:f1:7b:cc:
                    3d:34:98:1d:b7:2c:f8:0b:8c:c1:dd:9c:d2:88:af:
                    e4:12:e0:c6:53:80:c2:28:40:e1:b6:48:72:60:bf:
                    36:3e:36:f2:6a:d3:ed:aa:ee:1d:d4:e5:37:40:75:
                    b7:a2:ff:ee:e8:50:fc:b4:a6:8c:95:e1:1f:b7:56:
                    3b:09:9a:67:83:d8:0d:e6:5b:bc:aa:66:31:bb:b9:
                    c5:41:19:82:6f:f6:0c:dd:7f:b8:d2:b2:ba:89:2c:
                    c1:f8:61:66:0e:9a:d9:ad:58:d2:7f:ca:df:22:6b:
                    54:74:87:bc:e3:ad:98:44:fa:06:54:dc:f5:a6:a0:
                    11:3a:50:cf:ba:23:6c:29:aa:6c:83:7e:05:7c:e7:
                    94:67:cf:f3:b2:95:16:0a:84:4c:a1:ea:8e:a5:2b:
                    3c:4d:14:26:3d:82:d0:f5:05:3e:02:60:6f:e0:47:
                    c6:a0:22:28:8a:12:41:d4:8a:6e:b0:d9:49:a0:1a:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:9C:5B:39:98:D2:25:12:70:83:C3:A4:4F:9A:E8:78:57:10:9D:B7
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e302e302f31362d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:bf:46:92:54:55:a3:13:86:1b:a9:7c:73:ed:43:56:c7:48:
         0e:82:60:de:ea:9d:c7:46:10:9a:ed:98:c6:f4:2b:25:53:ee:
         45:cf:0d:0c:68:18:c5:f6:7f:0c:ed:32:ed:12:1c:1f:4b:68:
         61:c1:ce:e4:6d:2f:94:e8:60:20:8a:c9:c4:a2:71:07:17:83:
         fb:06:d1:03:bc:44:93:3d:8c:8e:ba:4a:7c:11:5e:fc:94:48:
         28:85:91:19:c6:14:a9:8d:b4:33:20:b4:8c:74:cd:ce:e5:40:
         96:4d:b9:4b:b2:77:c5:10:8d:0b:78:3c:d3:aa:0d:00:32:1a:
         0c:f4:27:a5:07:3e:34:a4:51:5b:0a:92:32:f3:43:90:00:4c:
         ac:bd:70:b3:97:f3:c8:d7:34:75:3b:88:20:3a:b1:84:bf:a2:
         48:73:b2:ac:c7:b1:0e:ac:1b:4b:69:b0:79:fa:2c:17:b9:77:
         15:f9:96:98:a6:58:c6:3f:87:54:cf:38:71:12:8d:53:18:81:
         2b:10:9e:62:7a:c9:44:14:65:ba:06:b8:c2:59:88:b9:ed:fc:
         ad:c2:aa:89:39:9d:34:c5:2a:9d:ae:7f:84:ce:57:cd:a9:c2:
         84:4d:91:ea:05:91:c5:52:01:bd:2c:f9:b5:42:df:db:3a:ec:
         64:62:92:9d
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIUfOfzaNFSHug9h8yhFx0ROKpzH6AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxNDEzMjA0NTJFOURBNDQwNEM1OTQ0NDUzNjBFNTMx
NjU1MDgyQTAeFw0yNDAzMDUxODE1MDBaFw0yNTAzMDQxODIwMDBaMDMxMTAvBgNV
BAMTKDEzOUM1QjM5OThEMjI1MTI3MDgzQzNBNDRGOUFFODc4NTcxMDlEQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRKhd1r2EqOAJK7f00UMAMB8q
mjFTAhZG8EQVViHdXbZATIS26AHCR/wj72SuyoUuP03WwVftwMPhIPCVMEdQyHNP
hVDnbvF7zD00mB23LPgLjMHdnNKIr+QS4MZTgMIoQOG2SHJgvzY+NvJq0+2q7h3U
5TdAdbei/+7oUPy0poyV4R+3VjsJmmeD2A3mW7yqZjG7ucVBGYJv9gzdf7jSsrqJ
LMH4YWYOmtmtWNJ/yt8ia1R0h7zjrZhE+gZU3PWmoBE6UM+6I2wpqmyDfgV855Rn
z/OylRYKhEyh6o6lKzxNFCY9gtD1BT4CYG/gR8agIiiKEkHUim6w2UmgGq+9AgMB
AAGjggLBMIICvTAdBgNVHQ4EFgQUE5xbOZjSJRJwg8OkT5roeFcQnbcwHwYDVR0j
BBgwFoAU9RQTIEUunaRATFlERTYOUxZVCCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdGODEzQ0QxMDY2QkU3RjdDNDlCNjA2NTJFRDJDN0FD
RkVDODYzMjQ0M0E2MTlCOUE0N0JCRjI5NkU1NEU5LzAvRjUxNDEzMjA0NTJFOURB
NDQwNEM1OTQ0NDUzNjBFNTMxNjU1MDgyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTE0MTMyMDQ1MkU5REE0NDA0
QzU5NDQ0NTM2MEU1MzE2NTUwODJBLmNlcjCBwQYIKwYBBQUHAQsEgbQwgbEwga4G
CCsGAQUFBzALhoGhcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3RjgxM0NEMTA2NkJFN0Y3QzQ5QjYwNjUyRUQyQzdBQ0ZFQzg2MzI0
NDNBNjE5QjlBNDdCQkYyOTZFNTRFOS8wLzMxMzYzODJlMzkzNjJlMzAyZTMwMmYz
MTM2MmQzMjM0MjAzZDNlMjAzMzM1MzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAKhgMA0GCSqGSIb3
DQEBCwUAA4IBAQCkv0aSVFWjE4YbqXxz7UNWx0gOgmDe6p3HRhCa7ZjG9CslU+5F
zw0MaBjF9n8M7TLtEhwfS2hhwc7kbS+U6GAgisnEonEHF4P7BtEDvESTPYyOukp8
EV78lEgohZEZxhSpjbQzILSMdM3O5UCWTblLsnfFEI0LeDzTqg0AMhoM9CelBz40
pFFbCpIy80OQAEysvXCzl/PI1zR1O4ggOrGEv6JIc7Ksx7EOrBtLabB5+iwXuXcV
+ZaYpljGP4dUzzhxEo1TGIErEJ5ieslEFGW6BrjCWYi57fytwqqJOZ00xSqdrn+E
zlfNqcKETZHqBZHFUgG9LPm1Qt/bOuxkYpKd
-----END CERTIFICATE-----