Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203132303636.roa
File:                     3138362e3132302e302e302f31372d3234203d3e203132303636.roa (raw, json)
Hash identifier:          CFnd3F/Mcg/x/tOWZgd3coQfvUDxORFj601IM/+VYWg=
Subject key identifier:   E1:40:FF:B5:F4:10:E6:6B:57:6A:01:6A:62:4C:2D:AD:A2:B4:70:35
Certificate issuer:       /CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
Certificate serial:       20C4D305BCF68BAE399A760E7A30B367A0793D69
Authority key identifier: 09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203132303636.roa
Signing time:             Tue 05 Mar 2024 18:09:14 +0000
ROA not before:           Tue 05 Mar 2024 18:04:14 +0000
ROA not after:            Tue 04 Mar 2025 18:09:14 +0000
asID:                     12066
IP address blocks:        186.120.0.0/17 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:c4:d3:05:bc:f6:8b:ae:39:9a:76:0e:7a:30:b3:67:a0:79:3d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09612E5CB71DD47C0219F4047F44AF43260AE69B
        Validity
            Not Before: Mar  5 18:04:14 2024 GMT
            Not After : Mar  4 18:09:14 2025 GMT
        Subject: CN=E140FFB5F410E66B576A016A624C2DADA2B47035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:45:98:ed:3b:11:da:c2:b6:b7:c0:5a:62:
                    04:78:93:24:e4:55:14:88:e8:47:27:46:36:ee:6d:
                    5b:50:74:40:28:2b:ea:c6:6a:7a:29:f3:d0:90:90:
                    0e:f3:4e:ba:15:70:98:1d:d9:55:63:c3:8c:27:57:
                    86:4a:53:83:c9:2a:50:f8:ae:ae:93:19:d5:6d:b9:
                    d7:b7:60:c6:ee:7f:65:ef:dc:52:91:9d:24:aa:99:
                    39:a0:5d:d3:b3:b0:2a:68:b7:54:76:44:f1:61:b3:
                    c6:ed:f8:6f:4e:88:5c:e5:00:14:f7:06:b1:a5:b6:
                    06:f4:a1:7c:69:0a:bf:af:cb:51:98:c6:2b:ea:a3:
                    62:bd:2b:87:a3:7f:21:e8:9f:16:5f:76:71:48:a4:
                    6a:56:02:e1:8c:91:6d:6e:3a:40:95:17:7f:2c:3f:
                    e6:fe:a2:52:6c:67:e0:05:f1:6a:df:63:f8:54:1a:
                    99:99:57:7f:3c:dc:b7:52:81:96:55:c9:69:ed:c6:
                    c2:6a:27:71:c3:27:7a:36:c5:81:c1:de:04:3d:ae:
                    1d:c2:d5:a5:4b:08:51:93:1c:9c:c0:33:e2:0e:ec:
                    50:48:3a:55:c9:e2:8b:b1:90:bb:44:39:bd:13:9c:
                    39:41:d1:21:a2:24:06:ae:0c:f6:26:ef:02:00:7c:
                    20:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:40:FF:B5:F4:10:E6:6B:57:6A:01:6A:62:4C:2D:AD:A2:B4:70:35
            X509v3 Authority Key Identifier:
                keyid:09:61:2E:5C:B7:1D:D4:7C:02:19:F4:04:7F:44:AF:43:26:0A:E6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/09612E5CB71DD47C0219F4047F44AF43260AE69B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0E7A9136F1DAD264E04B6736BFAFA723BBF34D615BF712E98916F1DEDC86035/0/3138362e3132302e302e302f31372d3234203d3e203132303636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.120.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         c7:44:49:49:4c:2d:08:b9:9d:31:67:95:96:1b:6c:11:4a:a5:
         e6:3f:b8:6f:04:bf:ff:57:17:73:4a:18:b7:38:66:21:c0:a1:
         2e:27:e4:62:f9:aa:32:26:c1:58:64:a3:cb:e6:6b:54:24:a4:
         46:c8:3c:ca:29:3c:97:3c:4a:07:f5:f3:05:5c:b3:15:63:6e:
         a3:0c:e2:b7:89:b7:f1:10:2d:a2:f1:ae:f3:47:53:e0:e5:c7:
         34:59:2c:fe:5a:7c:60:6a:3a:f5:34:27:d3:e6:e5:da:64:fa:
         f6:4c:64:29:e5:58:9a:0d:9e:ee:60:33:95:26:52:4b:9a:1f:
         f1:21:1f:72:5d:15:8e:8a:a3:1c:77:ec:42:5a:47:b7:04:c5:
         bc:7e:7f:84:9a:a8:19:c1:04:ba:74:2f:0d:71:97:1b:f7:f0:
         77:6b:36:6f:39:a6:70:3a:7e:6b:1d:d3:c5:14:66:fb:0c:9c:
         fd:ff:20:32:56:be:ed:68:f2:fa:03:8c:7d:ae:54:22:43:26:
         9c:7c:8f:20:25:68:2f:08:fc:c8:5c:eb:9d:03:64:fe:77:40:
         7e:a9:14:cd:95:a6:ad:e6:4c:fd:73:09:2b:27:ee:39:9c:2a:
         d5:ac:11:26:4a:6a:50:cc:f2:8a:71:25:83:d1:63:7d:0e:5e:
         7c:c5:48:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----