Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa
File:                     3139302e362e3231362e302f32312d3234203d3e203238303135.roa (raw, json)
Hash identifier:          0sohN/02pJshyFgXJKvsxwCh9SfxeHHr1+KqegnvDos=
Subject key identifier:   D2:04:7D:8A:3F:77:39:8A:EC:7C:4C:0E:10:8D:51:FD:23:50:AA:17
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       64006B3C798D445A51CB04193856A23EC184D900
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:50 +0000
ROA not before:           Tue 05 Mar 2024 18:06:50 +0000
ROA not after:            Tue 04 Mar 2025 18:11:50 +0000
asID:                     28015
IP address blocks:        190.6.216.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:00:6b:3c:79:8d:44:5a:51:cb:04:19:38:56:a2:3e:c1:84:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:50 2024 GMT
            Not After : Mar  4 18:11:50 2025 GMT
        Subject: CN=D2047D8A3F77398AEC7C4C0E108D51FD2350AA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:b5:2e:af:fa:44:ed:6b:a0:38:a2:3f:01:
                    70:e3:4a:7c:2d:be:e1:cf:06:51:c0:d4:9a:d3:97:
                    d3:d7:f1:9e:9e:e9:a7:84:20:d9:e4:d5:0f:0f:d0:
                    f3:61:05:4a:fb:08:f6:38:b6:28:6d:ce:2c:0d:ed:
                    4d:6e:21:6a:6e:ee:ff:26:8e:9b:e2:74:a6:95:be:
                    94:ce:75:7d:4d:9a:af:9e:d4:ef:6a:4e:9f:dd:36:
                    57:fa:0f:33:6b:b2:3b:d7:cb:94:8b:79:47:f4:7a:
                    0c:cd:47:d9:96:6c:93:ec:ce:8c:05:e6:1e:06:82:
                    fc:13:75:73:2a:19:d7:38:58:d0:66:cb:e1:b3:c6:
                    56:8a:24:75:b7:b8:c5:ec:eb:a6:eb:dd:b3:a3:dc:
                    f7:e2:e3:f0:77:29:b1:d0:a6:3b:f3:bc:37:be:1b:
                    13:ae:86:88:8d:0d:2f:09:dd:2e:f8:94:e1:cf:03:
                    20:7f:08:5e:55:f4:c6:e8:ae:2c:eb:41:16:64:9f:
                    51:c5:12:c3:0f:65:8f:a1:00:69:cf:61:8b:2f:aa:
                    b3:fb:85:14:69:38:70:fa:28:12:2c:58:ff:8a:36:
                    28:b6:46:14:0e:4d:a8:98:e4:84:cc:bb:a0:c5:ff:
                    53:05:8d:cd:ad:30:c1:56:6f:95:a5:a7:a9:ed:b5:
                    e0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:04:7D:8A:3F:77:39:8A:EC:7C:4C:0E:10:8D:51:FD:23:50:AA:17
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3139302e362e3231362e302f32312d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.6.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:62:33:ae:dc:4f:4a:9f:57:16:4f:f4:9d:23:c4:9c:c1:c6:
         9b:d0:5f:63:51:97:71:bd:f0:d4:49:3f:81:2c:2d:81:65:72:
         43:5a:94:c3:f1:bf:a5:64:da:3b:2b:0d:58:7c:3d:8f:3e:71:
         b8:97:bb:cc:68:15:6a:52:9d:19:e0:b8:12:ee:c3:96:14:0a:
         80:02:b2:c4:43:3d:0b:f9:bd:c4:3e:dd:f2:22:b0:b9:85:bd:
         e8:32:b2:57:7f:ad:9a:03:0b:9b:99:79:7b:d5:c7:f7:27:f2:
         d1:c7:4a:45:da:82:c8:7c:52:59:77:d7:41:3c:14:a2:b8:81:
         69:f8:f2:04:32:eb:4e:36:33:30:eb:21:c0:be:e6:38:cb:fb:
         ae:75:8c:11:c1:e4:24:1d:b2:f6:df:48:e9:e4:f2:46:3f:7f:
         ca:72:38:a9:32:7c:b5:02:1b:21:01:19:3e:ff:3d:08:ba:28:
         e3:6c:35:24:18:39:74:8d:c4:92:be:12:d5:c9:f0:1d:39:02:
         4b:88:fd:a9:3f:78:2e:3e:fd:ef:b4:39:af:eb:96:39:8c:04:
         2e:7a:5f:4b:64:af:98:5d:ae:e1:ce:cb:90:30:a8:a7:65:a0:
         f7:fa:c9:1f:e2:75:1a:85:1c:94:10:c0:dc:48:c7:f6:d4:bd:
         9b:d6:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----