Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa
File:                     3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa (raw, json)
Hash identifier:          lKeQyhnWx0+pm6sFIqmZu+2dNZvgghvdxrStXfIBB0g=
Subject key identifier:   66:A5:CD:4A:77:DA:05:C7:0F:97:BC:39:9E:7F:06:A7:AC:41:30:1F
Certificate issuer:       /CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
Certificate serial:       6D8867908193102838EEAAFE8CF8B260753B1D6C
Authority key identifier: 35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa
Signing time:             Tue 05 Mar 2024 17:42:02 +0000
ROA not before:           Tue 05 Mar 2024 17:37:02 +0000
ROA not after:            Tue 04 Mar 2025 17:42:02 +0000
asID:                     6306
IP address blocks:        181.183.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:88:67:90:81:93:10:28:38:ee:aa:fe:8c:f8:b2:60:75:3b:1d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35705A9ED706FD45725A72D9D83EF1D9B9A12E9C
        Validity
            Not Before: Mar  5 17:37:02 2024 GMT
            Not After : Mar  4 17:42:02 2025 GMT
        Subject: CN=66A5CD4A77DA05C70F97BC399E7F06A7AC41301F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2d:04:c4:c3:08:cf:24:b9:69:4c:10:db:12:
                    a1:fb:c7:18:22:67:49:d6:7a:fc:17:fd:bf:bf:90:
                    65:c3:63:3d:a2:bd:d8:ee:5d:27:80:27:39:2f:31:
                    f2:be:b2:b1:34:8e:b2:69:2c:49:04:56:5b:fd:4e:
                    2e:c8:12:f6:a5:16:74:fa:a8:62:83:f7:1c:d1:bd:
                    47:a0:25:9d:54:2a:00:f9:e0:a4:ec:9b:28:c9:39:
                    bb:6a:30:7f:e7:bd:72:07:e6:b7:f8:4c:ea:88:e0:
                    73:6b:20:a3:6c:78:f5:ae:ac:d7:01:3e:08:8c:e9:
                    fc:47:e8:b3:1e:5d:f7:66:0d:54:bc:1b:a3:80:d7:
                    dc:3c:8c:61:b0:30:f5:3c:96:92:f3:ea:64:3b:93:
                    ba:23:20:52:10:d6:c8:61:08:db:79:86:ef:69:af:
                    e9:b5:8c:05:66:8e:40:42:df:67:a0:09:87:2f:75:
                    09:ab:01:b1:13:cf:56:f4:24:78:a8:0f:6c:78:bf:
                    6d:f4:21:41:a1:1c:9b:9f:03:f2:08:26:ce:ad:fc:
                    4c:91:92:3c:0f:23:ba:ee:55:42:db:e3:e8:d7:e3:
                    a7:f4:9b:10:23:e1:d6:97:fe:20:f3:b7:9b:08:9f:
                    b3:76:98:e4:c8:0f:6d:61:dc:a2:e0:52:a6:05:f4:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A5:CD:4A:77:DA:05:C7:0F:97:BC:39:9E:7F:06:A7:AC:41:30:1F
            X509v3 Authority Key Identifier:
                keyid:35:70:5A:9E:D7:06:FD:45:72:5A:72:D9:D8:3E:F1:D9:B9:A1:2E:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/35705A9ED706FD45725A72D9D83EF1D9B9A12E9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D5FAD6E6CD7CE551643D04D5DFB81669E35B3ACDD1B9376B37C3245319A0E364/0/3138312e3138332e3132382e302f31372d3137203d3e2036333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.183.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:17:2d:e8:b8:76:87:40:f9:9b:84:63:ec:df:0b:b6:86:0e:
         8c:b9:65:38:b1:37:e3:b3:39:13:72:3b:bb:6e:0d:82:91:60:
         a5:31:fe:d5:3d:63:24:79:b5:08:61:d3:66:f2:a9:5b:53:0c:
         6e:36:b9:4d:2c:c7:06:04:0c:c0:fc:30:35:20:af:db:fe:69:
         b8:fe:35:eb:bc:2c:d9:2b:e9:4e:eb:27:58:37:0c:40:a3:6b:
         4c:e0:c0:ac:5a:d2:4b:a7:fc:a9:30:e1:9a:63:9e:76:80:9f:
         61:05:13:0c:83:b6:cd:4c:28:b2:fa:9b:52:d1:25:87:c2:3f:
         bb:07:f5:f0:70:80:d2:b4:4a:62:2f:14:41:c0:a8:91:1f:f6:
         bd:1a:dd:d1:05:f8:0a:3c:52:01:9e:74:3d:4f:8b:79:29:df:
         97:9c:61:5a:bd:4e:b4:0f:6a:85:f7:2b:c0:3b:9a:e8:f3:c6:
         d6:bf:1d:33:a2:1a:6f:9b:33:5d:7d:5f:22:0f:58:63:19:2f:
         3f:56:a5:97:9e:c5:33:5b:48:c5:5e:a0:43:9f:8f:fc:2a:fb:
         c5:f5:2a:61:97:f9:ea:cc:1d:10:b2:94:07:9a:ff:fb:69:31:
         b6:8f:70:fd:40:7c:7b:47:d7:20:08:5a:b4:ec:76:48:e3:f1:
         8c:d6:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----