Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa
File:                     3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa (raw, json)
Hash identifier:          npJR5IRuW79TfLd+RuSWn121c+W3ViNvTQlZtwA6J5c=
Subject key identifier:   05:C5:9E:4E:A2:C7:DB:C4:42:A8:C5:CE:CF:1E:78:AF:6A:3F:37:A6
Certificate issuer:       /CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
Certificate serial:       08E1C00F148A0E6E8141783EC694C5E4868002ED
Authority key identifier: B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa
Signing time:             Tue 05 Mar 2024 18:11:46 +0000
ROA not before:           Tue 05 Mar 2024 18:06:46 +0000
ROA not after:            Tue 04 Mar 2025 18:11:46 +0000
asID:                     28015
IP address blocks:        201.219.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e1:c0:0f:14:8a:0e:6e:81:41:78:3e:c6:94:c5:e4:86:80:02:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6C16AD4F82E72D9287A5D4EB99768B0C41C8061
        Validity
            Not Before: Mar  5 18:06:46 2024 GMT
            Not After : Mar  4 18:11:46 2025 GMT
        Subject: CN=05C59E4EA2C7DBC442A8C5CECF1E78AF6A3F37A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:56:db:b3:7e:5f:dc:31:51:11:0e:7f:24:d7:
                    5d:b0:e8:70:4b:a9:f2:38:04:ff:33:08:b9:bf:ab:
                    b6:e6:ec:7e:2d:5c:17:b7:80:26:4c:66:76:11:56:
                    00:52:76:a9:f9:13:d0:b0:6b:85:3c:16:4b:5b:d6:
                    b5:84:8b:a8:58:91:93:22:0e:9e:61:95:19:e9:1d:
                    94:7c:15:68:52:ef:73:62:fc:97:88:56:89:84:66:
                    9e:35:21:53:10:94:c6:bb:81:b3:e7:bf:f6:d0:40:
                    b6:c6:73:c3:c4:31:08:5a:24:69:3e:c8:5c:00:36:
                    08:36:3d:b9:6c:88:76:fb:0a:13:15:58:b5:e3:e9:
                    d2:8d:b8:ee:e9:a5:43:99:e2:0f:84:1c:fd:5b:e1:
                    41:91:d3:02:77:2b:dc:e7:e6:09:e0:7f:77:c8:c6:
                    57:19:c9:22:cc:7a:1c:b7:10:c4:3b:0d:08:d5:3c:
                    23:ac:95:fd:7b:cb:73:b3:3c:69:28:71:e9:e0:15:
                    b8:f9:8f:a9:c3:b3:04:33:52:10:f0:a1:c9:81:b8:
                    31:82:e4:ff:51:6a:9a:14:4f:0a:f4:dc:b7:22:b8:
                    f5:6f:6c:16:94:73:70:da:4c:e2:a8:34:22:66:d7:
                    6c:a3:09:90:a1:1b:7a:b4:05:b0:98:95:71:fd:fa:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C5:9E:4E:A2:C7:DB:C4:42:A8:C5:CE:CF:1E:78:AF:6A:3F:37:A6
            X509v3 Authority Key Identifier:
                keyid:B6:C1:6A:D4:F8:2E:72:D9:28:7A:5D:4E:B9:97:68:B0:C4:1C:80:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B6C16AD4F82E72D9287A5D4EB99768B0C41C8061.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3D500DFD7BB1A6A132644D93CFDF53174B8435A640F8BA7402E6E6E13FB0536/0/3230312e3231392e3136302e302f31392d3234203d3e203238303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:40:f5:0c:1a:ec:ec:0c:d3:96:99:1f:da:4f:9d:b7:6a:59:
         df:c7:6c:d3:9e:74:48:b1:de:e3:f7:9a:9f:0e:a3:4b:03:0f:
         87:1d:f3:db:cf:c2:b0:68:2a:f1:14:fd:ed:a8:07:50:5b:6a:
         3c:12:a8:75:c7:8e:17:7f:38:c2:dd:b2:14:bc:a6:c8:e6:73:
         08:93:99:83:e7:61:e2:7e:1c:13:ca:6c:81:5c:dc:6c:00:08:
         e4:52:5d:b1:41:1a:df:08:c2:4a:a6:62:a7:2d:2d:ac:da:67:
         e8:e7:1f:52:19:11:22:e0:ce:17:2b:49:c7:82:fd:58:26:69:
         e1:d4:4f:55:5b:c2:98:6b:26:e7:10:dc:8f:94:45:e5:a7:0f:
         85:6c:19:80:22:c2:0a:d5:7d:eb:27:6e:37:5e:00:91:ee:c5:
         c2:32:cf:36:47:16:c2:3e:2a:81:da:87:af:65:0e:97:15:8f:
         3e:a8:fc:aa:93:d4:00:48:0b:d3:6c:ef:3e:c7:44:7d:eb:d0:
         4b:ad:3e:2e:e5:11:47:95:b0:2f:a4:4b:80:41:0c:33:9c:a6:
         8b:f0:1f:1f:62:b0:22:da:f9:dd:bf:bc:1f:28:f8:a1:d5:a1:
         4f:9e:30:db:f3:4a:a9:1a:c5:00:5a:30:72:74:2e:55:43:c1:
         47:be:ae:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----