Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3138362e352e3136302e302f32302d3234203d3e203237383736.roa
File:                     3138362e352e3136302e302f32302d3234203d3e203237383736.roa (raw, json)
Hash identifier:          0S3J2HKX/PKfka10CBn39RRXJH+SyDS2P2BPquJkOW4=
Subject key identifier:   65:1B:4D:71:16:E9:87:3E:5F:E8:D2:B0:FE:18:9F:59:27:34:DC:2F
Certificate issuer:       /CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
Certificate serial:       386CA9D9F80CF9B4F434F0E68CB768F2CDC18AC0
Authority key identifier: 4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3138362e352e3136302e302f32302d3234203d3e203237383736.roa
Signing time:             Tue 05 Mar 2024 18:14:58 +0000
ROA not before:           Tue 05 Mar 2024 18:09:58 +0000
ROA not after:            Tue 04 Mar 2025 18:14:58 +0000
asID:                     27876
IP address blocks:        186.5.160.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:6c:a9:d9:f8:0c:f9:b4:f4:34:f0:e6:8c:b7:68:f2:cd:c1:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31
        Validity
            Not Before: Mar  5 18:09:58 2024 GMT
            Not After : Mar  4 18:14:58 2025 GMT
        Subject: CN=651B4D7116E9873E5FE8D2B0FE189F592734DC2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:b0:3e:06:0f:ac:85:f1:36:1a:1d:b1:51:
                    67:0b:74:61:1c:8b:d2:a4:24:63:06:ff:df:41:ac:
                    46:74:dd:d8:8b:d0:a9:e1:53:ce:1f:1e:00:76:10:
                    45:71:c2:89:33:87:ba:b1:eb:a4:57:05:6a:ea:50:
                    ad:08:55:5e:eb:60:cc:ab:7f:c4:63:c3:25:b7:b5:
                    f4:c2:f3:9c:4b:d5:c4:b4:d8:e7:d8:83:da:60:90:
                    25:26:11:51:5c:0b:42:f6:1f:f2:02:f9:74:03:ff:
                    ad:39:36:a8:d2:38:84:c5:3d:a1:a4:20:18:e3:85:
                    14:7a:25:de:97:7b:46:6f:58:ea:e2:13:41:80:c5:
                    92:fc:ed:63:9e:ef:3f:30:bf:fa:38:88:48:1f:77:
                    74:63:6f:ba:6d:57:28:e0:7e:1c:19:59:e4:d2:d4:
                    61:ad:c2:e3:ca:33:8c:50:f8:4d:45:c3:43:8b:b9:
                    df:19:5f:8e:82:77:ca:c3:71:28:41:a6:65:38:2a:
                    6f:73:f0:64:a1:fe:15:67:6e:9c:34:95:7f:92:72:
                    33:73:2f:a1:7e:86:9d:e8:e0:d1:e3:1e:f8:e0:cc:
                    3d:d7:85:72:3f:41:70:2d:09:71:88:1d:3f:2a:03:
                    fc:d4:3e:24:f5:1d:ee:07:3f:61:03:c7:68:b8:18:
                    9f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1B:4D:71:16:E9:87:3E:5F:E8:D2:B0:FE:18:9F:59:27:34:DC:2F
            X509v3 Authority Key Identifier:
                keyid:4C:C0:F6:F5:5E:2D:8E:C1:7B:01:31:A0:7F:A2:E8:C0:5D:E6:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC0F6F55E2D8EC17B0131A07FA2E8C05DE62E31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B8488B37E30618A1B5C7A3B5EEAA5401A4A4F7FB58DE8439D26B66EBD2A2683A/0/3138362e352e3136302e302f32302d3234203d3e203237383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ab:f3:5e:fc:f0:3c:0e:b4:4b:d0:8f:f5:4f:bb:e1:b0:89:12:
         78:25:9f:e6:64:73:44:cb:c1:27:4c:b1:af:a3:be:fb:88:da:
         b8:58:f0:c8:f3:73:2a:cd:d6:ea:81:a4:36:7e:d9:cf:e5:5e:
         cd:75:8e:4b:65:04:31:0a:0b:d0:7f:f6:d3:11:9a:96:97:0b:
         f6:57:25:90:e7:3a:41:ec:ad:54:6c:bd:ef:13:9d:85:64:85:
         a5:91:77:09:13:a7:a1:9f:35:50:01:5e:7f:0b:a6:48:b3:fb:
         36:16:35:f8:a1:e3:3d:ec:0b:78:ac:fb:91:c3:9d:cc:36:1b:
         c9:40:0f:3e:c3:4b:5b:6f:33:e3:2a:29:82:49:b8:6c:67:c9:
         1e:63:99:08:51:02:45:fe:fd:d7:f3:2d:8e:4f:aa:58:cc:e3:
         14:31:91:c3:47:2d:87:14:1c:34:34:c8:c4:61:87:58:04:a0:
         4d:b3:3c:a2:8c:3a:f6:20:de:0e:eb:90:87:22:39:c7:23:2a:
         06:47:00:02:d3:58:f5:a9:b6:17:db:b7:13:b1:c7:48:57:6c:
         63:74:ce:99:21:17:af:28:05:68:26:19:22:d4:1b:a5:1b:72:
         7d:56:c6:32:7e:6e:a8:89:d7:47:66:d2:33:7b:14:72:2c:a6:
         cf:68:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----