Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa
File:                     3136342e37372e32382e302f32332d3234203d3e2037303034.roa (raw, json)
Hash identifier:          2QOjVckn+WscA8h2aS/DpWm4RuwVFd+Amx9PZDI19n4=
Subject key identifier:   7E:D8:67:B0:DD:3E:40:A0:54:86:AD:B5:B0:18:C9:EE:EE:2F:DE:0E
Certificate issuer:       /CN=2652C1433114197317FCA49E051F361760D69E0E
Certificate serial:       7D7232826DD7D40A38B015F63860D50D59004F0C
Authority key identifier: 26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa
Signing time:             Tue 05 Mar 2024 18:22:55 +0000
ROA not before:           Tue 05 Mar 2024 18:17:55 +0000
ROA not after:            Tue 04 Mar 2025 18:22:55 +0000
asID:                     7004
IP address blocks:        164.77.28.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:72:32:82:6d:d7:d4:0a:38:b0:15:f6:38:60:d5:0d:59:00:4f:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2652C1433114197317FCA49E051F361760D69E0E
        Validity
            Not Before: Mar  5 18:17:55 2024 GMT
            Not After : Mar  4 18:22:55 2025 GMT
        Subject: CN=7ED867B0DD3E40A05486ADB5B018C9EEEE2FDE0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e9:9a:7f:3b:fd:54:4e:a1:99:7e:f4:0f:ce:
                    f8:16:d6:ac:c8:0c:80:1a:29:24:5b:5c:a7:dc:82:
                    65:36:a7:12:08:1a:a3:a8:0e:d5:45:00:8e:76:ec:
                    5e:ec:48:63:7c:e4:1c:e6:ce:e5:c6:f5:2a:e8:79:
                    03:19:ed:ca:de:07:12:6c:de:b7:9a:d0:14:de:a4:
                    f4:86:c6:20:bd:25:1b:37:4c:b6:a3:d4:96:e9:86:
                    2c:18:1f:ba:99:9f:a1:d7:88:b6:10:e0:18:70:34:
                    e4:b9:97:3c:f1:6c:e0:24:11:1f:4b:a2:5a:09:e4:
                    2f:c5:5c:4e:96:8f:b6:2a:44:4b:7e:76:92:61:e3:
                    ff:fe:d7:54:0a:c3:c9:87:3d:d5:6b:5b:8b:eb:09:
                    f0:a5:79:88:53:13:43:b0:5d:ed:e7:96:98:e1:6e:
                    89:cf:75:88:79:03:04:a8:87:cd:e6:55:61:01:be:
                    0a:c0:07:8c:60:b9:4b:5c:ce:db:93:a8:b2:a8:0c:
                    a0:bb:cb:05:0d:91:56:1b:51:f4:3b:74:87:4a:32:
                    e0:6c:19:0c:e9:39:05:58:48:4b:c0:55:89:90:98:
                    f3:48:0f:e0:6e:b7:65:96:b3:2b:ac:d1:6d:0c:0f:
                    05:22:9d:ed:0e:5b:55:08:7f:bb:e0:68:c7:4f:9c:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D8:67:B0:DD:3E:40:A0:54:86:AD:B5:B0:18:C9:EE:EE:2F:DE:0E
            X509v3 Authority Key Identifier:
                keyid:26:52:C1:43:31:14:19:73:17:FC:A4:9E:05:1F:36:17:60:D6:9E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/2652C1433114197317FCA49E051F361760D69E0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2652C1433114197317FCA49E051F361760D69E0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D16AB8CBEB4CB52CDA2A5B208DC3CC7D88479D4727435293B7D3900CDA2D698A/0/3136342e37372e32382e302f32332d3234203d3e2037303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.77.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:a7:f4:c8:e5:50:8e:d7:aa:c4:d8:49:25:89:a6:79:3e:
         41:1d:d7:28:9c:41:ba:6a:f8:16:66:2f:c1:0e:3a:5d:ce:18:
         1d:f5:ef:81:cc:4b:f5:54:70:3e:70:b2:e3:cc:25:8a:97:0b:
         48:08:03:aa:d9:d0:64:fa:9e:9d:67:09:cf:53:09:83:b2:92:
         70:ea:3d:f7:30:d4:09:a6:9d:28:60:c6:ec:39:46:07:0c:0e:
         60:9c:46:16:f3:79:4a:f6:11:8d:54:09:28:89:df:f5:8d:67:
         bc:2c:89:58:f4:a7:5c:25:db:81:6b:56:4e:b3:f1:4b:a7:81:
         00:d9:5b:1d:23:ee:93:9d:97:6b:4e:bb:ca:2d:1d:37:83:14:
         ec:86:f1:cb:d9:d6:8a:3a:60:a0:47:c3:1b:32:4c:10:e5:74:
         34:87:86:08:31:49:78:78:25:59:c3:ae:9c:bb:c1:95:0c:bd:
         32:18:cf:8f:97:07:56:6c:67:c4:22:d9:8e:e1:21:e3:05:62:
         cc:e4:d7:e0:94:30:e9:11:b3:8b:c8:c7:f6:07:94:14:e4:f0:
         02:c1:ed:e9:3b:9d:e6:90:9c:ac:34:8b:9b:d5:a1:5f:a3:9d:
         63:66:0d:ba:aa:8d:33:4e:a9:a9:4e:b5:b8:82:b1:2b:6b:42:
         f5:bd:a5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----